{"type": "bundle", "id": "bundle--88aa2213-2db7-4b1e-9fae-7a9c692295d0", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--a77a88e4-ad15-40f7-9a67-635abf48884b", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--1adab1a2-b8e9-4ed8-9f9e-11c105038416", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--6fe0408e-1792-4d51-87b7-aee1b94a3c31", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--b7a3389a-4962-4f89-9b1c-63b491a1fcee", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cebdf357-5b24-4958-b557-dbcaa5118f7b", "relationship_type": "located-at", "source_ref": "infrastructure--b7a3389a-4962-4f89-9b1c-63b491a1fcee", "target_ref": "location--a77a88e4-ad15-40f7-9a67-635abf48884b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--46db0cad-fe03-46db-b16d-bf22f5b773fb", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--995cbd82-0d0a-4ae0-a3b3-ab14cbbf3560", "relationship_type": "located-at", "source_ref": "infrastructure--46db0cad-fe03-46db-b16d-bf22f5b773fb", "target_ref": "location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--3c0008c4-2f55-4e69-9930-95caf3c0f026", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--94e105c4-21ac-4da2-8708-f98b6fd14014", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--661a1fc8-ba83-4ba4-b721-f04a6d928639", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--1260f962-2d21-4bfc-8116-57f1f3b0d401", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--60d89238-2ce2-4648-a0d6-a28ef3da185c", "name": "CVE-2022-22274", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--4bcc5cbd-c961-436d-92c1-96e5cf95900d", "name": "CVE-2023-0656", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b541b941-c1b2-46e5-a986-42dffb013c99", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.171.210.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c96ca8-cc78-4bfb-bafe-c6d9ebcf2a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.222.42.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d1c420-634c-4f3f-bf20-4afcb4c954f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.30.160.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb3d9b6-e111-447c-8433-4de6d6424d45", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.34.10.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4bc40a-e475-4f3f-b0f7-83d5a303ea0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.55.164.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a861122-6ec1-41e0-84b5-85cf21006e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.64.106.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7014f065-9bfe-45c7-8a3b-fd08fccf49f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8775bd7f-a4e5-48cb-8a6b-98f1d61489d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bc4645-8b97-42c8-afac-2aa9ea395124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e6dd04-9838-426c-bc1f-125f7f2271c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ecf718-a3b3-4375-8ae3-6d2461cb905e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f9b851-f03a-4649-9202-497f10dc74ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918bc083-bec8-4fb3-91ae-272a40411635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a851c11-3cde-41f3-9ed8-ece74cfd1f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837705cd-9e02-454c-a9e3-4f2051b4d25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bad421e-d6e5-4505-b5af-8d4a9ec3893c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85fa151-d384-4bed-b844-112879186654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5eb3039-84e8-40a0-8a4e-7ab250de2933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fd4491-f0a8-4925-9f54-46a5941c258b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8dff279-f7d8-4232-b666-fc9b313a7042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29b2c13-4bfa-4da1-87ec-74b7583067d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698496fb-ceec-44fd-87f7-37924328c2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e7771c-7305-4821-9211-3217b26971de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e882da7d-bf05-46c1-8748-4699398b7722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6f7eae-e741-43e9-b1db-83ac12513dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72d3af2-6295-4243-8909-4c40db7c2a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2fa087-62f6-406d-8647-3b9f450b2178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fa3228-0c27-457c-a4b7-ef48881cf727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02231a21-e7c6-4b40-ac8e-ff832a7dbd0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99129d67-b578-40d9-96b1-2c9c0d5d2c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0260cd4d-917e-447b-9086-fff63f849300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9458e17-9ac1-4b58-8817-32efc2d133ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212d3f22-7180-438c-b6cc-cc8cdbda9ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764d3e0b-e45d-4c48-8408-0bc2ab47677f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2ddcb1-d69d-42ee-94ea-aabcfdfb3b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1718f333-f22d-45d3-b312-bfb2ae3ec651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8dfc87d-aa90-47bc-9919-8b6b5a3f40ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.58.203.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4625a54c-4689-43e2-900b-c41616f751cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.59.195.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b098abad-9485-4581-b921-1169fffbf398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.55.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8596c75-8ab1-449b-b009-6c14caab40c2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.188.33.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e99de8c-81a9-4576-9af3-c695d778ae54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.200.243.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b53ddf-26b8-4d3b-b53a-a4ddadb03a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.109.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a8974f-1e1b-4394-aef5-7fb74785ff88", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.55.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2b4fe9-b17e-4012-96f5-cc83c30f8157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.35.46.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab3311b-64f6-4547-80e3-0a0c24f3bce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4440830e-1cf9-40c8-a71a-65621d1091f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a4e19d-5eca-4817-b7b4-73a31bdc265d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cfdf84-adf4-44c4-8e2b-12e8411f34b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefc9fdb-0f0a-4e29-80cb-bfb680817ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16d2d15-67ab-4c4c-bf5e-3f6f172d661a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ed8727-d8b7-48ac-967a-276dbce8b808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc536b8-fd6f-4726-acce-21c67f1f7ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d189a4e8-ff1f-4830-9282-f6a276d907ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385696a1-7701-4f2d-a1ae-42cdfa90dd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f793c51f-c52e-4fbf-9d48-439f10d2ca66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896e9984-2e90-4d3b-89ae-d3f41abee4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9990e234-cc15-413d-a316-2991fb94d844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1598889f-d1f0-4f89-a3dc-7c1cb8e7c153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580eac0c-5b18-45d8-8fa6-1e928963c8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e7e282-fc84-42a3-9740-08faef267354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e0de24-b2c6-453a-8e81-12b6ed068971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a85f90-8ea3-4c2b-95a6-b5cfe448eb9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3521dd7-5b99-4796-b623-68ff3c9c676b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.42.46.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d4efae-9225-49e2-943a-04033979c61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.89.134.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567f2359-636d-421a-8d0d-f5d8284034b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.234.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea35c9ba-3c2a-45d8-b62e-d0bffaeaebf3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.140.97.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda97673-3ee6-4825-8d6f-62b45db7b4f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.209.0.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f18b222-2b8d-41c1-a70c-2c05d100a1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd92e41-cb3f-4173-a101-301d8f1e52ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.37.122.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35076687-7d9a-47ff-9a01-2fa06a18d44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.37.22.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bff578-6ad7-4fc2-b547-d6feff208c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.69.167.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211eb63b-26fa-4730-9a27-1aba3111fc56", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.137.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb7d313-87ee-4939-a986-709a5eac1b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfda3f72-4cc6-45d6-9b51-be17cd3066df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183079a3-9f94-4224-8515-1f58f824a4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.211.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0bd603d-50fc-44e0-94ae-7b4ef351bfb9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.108.67.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f0bc09-d389-4db8-9541-332215b526ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.109.244.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01681b22-a328-459f-866f-d6098b914be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.242.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783f13c4-d22b-4c09-a27c-4a68bbaf6b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.242.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83edc27f-2b9e-4353-b474-5236f59ba42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.242.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd9d949-40a0-4ac0-a6fe-ad34befe0016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.242.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b977b4ed-6be6-41d0-a3db-bd139b4ffde6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.242.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0fe5658-a3d4-4dee-81a7-77d5875f94ab", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.125.163.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01bc18b-31cc-41a5-b6e5-b42dd68a6c43", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.126.118.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a44420-1ea3-472f-ba26-561c28dcfe00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.133.105.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a51e5de-bb1e-4500-969c-6e10696e6ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bf8624-b330-4907-a8ca-c3b088580cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8edad9-e257-4685-b9df-65bcf289080b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.140.142.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72807dd6-a4f5-464e-98d7-add4ad4407a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.144.170.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66747ca2-7aa2-4241-a8c5-283cc60fa5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.145.252.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909ac5e5-72f0-4ca4-af47-1bf1fa8d710b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.159.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d583d7-34de-4dff-b462-0b0de5a33d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.147.52.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c9f7b2-5428-4de3-8677-b353f7fbf9b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917b5205-8612-4e8a-bbe1-070c7909bc68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.214.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a9d8f5-5358-4c18-91b3-d7801b9d778a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.16.116.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df3bb4c-4e72-4118-823a-b78dfac004ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.207.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20a75bc-8543-4055-afc7-9348af5d7a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.229.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc6873e-01e9-4145-bb96-f20712a834d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.89.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2941c23e-358c-4b49-a261-d2c19418c8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.168.66.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ace3be6-86d2-456e-8f3b-3a2cf59d6adb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.177.189.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dedc70-da29-4684-abf4-d1d932205d7a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.179.190.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5326d36-131a-4cf5-9cbe-9c92438dd69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77874e0-24ed-4145-b3fa-4c1e74fd6fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.234.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50924215-5496-4277-b547-dcd04bf2c9e5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.190.214.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58914373-adca-4157-a349-c1bd0b48c554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.190.47.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcede3d9-3b3b-4921-94f4-4c08b9d93f77", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.200.22.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bec94d8-e21d-4547-a959-5050f8aeefd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5accd4d4-de17-441a-b9e1-71e3f3b64e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df6fda9-0905-478a-b27e-6730d1bd95c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6796dd-43f6-42b9-9c9d-924a21cecb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0927913-6bce-4f87-aac6-37e289513054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90555257-04ff-41db-8d93-3a8ea8393908", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.206.51.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd40201c-f63f-4fc7-93fb-edba5e39d4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.208.219.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6eef4e-dbc9-45db-a136-cb00083c1208", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.112.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3ee902-f045-4b4c-9ed2-b326226c4839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.95.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb8f69c-6cd7-4bff-b775-dba46ab8f318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f13ab4-12d7-4d55-af98-a1e525129159", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.22.142.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5401d55d-33fc-4e44-9b9c-57773790f4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.224.52.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb02d64-980a-4954-b2c9-3465ab36db8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85d0159-cdea-4e75-85b7-1397ac5dc572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62009e67-9ea2-4c46-ad30-8853f5fb2d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d304ea8-fd6c-4dee-bd2b-19a283914866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee076fa0-906e-4be2-9aac-ca5dd6637cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a8b5a2-21d2-4b41-9429-5098bcbab9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c22e56-3781-45ac-bf24-1d44b3905245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed87c125-8d5d-4d82-a14b-a2475337553e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a61e969-5cf3-4199-90e4-eb0d4cc31a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2511e8c-980f-46c3-be80-d00aad80d2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad63111f-5060-4523-8c49-6d34a0ad3585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090156cf-5cb0-4522-96dd-86ce739117c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd8e4f8-27bb-4261-a9af-4d8e9139ab43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27463ca6-0fd9-4cb8-927c-9af930aff170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1eface-992e-484f-902f-3f73cddea9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423bbf87-3d23-4366-9cf8-9009504fc7c7", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.24.232.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f208d331-aebb-46a0-88d4-454841417589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.242.2.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064e368a-12d7-4bf7-ab17-bee38f3fbc22", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.87.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87336fe-6fd6-480d-93fc-2c04ad5d8989", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.28.224.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c38d735-3267-4fd8-9852-72493779d835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.45.233.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443d794e-a11f-47eb-875d-b1118d205849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.45.234.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adda2f0d-0bb4-40d6-9d88-a87ae62a7ab1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.160.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e98773-6493-42e0-a140-175a00eca4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.182.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb307e8-872f-4fe0-ab21-00c316ea46fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eefaa0d-2396-4904-b49d-6d8a964abbd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.187.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0ec241-a01f-4ac7-b1cd-34790bb0df18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.76.162.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f982f98-0caf-4199-85b8-b77d54368bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.0.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25edec5c-f9f3-4ce6-a2c5-0c3e5e2e18cf", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.121.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1161a8-5c19-4366-a962-a7055adf196f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774fc7dd-d926-4c97-8ccd-5bcec991d5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e994b530-5d40-4dd9-b240-a5fc393679e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5965d19f-28d9-4033-9937-f02adf8ef47b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887c74f4-0f12-4eff-b4d5-e9ee2cf353cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d93012-cc2c-4d80-9186-a5ed65ee128c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6829b2-9596-4611-af33-a5687b23607d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e2c60a-e5ed-4671-8b5e-8b31be7bc8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f97a466-d4a6-482f-923e-942bdb826153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba0fcdb-909b-4fc2-a606-b0f41e68ec33", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.189.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6149b6d3-4067-43aa-993d-84294d9de94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.140.148.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7bd69e-4cc3-4449-a70c-3773cbe68fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354445b8-077f-4f4c-87ca-f40d338c9102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf53f2c1-5874-4fa8-b1f6-d951c86415ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafcce15-1b01-4cfd-911d-d7613dc4e239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d7c4e6-f06d-4593-96f6-6f908f492969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da50ffa5-3f98-45ff-adc2-ef0a295b5040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fc16a6-a1ef-4ed4-b64e-9e834eaad1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33424006-838b-4720-8d21-b3f5d513a636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1e4d74-5668-4d90-b20c-a8aea842da50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06fe3bb7-b741-4d20-a5a4-67ff21309e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc582782-c789-4bfb-b740-8dc35ce6a3f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de89ae3-9403-4b12-9e28-e88ed986ce86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469f79eb-ff42-416e-a13e-6028742d4609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ea7143-930c-4b92-9603-7f94a1af14ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5513f2d5-604e-4427-b8bb-0014b974b0fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a3476d-5187-4b86-a7be-0dab95101a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c41d47-eadc-40ad-9c85-5d08e60fb659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72fd8cd-02de-4d90-a8e7-2e0208bebe6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423b8b59-a97d-4528-9ecd-612747572bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd55e93d-2209-4d02-be79-81fda2470cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc510ef-225c-4a30-99f2-535d45f2a9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9204dc83-30c8-4611-996c-0508b8d16759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484de4a8-cae2-4be2-ac71-0f1cccbde920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45837f4-0bbd-4373-adbc-36dd531fbc95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e11a94e-b8a4-4412-b424-662b6703574f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692399f1-685f-410a-9fe8-2318ce64a57c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091b04fe-7f8e-4c8d-8b35-f9a35c36c244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183cf363-3a6a-4f70-aff5-66c35a0fa48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b08eefb-ba47-4d83-bad1-b81f41943bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312b025f-2318-46c6-b510-bb693edc0964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9535b8-c344-4198-b15c-a63d84072bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c306e86-682e-4fcd-a5df-a8d255607e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05a6851-3a2c-4052-a158-623bd5eaad71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d573b693-ff7a-4664-b84b-bcdcd77cf449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45b3967-2d9a-44f7-a2bd-c297d59b4658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54c5e12-1e28-45bf-bb2d-fa60c2c44a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8ccf7a-0dab-44b9-8110-c88fbb42ef9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f282a7-23b1-4241-aab7-7db00f25d8bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e89d45-0203-43cb-a599-f4e6e6e952e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808f5e1f-8a9e-41c6-b4cb-16313e14d3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce4dfaa-1def-4ade-8892-3124866eaf96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a63bc03-de07-46a0-bf93-a0becdf57501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a5a650-895d-4352-b00c-9601c94f8df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a97838-cb07-4132-84a7-95399735d814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a3fd20-fe6e-42f4-a740-f35d8e3c4927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5cf09f-3ee9-4726-92d8-3c1ed483947b", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.0.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e13f06-ceaa-4f15-8e18-f6d30ec0bb22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.22.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758b8247-c89b-4509-a803-fe67f47bd6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.171.137.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3d5c8f-b421-44be-9712-11bb2d6b7598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.10.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d88d13-9036-4eaf-9630-0e549773e0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.135.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53259498-076f-4013-8c9e-9a733dad9a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.204.222.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05358b1e-c403-47f1-a674-9488078f01fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27100186-cf18-4c24-ab12-af89333856f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.223.84.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a097eb4-9264-4eab-9055-2e124a8dc77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12dd67bd-2027-4316-8926-647d00c3d080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.233.195.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28607aa0-f079-4199-9a68-1ec522942595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b9c77a-326a-4e71-8769-dc4bd9444116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb82e941-7bf0-4f8b-9881-b521470758b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.79.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef775735-10ef-4b48-b00e-5ff2fb950d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.130.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59a2809-8883-46f3-909b-19558622687d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.208.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6db9531-375b-40e1-99f0-8b1e74706e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.32.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfc4047-c5c7-4d44-b9d7-d2e52bd1562b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.55.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d88df3-e438-45e2-9167-6e573465a95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81fcb39f-517a-452c-834c-5a255864128e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58dc89bd-9af3-404d-bcb7-94df05bdd479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.181.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05efb290-5908-415d-b562-fd54a77b9091", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.42.186.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cd4ac1-d6fd-4c2e-be34-acadb97a9ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.111.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91ad7e1-8643-4442-ac43-c828e9fa4349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.117.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42393621-10bc-4842-852b-77a1a86b0883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.17.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e736f9c7-54fd-450e-b5ab-d25effde11b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.240.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14468a45-ef19-4b30-b05e-f963ee64aa29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.86.145']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50618ead-f4ca-4ee3-9cee-c39ab870c37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.120.62.164']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d8edca-28de-4ddf-9e3c-9ae6b9d1d757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.181.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1aa905-1dca-419a-a277-bde3af3f7275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.201.242.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052834c7-8df2-4157-990d-a5e5245934ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.207.227.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4d4f13-e255-4244-bd85-efdb110d8936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.215.175.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6762ec16-08db-4c9c-9f1d-a0474d31a5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.245.146.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246b76f8-f7ca-487f-9c50-fe7a07f776e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.253.68.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ca304d-343d-427f-8178-54cc53942dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.136.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bfcc24-846d-4336-b058-e7804a04d278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.136.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10e5194-f7ca-4699-baba-6397aac43e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.145.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f769f94e-9c38-40dd-8dfb-abcf849aec7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.146.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7f4a61-da8d-49db-beda-1e70c7763e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.166.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3b3fa0-5f8d-4509-9d1e-d52025c21816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.167.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28ad73a-3408-4ba4-a703-e48879d071f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.169.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f3a4f4-d9f8-4ca1-8e90-0fc55f8d21c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcbc81db-d188-4d49-96d7-38fbf8b793b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f41deb-e644-4ab8-968f-664c0132d5a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.0.200.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a68b16-5ee7-4451-9cc0-d6ec97e6e3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb0aa8c-e0f8-467d-a4d2-d5b195490334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49232ee-d768-45ee-8cae-6164bbcd4221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96feda9-42c7-4cc3-b826-afcfb5c249f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a69df4-9891-498a-90c7-71d27ce253c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28cf3ea6-d0e6-4f50-9fce-f5f4bdc9b466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cc320c-05d0-4d2e-8af5-3b3063d52b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2549f0d0-f484-4823-9220-5ad58a449fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec378ce4-a090-499b-816a-091bd27430eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b15c46-0100-4678-a0e7-1217f9092913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4baa025-d45c-484f-9310-fbdad825d4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f825ec-0b3d-4e65-b16c-7c02c7d1feac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1f21f8-e276-47cf-bc91-59ac2e052956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02e2edb-c4e4-4dfa-a6ad-23364c06efb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939d3582-93cb-4c75-859a-a9e303405544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d303470c-dac4-4416-815f-6ec2a0f07de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704e8a2f-1bc8-421c-813d-b81e6aebd80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689755c1-bf8d-4ac5-bf3e-551d6f944eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3fd8517-8dd9-4e54-a4c9-9ff6e7eda325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3423138-cb72-46b7-b659-0a6a05d27607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbccf7e-762c-40d6-9551-6a6e2f0c29f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192d306d-cf30-4697-83ee-e3fc5e4f6243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f782c7-a529-4234-a7d9-7c1397eae5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f547851-74c8-4a10-9c2a-dad017727c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c44819-d09e-45f3-b70e-1d6f8ce81ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11dc34d0-3ca4-49ec-9b7c-adae0bc3f6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e321569-69dc-492f-a476-b38d494f5ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160731a8-ecde-4647-afb7-b0ffbb32999b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916f9796-6da8-476e-8ebe-51928d7e385c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290c2ca5-4a0a-4a78-be75-1d52c12d7464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a037a74-91c4-4e55-a60e-d61d0a9ff5f4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.15.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365649ea-373c-47b6-9268-9204c63a67a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.55.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a875f50d-8b7e-4b10-bb85-4721bd3e8a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.88.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ab57fe-083d-4e97-bbfc-f4a1c9cfb0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.157.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205e6329-ae2e-4d5a-a996-22eef07c9a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.252.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af2e918-8de3-425f-8586-97923e96fa90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.95.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036ab024-3359-4de5-9795-d4cfa5418e93", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.67.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77bb868-c29c-43f9-93ee-f89e30f4f233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.23.10.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4dea79-e5ad-4805-ada5-37fb5446ee09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.23.137.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0e4e1b-fa27-498c-9e26-9fb308bf09dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.147.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78078fb9-fbf3-4323-91cf-2118ab6487ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.186.63.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c768b7df-1ae2-41e1-84d9-a4ba1a49c1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8751509c-3890-46da-9b70-76c55f59fa51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2292d9a5-c082-48e8-a1e1-e860bb6146c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37340a10-9445-4916-aaa4-2a0b35d3a0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4820a00-6da7-4097-8d9d-120eec04bb92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5538b8ea-d1ee-477a-ba74-2bfc8d7290a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77739b8c-cf82-409f-9291-a4629ec90ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d928ff0a-2745-433b-9a32-108567eb850a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e68739-0402-4d6e-82e2-664c86f3bf67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07aa9837-5468-4a87-b04c-6dfe143f1d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43417cf-ff95-48b8-947a-8d05ce6d4979", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.106.239.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19347ce-366b-434c-b5f9-f61bcde5875f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.107.244.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d278a2a1-bc09-420f-bbb5-f630b1cafd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.237.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1612c4-42f9-4c95-a62c-3d6252c7ad8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.238.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c746cc98-b91f-45f7-900d-8edbcdccb664", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.171.116.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bb7115-8e1d-4989-b4f0-de758129543d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.106.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0453c4-e3fc-4588-8e49-8e846dd7202e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1846106-6186-45cc-85e2-6b80af7b750d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.174.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e415caf0-ebb9-4135-a2d1-2b0b2fe11e23", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.245.75.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c282871-b8da-464b-a569-0a41fb97a17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.136.218.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796f8135-e1f9-4984-8df2-5aeca5380021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.179.81.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0cda271-d1f1-429b-aa5f-a3dd670aff45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.179.81.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0bf77c2-4796-4bcd-a835-2e46c46e37d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.249.201.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3748d1fb-2eea-4296-96a6-a70a6e4ea4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.36.26.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00769c0-041a-4ef8-8c61-6ab637382e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.36.75.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084d070c-48aa-4538-9132-f98be00e4d1b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.36.76.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84dda71a-ea45-493b-98df-76e9719c38a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.36.77.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3ec84d-434a-41fa-ac37-d2cb60dae023", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.37.106.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f92a82-18be-491f-afb2-91278925bfc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.38.250.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc79a5f-5977-400d-82c5-ac574197149a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.46.206.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97688f0d-e4cc-40a9-92ad-8c1d87f177ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.46.49.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655f8eb4-1f0a-442b-b734-1a3d3fd5ca7a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.77.149.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6670322-4985-45e9-b5f3-f91a434a6982", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.78.165.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196b75fe-0d67-455d-b495-32d5cdeb2fdf", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.93.196.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6adcdd9-9247-4446-a55d-caa19b3436e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9aa122-c222-487f-a43f-4746d37b32fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77181dfc-9b6a-4569-83f5-9e00d7a5d0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.118.129.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1988270-10a7-4f4d-96a4-3aa69f1153d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.162.154.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0deb69-3f91-4481-a78a-663fe8046941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.228.33.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb9b21a-77e4-40e3-8328-233325b3c866", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.228.5.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46d0684-aded-4eeb-b347-8de9f0bdad8b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.229.174.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6929f5-a619-4135-b661-daf341aaff8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.42.183.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--524cfa56-f4ee-4856-8fe6-55c2f26fcd62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.53.72.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f35e74-fc89-4ce9-af31-8871eca386b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.253.145']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d734f2-6cbd-460e-a602-352b35b9226d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.140.184.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84763179-a4a2-4c94-be30-0ab169325f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.140.187.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61a6ca5-880a-4c14-8299-8366eac22431", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.86.225.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abdb2d2-dcfe-40d4-8b80-0747050be45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.90.220.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082d4b3c-c5ee-4ebf-ac9d-9cc99ea44a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bca0c9-10b2-41fb-be8d-70d112b8be28", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.102.71.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e546764c-0de1-429b-a3b7-13559517c612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.128.217.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3e2623-1c8f-4123-945b-8b94f7f7df1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.131.125.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66617443-d010-4377-9e80-95292541de37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.131.169.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b81bd3-816b-40f7-9579-a7cc724c6780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.160.181.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e53304d-6bc8-48d4-867e-41fe0d088784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.160.251.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8e58c7-a6c7-461e-93f6-3349812ec9fe", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.43.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db3cbc9-773a-474b-9f12-a3a5e0e3adaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.6.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4afdd2a-fa43-498b-915c-1dd4375724e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.164.234.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3895c8d3-c204-46e9-b45e-968bd69dc29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.206.177.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0123f2-64a5-49f4-9a53-fbb41c7bdc3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.211.212.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f746eeea-332b-47a6-a6fe-3a09933502ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.80.92.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a754d094-771c-40a8-ad09-3d4c6a8de281", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.90.83.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f085cfc-6705-406a-a85b-bf70fc3e4c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.96.35.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7afc9fa-df06-4646-bd78-ee99dc47940d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.128.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831d6152-4cba-4974-b31a-f2a72e0602a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec2b1aa-0c61-43da-b23f-be35f8b4f719", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f52f92-ad43-4c8e-b31e-2402e86ab44a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4117e0d-1e88-4ce5-8437-e71efdbb5895", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef837c7-4544-4727-ae9f-e5cba059c8cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.134.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625da8a9-99dc-45df-8ebf-5c00ebb2d3a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfd1baa-9a54-46ef-9a7e-97e1ad2509ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dd96b2-3a2a-4962-9ffc-14161f9ea2ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b76955b-fe97-4dfc-b13f-f9c822d963a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.138.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f1a12b-026b-49a4-8923-984572377598", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db338a4a-2607-4e75-8de2-ff99057831ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4489b2-9388-418c-b991-34c3bfaa556f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6d9e55-7ea0-4a65-a1fc-d5ff3c7a980b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8efaef6-8a72-41d1-b410-01f65946cafe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef324ad4-ea58-431a-b7a9-b9a2475d6947", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.143.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac28158-c328-44ee-a031-08bde7cf7520", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.144.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bc8304-8c43-4d15-8fe9-c205004a37ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.150.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbab0f6-2815-45ae-934a-311643bd63d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7925e855-4e0b-4ff9-8a3e-8d69593bf057", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfa7cb4-9259-44f9-8974-9ba0e0fcec9d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0d6dab-9230-483e-860c-0d8c94001c15", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c7af1e-3598-4c29-906c-346551f66d95", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb17125-356a-4ba2-af87-3bd367d1e6ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acaf31c-00b4-4acb-aa3e-b47d46263e95", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.154.169']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49530ad6-4411-49e0-9eeb-d53e9d1372d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78231395-2f0c-4640-aec7-a869e99e1dff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7eefa5-0a58-477c-b564-f68bbb12abf5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a028ae36-14e7-475e-80be-918a43300a1f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.158.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b75b500-fe7b-47f0-a920-14af52e70dd5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.158.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac7c0a6-0c98-4464-8fee-a207bf3c0f36", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbb1767-af0a-44c9-a88c-d8c65904442b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af4c8b0-025f-4c96-9375-d00102bea18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.174.161.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90c1105-9380-4c70-97cf-33498acd31ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.220.238.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc1f784-3d87-425b-9d4f-5896635d1ec5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.245.49.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9b79e9-6be3-4db8-9a33-a686a84726c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.254.2.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e344dd22-e122-4be8-a80b-324344b52f6f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.242.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf328398-7ce8-4005-9e58-93bed51542d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04dd33f2-3a8c-4d3e-b48b-0da319512898", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.66.37.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447f03ae-3fa0-4dbc-ab05-cf0cceec41b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.84.26.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afac88ef-def5-4cc8-a252-e42d236c24ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.124.124.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f41f97b-95e5-4b96-a2dd-18b46b8ef149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.138.188.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e1a306-8fe9-4c67-aecb-5ff59b146fd7", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.151.112.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c863924-980d-491d-9df9-0d8fde549b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.159.52.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a506d113-5302-4aec-b881-34ead76155cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.178.75.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a47d8e-49f7-4d14-a2ed-33158b13d18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.181.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b155a84-24ea-49b4-bbbc-871db26e5e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573c516a-5829-46ab-9857-1df88441f945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.227.26.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005a3210-66bb-42e5-93e6-da692974c7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28aed573-151d-4b8a-bcfc-52bd7cd5aa47", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.242.177.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad880ff8-f8f9-4e75-9683-944e71f4485a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.28.166.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f571245-6e33-4108-8733-97a9cc6f7c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.48.162.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04645f13-73ea-476d-926e-c6f50ec86252", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.84.178.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a8f6eb-c6d1-402b-9197-3ac3b49ffdc3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.84.84.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1229ebb8-835d-4dc0-b3b2-d78ad761f4dc", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.97.58.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4970d6-94f7-4019-839a-909ae9592382", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.210.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dad7687-f8d3-4504-a8de-9ef7877b5dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.167.6.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e4607d-c9a6-4366-8c30-a84697ca57b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501e60db-abcd-4594-afe9-c76dadbb96d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196c696e-b6af-44bc-bc22-f6bf7b290816", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557ee73e-c1a9-4747-8c21-74918bcaf4db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d6c3e8-9ad7-4e7c-a1c4-e3f0ff0612a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ceb650-b829-4daf-9ae2-753921b103d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6598d5ec-090a-4935-94d1-3f00b7191687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.181.16.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6223c47d-6e83-4594-84ab-390d28cd6665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.231.170.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13db158-c71f-4a90-b03a-b15813d3f8be", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.59.13.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa45324b-61ac-48c6-801f-92e6d93ced5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.167.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4616b0-e166-4602-84d4-3f7ea3c06865", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.68.202.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23361811-3c66-4b51-b63a-7a083323ca55", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.68.202.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207467d7-1754-49b1-9133-bcc04f2ad2cb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.72.231.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c092e7fa-f0f7-43df-b679-b17c1ee0e7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.96.47.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c49d4a7-9522-4e81-a7e5-42def64768c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.168.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1d7cc2-42c0-4c8e-9f7b-5ce081f56bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.169.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd0d525-c4c8-431f-b0d5-8876c3e077b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.13.169.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd6fe47-6a9e-407b-ab47-c0f1de1d4deb", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.164.191.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b47aee5-6c38-4b46-9f7c-3d7ff841e59e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.187.180.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbf77db-afff-4bae-b5ec-277dc59d14af", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.2.22.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e822fa4-3201-41cf-8af0-421ffc6acf18", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.2.62.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0917ea27-2c6d-423d-8dcd-4c4223bcea99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.27.135.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1160372-4ac7-4596-aa97-3d957a4c63bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.80.234.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1666b711-28ed-4230-87ad-291aa19b0c33", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.139.164.171']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19890e6-03d9-43c3-802f-65bc3aad433c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.163.224.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8949eb-b08e-4a50-ab9c-57e635784aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.163.231.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b528747-1134-4a38-87e1-bb3df90c631b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.168.22.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c33044f-c417-451b-b7b7-882141913b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394210a3-8850-462f-a61e-e0f9f1603c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd55175-91f9-431d-8ba9-4bcd804cd8c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ca21d7-d74d-4e4b-bf41-993c4fa5cca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4ed957-d63f-46c6-b19f-e64198c0b64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7771fe-32a2-46f3-b54a-422206bf37d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.37.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f61e4ed-0d20-4bdf-b0db-81c3194c7f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ae19dc-9010-44ab-bc52-6b856434e63c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad257c58-ab02-4388-be28-aac922cf4765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1e00e3-951e-415d-8211-037aa47735d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd369ce-1eb7-4da0-aad7-504d43892fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b52cf05-e69b-4103-aec9-e9b1f0566724", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c76ecfb-cb33-4bd3-a521-df8a51454c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c166d645-f2de-4a78-ae48-51f198947af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74287ddb-f513-4291-a946-9afb8c5451c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3775a4-bcdc-452f-b91c-9b8175860fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec9b7f5-9868-4d57-8751-62a49173a32d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f124ab-d895-4fbb-aba5-394160610a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88993cc5-c305-4621-8251-18d765c5965a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0711d2-1dac-42d5-98d9-0071d97eec83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefa61b6-8acf-44aa-bdcc-e6f37a531aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8cca53-3f05-4da0-915c-9c04a7c027be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0155633a-4499-429f-b2b8-b524ecbdb016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91ef8f4-b4cb-482d-ad76-f06d26cac843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0887c527-b727-43dd-b7ce-e1042fec527a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e05708-bea2-4686-865b-d5d4b2799690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb9a2d1-ebd3-45a0-8d64-f9cd655e8bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4578d8-e4cb-4b3e-87ed-cb37060a0afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d8641c-6286-421f-b62c-a5e4c07744bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c9bb89-f7b8-42bd-9700-91c4d54edac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e50b96-68c5-4101-b6a6-b6e96d5b2093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eeb5799-481a-4847-a4a8-6bf2370ff625", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf43fcb-2836-4437-a236-145186a63e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f090c66-6733-4ba5-a1dd-e9388045667b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede68320-4dcc-48ee-8247-34ac2dc28f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae793411-4b08-4a1a-b4d3-e6e956c7a8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca3a74c-5dfe-4ac3-b119-e6e21ee0f5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ca4cb2-864d-4563-8d22-9650f03f6ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad8ac4c-5f86-49f4-b0cd-9360906259d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d602333a-cfc9-470a-9565-2e18a28283fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ee5e23-f4d0-48d7-9fc6-10276de8c748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.73.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4681ad-b76c-4692-965c-bb06bd238b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e500e209-320b-449f-bbd3-681047bd3de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d5260b-22b9-4056-acce-546464d79217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbdd549-ba28-4329-9143-c5d90dcad79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6815ca-835c-4946-a7f2-b57453400b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb401e1-083a-4772-9ede-0c6de4048360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f67a0d-f7b2-42e6-b319-fd009830d917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffbc0a4-20b9-4bc4-be44-68b07188faed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14507243-d630-4e05-8533-464507e6b49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12155f7-848c-42f9-b896-dcb0b70bb897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0704221-dcca-4138-88c5-cc348d93d883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f03f8c-d4ec-43e6-a820-5b0e11511d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affe73df-65e6-4440-ad0f-88daa79dacaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dec01d9-88fc-4ebf-ba53-9ba5d6d2053f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21bce5b-6a02-4510-bcc5-4e6667b09848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c46d2e-a8af-4aa4-afe8-e03a42040b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1c4b00-a740-4b65-ab17-e4479861ec6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a13f3e-228b-48ec-bda3-3fd86fcd609d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb700a8e-bc8b-474e-90b3-4ba053137d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68ab57d-08e9-4146-b0ab-4d187afb4ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.56.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c47cafa-4721-4ac7-9133-576694db7144", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.122.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1fa632-4494-47b6-b4b8-8cd1bb3fe67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.123.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d86eb4-5ff7-412f-bff9-70b1f98cd48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.123.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bc8ff7-8f57-4367-80d2-77ac1dfdd3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62424719-6884-4aff-8beb-26088e001f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d512ac-1129-4d42-b550-2c4b7c72ccea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f8b7eb-7ef2-455b-bd31-9c26da5216ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e964151-61d6-4b99-bc57-a36b31782192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0df5e4-91e8-43bc-80be-31d60add49e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d827748-5fd0-4429-b488-979ff731265e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dee6a13-f539-4c65-b282-81cd2f2ec01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.38.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5182fe7-22fb-4f1d-b6a1-fba3d9ab67d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.31.236.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9358aef-b2ff-4373-84ea-cc4e695408c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.38.44.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b202a4e7-7fce-4791-8e69-388c3b58c245", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.69.34.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5ab560-de43-4db6-a8e7-4ac5dbc112fe", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.70.155.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55e2dc7-dc6e-447b-907a-82d88461d15f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.110.239.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745f82ff-bb6d-441e-88d5-aba76c733eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.147.202.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6f0824-5f6f-460e-a8d8-568b80f41f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.152.228.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65175248-9359-4233-8dc3-1812f5e4eaa4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.184.23.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e415fe-3a1b-4025-9a66-4f006ba4d3ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b918d2-3fc5-4b17-b070-ca1065813ac4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5e60a5-7791-4cfe-9f95-b21b8455d14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.45.167.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70e78a5-87b4-4930-860a-4eb8ee2c3588", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.59.114.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f73b1f-2c83-4aef-b931-ebecf581a0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.70.36.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fcba96-5ca6-4778-a5d4-f6cb83841614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.95.178.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e136919-b54a-4011-ae46-4483543c0042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.159.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5bb069-4458-43e3-b176-a085993b3b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.81.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13b80cb-0fe4-4af1-bff6-8869dfd7e11d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.99.167.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2eb80ab-12d6-4b6f-ab77-0c82e75d0158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.192.27.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198ed53a-b9e1-4ae1-a61d-61e106bbc7d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.241.135.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83161e2d-93fa-43be-b48b-9d8aa9757a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.25.162.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e6b2ad-d64e-4a12-b705-47c9d6bb4a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.13.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b8a8a1-be79-4c6d-95f3-3d983dc9b1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.45.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5f3a0c-0ccf-43ab-baa9-b2a24b5fb869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.92.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef2c693-434c-405b-9e87-6a0f91fc97f2", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.79.17.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2423cf84-9824-4523-8504-0b85745168ac", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.121.56.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37d8d8d-3959-4c1a-9759-c94ff91e4bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.122.73.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66deb95f-5c0f-46cc-a7e6-14d6b86877dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.131.73.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfa76ed-5858-4cf0-9b02-2d58236a230c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.172.63.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182a4e50-f97e-4c14-996a-0dbef5bbd89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.196.209.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df326d6-925d-442d-85d1-44694bd1243c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.202.148.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757c6f9e-332f-415c-b361-6b6bf5ae4915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.224.78.164']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84f4675-cc99-4d82-ad5f-8d49e1eb335b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.229.156.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59a7f74-d635-4c53-b176-1c2ce62a039d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.28.77.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10542245-a714-47b2-8c25-bf0ad9fd9811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.84.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6701732f-0fc8-4bb2-b60f-2eec79a6215f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.31.210.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35fb42fd-6955-429c-b2ff-5b882c7736cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.168.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3317f070-1966-4f67-a773-41b5b5ffb6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.5.206.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772fcc8f-efd4-4125-9444-bf1fe0081913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.66.32.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59be05a6-4db4-48ec-b2a4-03bcda9a45ae", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.160.119.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d574af-0adb-4ff6-add1-f67f2ddca974", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.169.110.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7da3221-8dba-4e6f-8e75-a54a18b72c86", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.179.155.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180716fa-8eb3-4497-a0f0-a148f1b36cd5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.180.242.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934f73a8-946e-45da-849e-8272080cf983", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.231.67.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a693d982-1b38-43d5-8e97-f1107ca6cc74", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.235.137.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2289ac6a-97c2-4c4c-b95c-a839d105e17c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.53.30.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7b74c7-71fb-44b3-bf5e-15d4370c293f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.54.210.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7503fce-d71c-4594-9d8c-fb47aaae6e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b91f5d-58a8-417b-8fab-9c5631fcdf7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.13.81.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d274481-588c-4ea8-b713-1c75d23eda11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.77.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38dc1c4-385c-4691-88a4-2a35513a4210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.153.106.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e96220-b435-4b6d-adf9-bb58baba3a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.173.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcc36a3-2be0-4947-8d4f-236083cc2841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.234.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa0cb93-5345-48c7-8178-fa9793c76b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a7ce7c-279b-4136-bc1a-ae2df9175aa4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.19.107.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8815332-c663-441a-a0bc-05a84fe4c857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.193.3.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4a1025-9af8-467e-843d-ebf39ff64f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.232.129.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81eb3c8-1bee-428e-b7c3-5bd613a92c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad244a03-2d8f-40c6-bec7-703eadf949b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.25.115.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96bad9b-52fd-4860-a4f4-b4f53b335859", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.25.239.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d9121d-f8e1-43c6-927b-415ea6393ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ec6967-58da-43a7-b113-c99b9576bdea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.31.41.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94767f4-0f1f-46cf-8128-7d5ca0d652d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.196.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd93449-a1f7-401e-b25b-8b9ced8e2b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa194e67-81b2-480c-bf7f-1b523389e5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ab6e8d-9924-475c-ba23-da79fd7c673e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58dc2f70-9729-4945-9b20-be9dc6df8abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3cb8d3-0aa6-4ca6-b347-ec27534c42c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c69c3b-da3a-47d4-94e3-c1bdc19c5170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f766db96-6501-4ee9-a12b-130217a35818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.209.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c079b36-cd06-4ea3-8c88-c00660784505", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.210.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c418c075-200e-40ea-b272-1d47d6eb5b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea05c4f-83d2-450e-ac0b-fa4c37bebeb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e925e5d-9251-4b14-bda4-10d0c7174768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.194.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37901ec5-de2b-4bf6-9b13-a843fd90dad2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.121.95.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f241609-326d-48c3-8bcd-eedab9bad354", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.158.184.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2653e6d0-2940-4028-82c4-471995ea2b3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.222.230.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af173af4-68ef-400c-a198-8ad7163ad665", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.251.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb1fe49-2619-4d61-8b7b-ca99d9b298dd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.23.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebd712b-bec6-4d5a-b319-3ced4699ca79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f543d9b1-575f-4e24-8b8e-45579d1c6c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.89.118.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad95b3c-689c-479b-a19f-576ad683d008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.213.152.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e558ce4-2677-4bcf-b822-fbf03e401d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.228.87.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5c1861-ae7f-4fd7-82ce-ce5b1270efd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.31.41.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ad543b-5a2c-4b00-81fa-bc69f440cd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485caa5c-f74e-4046-b3d8-98201db7b7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1d964a-971c-45a1-808f-9d7051239273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.46.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f11859-d191-446e-8095-c32e8cb93bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8ad7ca-cc98-4c0a-9b85-2aee91a6ea2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2d000c-df04-485c-8af7-aa132fe17e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becd46c8-3b55-499b-9a3a-f371ac1cae8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d2c3d1-a618-4c78-8e94-108725b69974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858adc76-c637-4623-8438-debf2754c57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39327f17-438e-49e2-b772-26fb246f9674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28907fe-b3e4-475e-a2b4-38f2ca40db91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b057c90-064f-4b40-80de-de9fd35f2cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3c6232-03ed-4bf6-867e-1a6a83ddba16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d097f1ee-ee56-4cc2-8dfb-dfbe18b58034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1768daa0-089d-40b3-b260-6f2c67cd55b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.173.237.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76114e5e-7730-471d-851a-17ac1319920e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.255.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6297ed08-d169-412c-bb7a-ae92a29925d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.44.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327b548e-c434-4c8c-a89b-0a824e370852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.201.118.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7cc0b05-9563-483c-ae83-89704c4857e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.201.58.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb317c0-f096-4815-a383-389105efba06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdea250c-0653-45c6-aaad-b6bf885b9bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e21cfe-bbcd-4124-a5f6-b6a911d1a801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0869b3fb-5fcd-403e-ad91-6b6f57c581cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5acce34-9f62-46e2-ad45-c55d759dfada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.8.124.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f88af9-d2eb-482f-a6ad-10f76b88142c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.126.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688da567-d008-4c27-99e1-7607cd7d9623", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.204.116.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248a57d1-6057-4799-824c-c09e9a1dec3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.146.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2255034b-b531-4f59-86c5-1f121e7873ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.140.137.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155d41b6-c845-44d4-abe4-555d8ef5e404", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.200.25.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb262a40-306a-4de3-bfd5-8f37eaa4b33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.202.98.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b71002-1ec9-4b54-9f7a-32e51205fd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.90.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7b1c4f-f543-4148-976b-912c383a18d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.99.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373e1d47-df46-42e3-ad89-94b96d5d04dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.108.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affd3c89-4011-4dc4-9257-4d33c0311752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.113.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5576c7a6-7672-414c-b187-c543a22778f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.91.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9434fb3d-97c0-4af7-a83c-87a7ee0b2a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.142.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d31197-0215-4920-8d23-74034c8bdd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.217.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b9b288-1204-40e8-9c45-29ce1b4d03d9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.245.137.0']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b04035-19bf-4c45-97ef-187709715a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcc170a-585e-4e6e-a5e3-7cc529ccf7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.121.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6070794d-87d4-4cde-8964-c527727f86a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ff855a-5d04-4f69-8ffc-68e0e7ac5590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3659ecfa-aa81-4741-a05a-5f4c30efc08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b042b3bf-bfb4-436f-83aa-bb4dd20a23e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f62aa3f-516c-4415-9f83-64c457059400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749ce339-a267-4af9-84b5-488a8c9f9c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15293bf5-654c-4c10-b803-bd559c480ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d855ad8b-110f-4e94-aebf-802e3821e013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68720d95-acc2-40c1-9b9e-077bb08afbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.193.25.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825dd342-0a80-4a2e-91e7-cdec94708807", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.111.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5b20bc-4b34-4475-bbd6-288b55688732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.209.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7853851f-557f-4a89-ad57-b37d48d541bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.73.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14892b4c-399d-49e2-bfcb-3b6bfefffb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.22.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06fda412-7321-4813-9d58-5fefa65a2772", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.233.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f511884-0bf7-4c56-bb5e-b3406f118da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.117.101.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60189a19-740f-4eb8-ac0c-ef3e3f9a16c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.117.98.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683c3e0b-bb5c-4368-a414-62809332fec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.167.122.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9676b8-ba66-4b41-a4bc-e2a12329d310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.106.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f592dbd1-6f7b-42b0-b9d3-df8386d69c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.26.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfca324-b0b5-4bd1-adb0-b5b46fdaaffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.175.54.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1806a79a-8327-43ed-b028-382197aeec8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.5.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6e6052-8880-4474-b1a0-3b60e6d20506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.95.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36479a86-350f-4f7f-8628-f7a6dbfdfa73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.97.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed8607b-da14-4d5d-9178-738ed6703bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.106.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9464cc-eb51-49b1-8c76-95784cc1043f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9e7ac8-4109-4296-82e1-1d4e0780cd2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ab4f83-2a21-4164-a560-a55ef410a516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.88.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ff832d-9ba8-4253-8ffe-f6e42ac856bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf5f274-032e-4632-b5e2-400fada91042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d74bdbc-2274-457c-8b10-2865448c8595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.136.131.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c54275-3878-4386-9734-1fe2e6f0f2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.148.52.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8f9cca-8da5-4763-ad9f-29d66ebc364d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e508a313-2e36-40a3-8b4e-158117a63d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc4a75f-3175-46aa-88d1-0d073a3621df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e264bec-114c-48ba-bf67-a85cafb141d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3851280f-25bd-4f52-aa80-514a290a85c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a020d90b-68dc-4199-8103-a752a5dcd3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11aaa47f-a2f6-4664-8c8a-fccab9ff9bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19879a1d-630e-4edb-8f9a-d614efcb581a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810c3981-9846-4340-ac93-ae0badfcbc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46eec7ee-2292-4b0a-8190-680f820be90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3dc2bfe-23e1-453a-8f9f-aa68180ec443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d817e2f4-02ae-446e-90d3-90afef54ec41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3f67f8-8db3-4998-8c34-1ab2e10a166b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e04381-9f27-4dfc-975d-96c9abcc06ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19733b58-0059-45dd-b5b1-9c3304d2d9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e898fca7-fd5e-42a3-bfc9-0ba462a4ffea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cec0f1d-680a-40c7-be4a-fc08541eac41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baefedad-4ac5-470d-93e0-7ffb651cf9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c93647-68ce-42b1-bcf6-3265cf43d0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14db72aa-728f-4004-b4cf-fd8617e48ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e2a32f-225f-48db-b106-8fa24de3f33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262647f1-a62f-4abd-8822-f2ec330be101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f147a2f4-fac2-49b2-8ace-e76d1d348533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51504cf-8eed-42e8-90c6-93757579ff78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf0b73f-789c-4687-99aa-48506dab00e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600bf181-176a-4a3a-81b8-39d50ab2d9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33877446-bc5c-456e-af52-c40352c5d498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89978c8c-0208-42f9-867b-48856a6cc171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc426d81-606d-45af-a077-1df75a012c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b92d503-2ddc-4df8-bf6a-21f7fda0246c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb07579-3c92-435c-8ea4-0409fd0d3774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0643dbf-b838-46e5-b546-3473d2e4ac04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcd01e6-0211-447c-9b1a-8a052c416309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fd1c82-3e23-4910-aafc-08015454a141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753fc39c-eafd-4cb0-9e0f-350ef82f121e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.118.129.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16b71cb-e371-4501-b3fe-f7d15c61415e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.169.215.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c31c5c4-7495-4d53-b27b-b8ff0c49fd11", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.66.254.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e534ef5-226a-44bb-b67e-0823838ba758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ec26dc-0d00-426f-ae1b-65dd071af215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec98767-6581-4ca9-acc1-9399f4c81991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.13.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bc6716-9efc-4d69-8ee1-98fbb677109d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64495f0f-41c8-4413-a1c8-97112d9a6b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a3d553-0863-4c7b-9208-400615cbbdf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8fcdac-e61b-4a20-bfcf-4cf13f966c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.216.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a86f502-3fcb-4711-a4fe-4203fff31a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.27.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b95853-069a-4fde-b66d-26181ad2f74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.32.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43cf493e-f193-4b8a-8b34-0b3a85209daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.58.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058be1fc-c167-4772-8ef9-f1ea88c53099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.68.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca9858a-f2f2-4b55-9c06-e91cd3d73bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.70.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a545f573-7121-4ce9-8a1c-4084c79f48c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.95.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f170e7e-3c82-4e84-a8b2-04d85af59784", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.255.13.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c85d82c-d4fe-4dfd-b742-4ae188554207", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.59.230.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff53e0d-6f85-449b-80e1-fc3cbeceea13", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.59.230.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b628e3-d858-4169-8eae-4f24bd2c384f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.59.87.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d936fe36-3a69-47a4-bf99-32a8ae722512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.0.149.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a59eb2-a8c2-4781-8af1-f8d0f68056da", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.0.246.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17922026-fe23-4656-8cb0-18c33827d543", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.77.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02f69cb-9d96-4cf8-a8e5-b9fe3b0bd326", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.185.108.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9a7b12-735c-4366-bf14-c0212ba62079", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.186.44.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2b1156-5160-447b-9727-ac10c4330285", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.19.2.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e079ef21-acb7-4146-9d07-c75f9dc3295d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae30303-2c01-444c-a64f-6f35c99f5adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.82.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991c4e74-836a-4088-8b31-a158f937ea78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.59.135.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9bce562-a889-4d0b-b814-9b37381f5bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566e31bc-f572-432a-97e0-c9e5d942eaed", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.84.34.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dda93e6-1f80-4569-9e89-c07e6ed14fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.43.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21696d0-b78b-414c-9052-19850513008c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.63.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371f1651-62dc-4dfa-98b3-f62312700e10", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.218.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d492f041-5386-43af-816e-7de1997e0e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60372b5-5464-4ce6-89ea-ddc648243e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51f44f8-5114-40be-8748-88d0c148a607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717b3bf2-805f-4cbf-b3ab-53eda0ebcde0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.155.126.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a014cf-9b7c-4331-8268-ca57035e2518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4437c0e-7aa4-45d1-b4f1-f8b028c2d5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.88.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22982ecc-46aa-4b0f-88ab-ad7991267ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.73.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378ceebc-f86f-4043-bd39-461670b0a2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.177.205.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfbd72a-0639-469e-879b-4ee5fd2c00b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.212.69.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bad6364-7c7b-4916-8812-0849d14df329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.227.100.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b93dc38-a1fd-451a-a4f7-43964cdb72b0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.255.50.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdc3d93-e6f9-4184-aa8b-94a1ea110667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.170.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a7bb41-5e7e-43a0-9387-c626364bf5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b159047-81f5-4c3d-8404-090f0ae083a1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.208.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2135f0b5-6e3a-4026-b4a4-61c474fbf687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.225.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878a2f85-2940-4ec8-b269-28242ebb2723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.225.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00de1aa-4544-40d0-8024-52dc35d3a1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.64.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ea7b66-ccf8-46c5-8fad-34b0e9d67476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62eb718a-0ef0-4955-b78d-69f05ac40802", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52235236-cf4f-4295-9837-b2cb32887bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e193acee-8269-49c2-b17e-37eb308a64b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af38c0d-1f7b-4ce4-955d-ec7383757470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e324116f-bc50-4ce9-bae4-f948d4793673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.123.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039af007-42b6-46bc-a990-bc568fc477bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.116.219.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee10948-bd3c-48d6-a76e-97c1423dc9a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.176.252.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a93e404-02cf-4c21-86f2-eba4a5e48970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.186.158.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e646958c-a884-483b-8089-43e4b3422f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.191.135.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aecabb5-f374-4937-acc0-392e6d631110", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.191.73.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e3c11e-a296-4d07-8e3d-40f4c5803806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131c6cf8-5991-44ad-b0c7-314b42620a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.168.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d5f7e9-46dd-434b-9403-d7c27c1216c1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.232.245.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c020da-5ff5-497d-89b1-2f0c40afdbe1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.232.98.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17f6879-19be-4abd-bdcd-46a58adbeb47", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.239.92.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03e23f2-75ef-4afe-8dee-bde8f88491b1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.226.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca72a71-c162-45ef-b1b8-8e6e46e1e109", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.239.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272d47f7-fd87-49eb-a4e6-d6aaa0874ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.33.48.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5453a252-012f-499f-ab6f-09e49ecc714e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.35.120.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f86abb-8b2e-4ee5-bfbb-938a56453991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.52.46.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b3a7cc-f4c2-44b6-b5a6-67b392a93a43", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.96.80.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b237d1d2-b609-4619-91c8-0e6f554dd510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.206.194.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4366c64-cdc5-40de-90bb-cfd08a5bd2f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.83.33.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666822e3-9472-4a0c-afbd-e49de316b1c4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.109.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e444223b-f63f-43a4-acd6-c7f8315aa40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.22.28.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784cca3f-23bd-4a36-a1bb-f76838f8dd54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed881de-4088-489e-83be-57cca21dec91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1cc4a8-36e3-41fa-870f-6d705a1aca74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4874009-deb7-4053-97e8-0f8a4379d50d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.82.193']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec58cd10-a785-48d6-8903-7d79a8b3d93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05728b50-b710-4717-8be8-770765ac45b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f55d092-a0a0-46ec-8cfc-f6cd8ada4b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005be49f-acd3-4176-84cd-4040065887a4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.198.181.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6a49b6-555a-47c9-a9f6-46df2af8016e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.121.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e0ecbd-7825-4a80-85fd-f4d14d226572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.86.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9d85d1-b0ac-4c62-b14e-44573f7d06ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9597d032-c1bd-462f-b51e-1d60bdc6f9ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5113b7-fe08-49c8-a488-6b9ff6b483a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.115.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ffeec0-1771-4075-975c-374673221504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cee0856-3d2c-4409-a309-e0e99f6cb860", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.105.141.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b6ef49-283d-4302-88c8-ad454abdc56c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.178.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dd02be-81e8-4f9f-8a06-26280924de46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.182.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95647ed9-2a1a-413e-87e0-55677c6a3c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.219.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d448432e-f3c5-435a-a822-840ae4c6373c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.239.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c9a88a-a943-41ae-9585-36a3cccac2fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.149.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fff8d9-3992-4748-a560-cba92ccd145d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.150.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1c86b2-2fb8-4514-b0c9-1422934fcb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.225.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df7abec-0dfa-41eb-9beb-d3fd1056995c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.230.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeea346a-9b9e-4a30-9688-8d2429f77cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.238.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c0702b-ca10-4b99-bb55-0944610cf0f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.58.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8c09af-d638-40dc-8176-33028cca0437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.173.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb7bcb0-5efb-492f-a60e-ae23d4fe8a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6d893e-de88-4fc8-b3d8-026bce4b37d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a356c9d-9070-4673-bee7-62c19842940a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4f4d56-50dd-428d-8992-e11e386cb1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ff5c50-83a3-467c-8f4c-e6777ed7bada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0470db5-2ba4-4f5f-a61c-e454ffd13bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31e689c-e427-428c-93ce-d90f060929fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23faf27e-9c6f-4b6a-b126-7afa54ab1bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31138f26-8a72-4d62-ae1c-d53a5d422cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9f6fc5-beef-40b4-8f9f-bf1cebd52dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2604e89-d398-4ce3-a2a9-5a3059fe78c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a945aa-b368-4883-82aa-d73ec03ab886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b353e7b-9a2b-4ce8-b144-33705f3c809c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fda761-1e02-4afc-bc3e-fb2eea1944dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd55e21-d986-4056-b4de-218545fbc52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684cf920-ffa7-4b9b-9b75-53c4963cccdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cecb064-224e-47c9-96a7-678f967b65d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075507d4-f1d5-4824-93b5-c005b4540982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973d5884-ba63-4f8e-957b-a997038776b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6fe119-8a85-4b7d-b5dc-85f8b49b75d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16dea5ff-d808-4ba5-87f6-3289a1c020b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e90fd6e-cf72-4d05-ac62-61c8ebb70bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.139.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef2ca5a-850c-4cb8-8898-7e56a6516d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad4edea-ce40-4184-8d6e-7784e09d123b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.92.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a555757-b095-4f48-acfb-3b4ae0c692a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.242.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c780ed7-5553-4e58-9a64-09dc88c3c7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b7ad8a-0e72-4f3d-8622-089f083b85ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.76.35.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64aac2f1-fe5d-4e50-96eb-c265895d5933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.255.3.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3807074e-aebc-49fd-bb9d-2476b8016c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.79.182.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090a68b4-d4a8-4f00-aed5-6933c44f5885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.0']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f967fd9-4156-4573-99df-56ee65c84f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aeb5eaa-73bb-4a45-baa9-6d051c9a3f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297934d6-2372-452d-a669-a0c19ef051e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6d76a8-90c5-4d03-927d-501964dfde9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02b1845-2828-4f88-afed-d54c0c68ab60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0107d58-4f97-42c9-93ff-82b6d0631376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c16588-5955-412b-9f6b-96cdede79424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9b2b10-e3f6-4955-a61b-55b5db54431d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9728c999-434a-4c89-be60-01b5eea18e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628aaf98-91d6-4b54-a700-18839cf42604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7530b28f-3642-4df6-a068-1e958ba67cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f557bf-9a1f-4d09-9a47-2e0ec41d3938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7fe14c-f16b-4a58-8fcc-280f682fa45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a9d039-0dca-4fcd-a2fe-349784260fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03db7083-8367-4083-88d6-cdd6fe12962f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565b3f87-345d-4802-b280-63585f57b596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40955b5-7067-42d8-8ade-17cf5b95455c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842556ce-096d-4c8d-93ec-47a166f90a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe02bd7a-c564-497c-968c-5f5c49bedabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3be2e4-d960-4b78-8abe-55c5bba67240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0c143d-1d87-47bd-bae4-b210dc329cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65954eb9-d084-43a0-a621-773e9346a1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ead395-7c06-4738-9ebb-ad9f999f5e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3e2b99-fc20-4529-a7a1-8a456ab1ee60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fb70ce-e93c-4358-a985-e9603e0d1919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f432a8f-3fc3-4c99-aea3-d86c8c44d12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5f09ac-6ebb-45ff-95c9-f0799eb02fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0811ea8a-23e5-47f0-8386-d7b227ea0080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.145']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a2fb8c-e758-4750-9624-d75a88679d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28214b0e-2115-4a70-9edc-afc7dbfb1bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95390c2c-e529-42c7-b725-b82e8f9e2159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b80746-cce4-4028-a707-070ec75aa75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203f46e9-4db7-435d-bd9e-281027fd8e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eca3a9f-126b-422b-8256-9fd3e480b4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d1a315-a3a6-42ca-8060-0eab079136e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966ef94b-632e-41ea-bacc-2f16bdbc08b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336fd195-3c9d-4c1b-8dc0-4d5a4e8383c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7505a08f-6987-472e-b51d-955c2015fc2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b98660-0637-4075-bec9-56552a9176ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed022af0-bf57-4694-97ee-23b924786d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecb2c4c-a087-4af3-9437-f5755d1f40cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270df56f-b2a5-4f92-8c06-a5d3d5c84ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f2ad74-21f6-46bc-a208-0d0d5f4b7e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5802a36f-ea16-4bd9-9513-8073a07963b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d49b95-74be-44ac-97d6-3ea55434249f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0c614f-f2e4-4831-a5e0-3e102de6c4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6713ed-cc1c-4ae5-b574-49fcd40484d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc51370-25f7-4c04-88ed-46b77f0c60d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.169']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78951da6-8081-4ab5-961d-f74af4b03249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ce8d3e-6918-4ca3-9f71-709e93dfa3a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0855b98-1c6e-4aa0-842c-bc13bace3605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.171']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60381b85-0850-4ba4-9a8e-6c23393d2b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865caad9-f916-4001-a8c3-8c22f9e8d5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af8ad23-73e5-4053-ba5d-4ceca64790a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbae4956-79b8-4e76-829e-c3c56ea99ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1591bb49-679e-487d-917e-14befca6b93f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c216a292-2d3f-46d1-979a-fbfbeb109c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78bdcf4c-1a4b-46b3-871c-91b45393d0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e218a93a-7864-4867-bd6c-9f52d9e167c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55674a8e-0d5a-4a42-af72-d50f8adcb254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba245cc1-0097-4873-a94c-70d662c96ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f712051-8e24-440f-b1da-2ebae3fcd1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465b0971-6178-4d48-a3bc-52ffb2bae52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ddfe07-9955-4389-8572-a130845c539f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8302c2-7df3-4a5f-a924-a1688c9108ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48dad19a-7c67-4466-b94a-13e72ed1732d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c71e0d-4678-4ccb-8f17-5250e86f65db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52b39d6-6d47-43be-b5ae-58c2aaa5ada6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d1b91d-75b0-40df-9d5c-8cca1adcf980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d7b0fb-627c-42b9-b3e3-8815bd3be4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49a1cb4-6629-4891-aff4-a04d4c8d8c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073e76c0-fb1b-4ba3-a334-fd929b536d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf7b59b-da9e-4fae-a071-1a11234d9cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acda72c1-74a1-4cec-a82e-ecdccdb40690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433a7c96-f6df-4fec-bfd6-aebd9035804e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0af905-6c22-4b83-a8a7-6488731e96a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0a998c-e916-44c3-bcca-1a33f9b80cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da03dfa1-f441-476f-9f42-6ce28f0bccea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d729fe-7676-4e39-87cf-afc02e4c9800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a51240b-54d8-49db-8be4-861a71644d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf3a771-598e-4cb4-ada0-442ece98ac67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8beb08f-da9e-49d6-956d-78cf63488be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafc15fe-4fd5-4a9c-959f-0151d8d8cf25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f1e865-d159-4200-85fe-a1d59ea8aae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc29a62c-9694-4f69-9235-39a62ae63508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8158bd3f-9f4e-478d-b2aa-b0cb3d5def9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ec55e8-7873-42fa-9d4a-50725987f932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c61353d-5569-4601-804b-77e6170448fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2df11f1-4020-4eec-a11c-86bce2b5856f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39dba96-87dc-4620-9d91-083685e5fc50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33abb5d9-5f8b-4c44-8ea8-f4504e7323df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11be9a8d-b2b6-4716-b0c3-fa972bfc7f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.240']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f4a4d8-07d5-4c1c-9039-57faf37af87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5b4143-a8f7-4e4c-8025-3dfed0da7540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec1a6c4-3908-4c63-a6b2-0fecb921dd41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cebd9b2-e09a-4f8c-8ad0-15e510d1db1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c937448d-5362-472c-8813-98e832fb6c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60276a30-15fa-4058-9205-2f0af88772d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac4ad7e-e91c-4a85-8ab7-c1044a36409d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f36c880-be43-4e35-86f3-0dc55b968cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602d89e8-05e3-4a25-b2de-172ca6e35b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310f8885-a60a-40ab-a0f4-2f4dbc0842d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c13452d-f88c-4a67-9bf2-514610cbe2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.255']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b15e41-e54a-40c1-a48f-5955f9bf79ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f419a3c-40ce-4d89-aac1-7afa456ab0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32376ddd-ba71-4485-b51d-62425530fce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c8ae8f-06d8-4123-ae6f-298f9dc09a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab804ed3-26c7-48b9-bfe0-6a8886c94a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b00c20c-c849-4968-a001-b9877bc765f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c41a0fe-e9c8-44be-8874-a059d4dc4c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfd3b2e-4720-4cfc-9c9d-d5a5e63b767e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ce3d8f-1394-46b2-b073-fd650738f1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea26a140-c70e-47f2-af20-f4f0e0bdeee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42012f8-6b8c-4c25-b844-4be2ca89308f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be8c0bd-c875-40c0-8b49-40f0e0595759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.46']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d45cb1-ded3-44b8-935b-7a4b65609205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d570a9f-46a2-4e6f-8208-d89131a6ee52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d44200-99d5-41ec-a455-8bff07f1b1f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc7cc82-53ea-4740-9a6d-0001a50b8e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d392f830-6824-49b0-b97d-a06f7716858d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7d4b65-4cd2-4849-9562-e1bafa295eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad328e9-1913-48fb-ad22-48d1a7d8c0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e963b2-b6f6-4c8b-b691-ed5f275a4074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992ab357-7283-4c75-bcf3-3d753d903fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77785ecf-723a-4147-a295-7211b225f170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f7a711-a0f8-4e0b-8ae1-680d42e06b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6109645-364b-48b1-aa9a-96c688f478de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4261bfcf-9e05-4525-ae1a-599560dbbc80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99f0c76-4018-413c-938e-8d617464bc21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72127c87-8112-4cc4-ba18-179e9638a9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899b039a-5bf0-4906-a99c-ebf77d0819bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ba9158-97c7-4c90-9cf5-59b6472f2fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e20a56b-4159-4602-92b5-eec35b103119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c05fdd-d3a4-40df-9648-8aa7a2432d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb836a6-f9ff-48f5-8f35-99e0f0cf939d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91fa75e-d24d-45f1-a911-7ed7093a82ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8195802-9525-46d8-a1a2-566e2c5c9de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781d24c8-4093-4547-a49f-9cf584659f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fdca6a-412a-4d15-96ef-3793622fd609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503b0f59-2ce3-404e-898b-a17053be48e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2f0c78-1efd-473f-9bdc-4c8fea537448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97c5459-26f9-4aaa-98b0-944a20a15ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9477ee-a1fc-480c-b036-ca267056b015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e45fa2-e8d8-466d-9642-218a36b60f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0b988d-dab4-482c-a24e-5e99f40b9f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0042925-2398-40fa-8fcc-b51f17d5e352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8206be5-0a9c-437e-839d-f8dc6b3ccec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668a75b2-a3a6-464f-9936-2733ce07d5bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.214.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c2a06d-6348-489b-b969-ddca2e5b1de4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.246.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203833a4-ee50-4782-93fc-94979ff991d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.120.247.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b070373-75cf-484c-a83a-93fda122fe01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.148.123.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42f849c-dc18-47ec-8c90-b9c77ecbf5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.119.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9a45fb-ff1e-46ce-8a86-f1ff52080600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.149.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a5e8a2-c03b-4fc6-9171-65cd1ad6bf8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.153.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ab7f11-6495-46d2-bf96-5050454d0eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.166.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f058e60-a351-4dbf-b90a-dd2ed93f1fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.209.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d48d60f-4d15-459d-a2fd-76ee08776c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.69.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0310607d-2d6b-4075-a213-4c8e9acdd933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.71.85.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e27cef-1730-42f8-8a48-298b14411ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fb8ae6-de4d-4cd6-bd24-a680821b93b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e320194-1500-4827-abf2-5d575fc88f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c4c4a0-2b4e-4586-b745-af450d25e5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.139.136.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7526f9b4-26f9-4b20-8394-46d5ca0bb4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.202.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b44b895-8e66-4ffb-a082-6cbdcdbfface", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.211.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c6404d-001e-4bfd-b53e-0dd3c6198cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.225.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406cd23e-a1a4-4515-9965-7346ae604919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.241.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0d5a27-45b9-4cb5-9f22-5e5911be5b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.247.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e067a87f-33ee-49e7-aefe-c57d9e5e6e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b148b6-822e-454c-9b11-ed17ad5df4ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ace582c-9d48-449e-a1a6-861ee7627c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb3be96-1023-4178-892f-414ec0b8e642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe57210-f767-4951-a643-ec2d903bd180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae4186f-fd7d-415d-abcc-ad1732d54266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ea7fda-4666-4044-9649-d09c2890ae1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f232f6-e677-4955-b15b-86b320bbf4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76789708-db1c-40ab-b00c-b973c2241080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07cd7a6-9bbb-4008-a247-5a56103de063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54371f55-e4fa-450c-b426-fa76f8468992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81035351-b7b4-416d-a61d-f191c5073b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf477dd0-b031-4d21-a83f-5189bedf9aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43241ac6-d81f-4c72-8a0f-338d0f0f03fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be51b666-5097-45a3-af7f-15599a221ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9768a90-2184-4d7a-9f2d-25a25d01d45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1fd1b5-3b22-49d4-b43b-0fbd946650a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690aff5d-6c80-47c9-bc09-b15a8b756250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4fb895-a363-4b1e-963f-f77c550f007a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b529e950-f3c5-415d-9547-cb6f77f8b9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3df376c-f0f0-41f7-b8df-b8690297995a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a824f42-b1f1-44fe-95f1-79790dc65826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea27547-b099-4745-b32e-b01d94aa6bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c582bfb-71d5-440c-ab57-d951abea9a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f9e2d8-6d01-4d09-a8ba-f9d011cc2ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07cc8bc-ab37-411c-b33b-ed90e886880f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8903883-54a0-4e44-836b-78b9d80b721d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db4e3ab-d017-4638-ba79-63cdde31c048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d0f942-d2f1-4191-a77a-a0f5831b74c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ac5405-96df-45c8-a6c1-5ca4aa0bade7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246a9cc4-3540-493c-a1f5-9b2c7c4dcf40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631f70dd-8693-4ecc-8806-03d8554a639e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e1723c-2dd8-4013-a145-cc404f32738f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12d5ab5-764a-4a70-9521-2ab569d8abb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616dd756-5b3f-4b77-aa1d-115f07b5a37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8ada85-c576-45f9-9a05-bccba55db822", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30f148f-8de4-4405-ac8c-aea52d7eb9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc64960-2a56-4de9-9d0e-29f712a4e020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8967601d-56f2-4db2-ab6e-7dc9abf1476b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1496b26-d357-4ae3-873c-edf50c9fa2dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5feff4-d574-4fc3-b1be-7d0885935215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c760148f-2506-4ee2-8741-d9eedbdea45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1842786-9ae0-46b7-90a1-4e32788b6e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5abe96-bc1a-42ff-97f2-ac6391d8c437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7629a600-70f7-4de8-8da5-81a341de3c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbb7747-29af-4e16-8e69-69e5517e8ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9000621d-ecfc-4406-9975-6e7f362cd939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4c446d-b12d-4154-893a-c4fb9b93ce43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0818c47-1994-43de-a399-3e85dbf401ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe9f1ea-a226-454f-ae24-8c9931acc61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71eb8994-ff27-42a1-b49e-c3902e1e4ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b90b7e-3c49-4f83-b999-418736d66c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949b8654-9f28-483d-8664-a5d503df5a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f594f111-2ce3-4262-95cd-170ec6b1153c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97942037-c754-4396-9934-857340adb1a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe4c0b5-bd3a-465b-8993-c7445906b022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2f95ef-cc58-49cf-859f-43f55d9de875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a31deb-98a7-4f3f-bd77-e8484f6ece3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88db081-c3ab-421f-a5a6-68d0faeab7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69ebef7-c7bb-4cdd-b107-14cb19dec69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47db01a6-2c85-4716-b0d3-d8b81e222bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd7295a-d2e9-411e-9971-98f1258e3071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b82ca14-b13e-4871-b9df-65a66c75ec14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d30e4dc-8557-4ac5-a878-2612caab4980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c11163-a3c5-4033-844c-c098c6a48a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72e0c6d-83ef-4d5c-8357-c202055b7f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4bb81e-9334-426b-9d35-c7add16a5ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdb7bcb-be9f-46e7-930f-5f17b38e521b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5aeeaa5-5ba3-4fd6-87ba-255485ea3aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d04f842-cf75-45ee-9f64-f63007983835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128c808e-d6be-4759-ba0e-f89a1e0bdf6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aadfca56-17e1-4368-ad38-4f17f1aec9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0f9561-63a4-471b-8f4f-8e4557c3aa15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642786a3-9266-49dc-a30b-360e8a38f641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83562fcd-d3bc-422c-9310-bdbeb4525adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a12ee0-26eb-49c5-899d-fd9854cd2023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2684871e-4135-4ce2-b849-111abadc7e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea385331-d956-429a-a85b-4af363b29312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206886a8-7dd8-45f1-b4c7-0e43e133c5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb628b4c-f31c-4db1-8979-b470d2b852b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f4908b-e541-4539-aac4-2fdf64e96da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac3031d-d5d0-46f8-aae8-4c9950031f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4793b1b-0b63-4267-a5bf-0a142a4c25e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30672d45-2efc-4e0e-841b-b68b23500390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73eaf58-32f3-4c6b-8764-5c9fa2716800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0739aa-fcb5-4f2a-8166-40d26b9560eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae71c6f-886f-46ad-ae0d-e7ad9cefd683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8146ac-da17-4f30-adbf-73b52e77ec0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1498e3e9-5c69-459b-89a4-045f1da179fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8b4e37-7dc4-4ddb-b774-6edc0a30f1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f9041a-7e20-4436-b8d4-3287b7c66fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06dcb46a-892e-4765-ae36-966326bf5989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7173e21d-ce0e-478b-95e3-ed78b29d9ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e640cf43-f1ea-4b4d-9c73-401f7f91e0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db92d5ab-1739-4e4f-8114-0afe2db68d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19419559-beac-402c-9254-151b51e24eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225b2a5e-e056-45ee-b207-e436295530d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74b33cb-64cd-4631-998a-e0a51c672bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57977bda-cd2a-4773-8e60-85cfed781d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7188aec4-cbdd-47d6-bed8-a055853f0bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5c5fef-c302-417c-aeea-aa1470f5403e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe18279-ff48-4191-b87a-45c317aa8b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683a1ca6-7d62-4f8e-bc09-746c81eba68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215e2c67-aae1-455c-8d49-a40bee99bf65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149c24ac-42f9-4efc-9a29-ec279f8c2dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667fa01c-9525-4bfa-a24e-1dc1fac16f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8d8bc5-a914-4308-bb25-93eb4f2e31d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b3a515-bd5d-4ad2-a698-18816dabbbed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5f6d51-dece-444d-b398-ce0044eb9fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702c5106-5679-489a-bd62-0f1de6761f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e7c406-ff54-4045-9420-a3fadbeea8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ea255f-4bd9-49e2-9e46-4e8f4b389479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d073ca-1f99-48c8-b269-742b987f9a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b02390-cea2-4c9e-9ad3-e546dfe8a9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2043933b-1d99-4a80-9cb2-bfb9d9581d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0868d726-9b05-45bb-8ab7-af8d5f9c9472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fddcc3b-3dcd-4019-9151-039d977925fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91340dd9-c77c-4876-a05c-bfbcbe09b1a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0978038e-9cc7-41e1-8774-8c1c0b9d87ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1413c0-d5c9-46ec-bace-22d5c34ef5ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.112.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3be11a9-96ad-49ed-b77e-caa568b5a5aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.235.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a6c9bc-490e-4c90-83ae-fcab0374637f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2761d6-1718-4d2e-af48-10b9fc23cf80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.183.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cec5fb-67b1-48e9-b63b-75d027299041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe67cbf-b546-4316-a9a8-b048f53d233f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ace60e-136a-449c-9dec-bf67c5cefb04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.216.108.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7797f7bc-7f0b-4823-8e30-2c2efd2c7a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.253.35.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83ecfcf-7de4-4a05-b87c-ebf12f0dff8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.36.0.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e64c495-540a-4a07-a3ba-00ce455f5b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.101.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf0c662-a410-4afc-a2b7-7ac7356d75ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.89.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898e5aeb-7c55-497a-b558-d4e15d9aec24", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.206.70.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428e09b3-18c0-4071-a48e-f8f6126904d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceacda3c-92ee-4e54-9e74-fb36ddc1cbfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.87.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e990086-9c62-4bc3-b8b0-7e0f635c3113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e69eb89-63f1-47fd-947c-6f5001e4e178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b66871a-6bc0-4b0d-85be-adfa8a733577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6ab39e-a685-4028-bc2f-8eec19867631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475a5e76-4c6e-46f6-9c1e-d4ca41d707ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0051c7ec-302d-42e3-a6ad-d23b6b231d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3de8481-8e2b-49d6-aa7a-bef81ead427c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d28b0ad-9fa4-4c47-b1f9-a901400e1db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed934ad4-0014-40ff-99bd-a80bd50dbaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2d59a4-7a07-4288-a373-0e65376e98fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcce81d7-9f9a-4399-b26e-9a8957d335df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91ec5ef-4e90-42bd-9db6-4e1ee356dd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1624aca-f1b1-45a6-a630-ee0d51506939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752d8615-290b-438d-b61e-4227f82e7e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fe5b0b-bdc8-463b-bf6a-98317f6feeea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924da32a-0f3c-4dfd-abc0-ba4e42bb9c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749c81d0-1e50-4ad9-9624-e4438d366ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32afb05a-a7f3-44e8-a157-6f7476361746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e3cb34-d5e4-4a44-9ae3-8143809e96aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1910ff-f3ae-476b-80ec-d0406ac16967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98690dd3-b6ac-464b-86f1-5a220545bcaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bba8e65-8079-4431-a071-0cab14cfcb8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89280e6d-22d1-4d2d-8907-691d9ec42cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10bd44c-40e0-424f-827e-c70927ff9876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b18bdc-049f-4485-a422-d16c6bc9a796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215df697-37f6-4503-92f3-efac0bff222b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e620df40-1854-4e8a-816b-a90addd55c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dec70d9-dc9c-40f4-a3e4-ccb0f02a306b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4760dc-44de-4ad0-86a4-d1687fcb2255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e96e750-d6c1-469f-b744-15415bd3e69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef01c9e-7f02-4b52-adaa-180fea3659f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec950682-ed01-492e-a377-9656080eda92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a58a1c4-ed3c-4b7d-a460-abc3ffd499c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b707a5ba-4366-49ef-a9e1-de630be26164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51cf806b-97b7-443f-bb90-6bee6e494a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f99ba5-b133-46fd-8314-9df6c846bb36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.233.203.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455c2eff-4b44-4ae5-b891-0cf7e056af54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.101.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fc274e-32da-43ac-9151-185f6404275c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.43.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440ec9f5-afc0-4d74-8e9a-25be3b782685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.46.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb884dd-3b00-4eb6-8e7e-4ec5f8c1139e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1f1db5-b50d-418c-98c5-0de61dcc81f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2beb04e-7d1a-4533-8229-e8c09eb854ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6881425-eb6e-4645-8aa1-43fd3038927e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5f05b0-61e0-4398-bd94-c8f460997e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0781aea8-1f55-47cb-a5da-a615995a6eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659883a8-c9a4-42d2-a647-3019c4498033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2500bf87-8aa0-43a3-8a43-9e355eab5a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f117d21-4919-4d96-9ff0-d3ed0631e412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.251.20.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e161b63b-1f62-4900-b687-bcbe86e1aae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.188.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40300e99-e71d-45cb-bf2e-ba8b0c280500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.230.96.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba15186b-2645-44cb-9e73-bb755a558d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.243.66.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b77bf0a-240b-4b3c-a932-0b47885a11cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c557c493-21c7-4941-b58c-d69cc11da019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e4803c-e804-40fe-89f6-22e67a7999f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bb8572-bbcc-4246-a587-4788b74e402b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cae564a-bc0a-4b1c-8cfb-e4af2d1dec44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1612fe5-b3d3-4bcf-8de4-0310039b9338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db5f910-157b-44e2-a819-179912dd2534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3ae8c5-4105-4e40-b7d8-66027c651de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8faee0-3c95-43b9-9bc5-af40fc7c8c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b4fb10-69f1-4278-b04e-1c02f9580cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342908d5-b886-4981-99d4-b5d11ad8f94e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0799ee34-7505-4d1b-a097-919c85e458ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee776b59-e10e-40d4-821d-da0517b8832e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6eaa44-2722-4784-b3bf-d52df029b8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ccba58-8c8f-46b1-aa88-307754b57225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c0c722-145c-4c95-a14f-526f502cefd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2dff67e-2ae0-41fb-82ff-692c0787ec2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49523f47-95ae-4781-ac93-cb7746fa8274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241b3954-35ab-444d-bdd1-fbb51970cdca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3f5590-7f53-4aae-a46f-1bc9d844410e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e67503-6662-4377-b3bf-2b7ed142de94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60094638-b577-4eaf-9fe9-28b126602fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779b4523-3ebf-49f9-b32c-74e73019fa6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d95460-3563-4772-9c86-42315cc54f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.145.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f06149-4485-435e-bdb6-2e06fee786ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fda08df-8396-4a90-abc0-b001aa5e1951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ebfd34-380b-4234-9e7f-e9afca5b2c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21f59cf-8630-4c36-add0-b0e8e1ade74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bf897d-170d-427b-80b0-763ea5f32f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc47d0f-ce6c-4477-9a01-390a0316f533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7413fd-9022-4763-b9f0-bcd3b915f7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ce2bfb-d148-4be5-acd5-5054a815d156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0d8e2a-89b3-410c-b436-df8b31f0aa9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c411e4-8260-45bf-a112-49ef9f282cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de409b43-fa4c-4cb7-a047-c83270de6c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8d01fd-560b-4d14-ab55-09b75c366cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1d53a1-019f-47f9-983b-0629b1f2a11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c43d046-9ddc-4e60-8ed9-959e1293f88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd3212d-e1c9-49a3-8f9b-35275fb2875f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cc0769-0744-4724-8158-b1420d6c479c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bba349-8ff0-4828-95b7-7669a1892c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a33b9a6-b558-4100-bc80-92f1fc2ab12b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e2b4b1-cba2-4ed4-ad2c-77fd6509eee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11d87e9-13d8-4965-91b9-b64ca5f04d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7576a4db-3f26-45ce-9432-49d83880a23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2afe844f-cafe-4020-9974-0cd5355f8c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f536cb54-738b-4814-82fd-5f44b87932a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ba4305-ed3e-4b2d-9c30-0aba578ce622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfdd805-494b-4c55-99f1-f37774581553", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661910c1-1cba-4b51-aaa4-8b0e10387ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075c6449-6f77-427f-a92e-fb0351f4e397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187f5828-fa70-4e98-ad4c-3fee3d8e6f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed1cc66-1377-4bea-ac2b-5f62566e818e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf065a64-cbc4-439f-a618-999d68e73877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73cc05e9-fd2d-4177-8eeb-3cdc836cb996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925bcee7-f610-41fb-a57d-d7262d148e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733bf799-9139-4911-b73a-9fa586c3e8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b71f4e-9e0a-4022-b7d1-af1f9f131597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4cb4a5-23e0-472d-b9de-5d7d411b4eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8f00a6-cfb7-461e-9137-efe40b115960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9683e0-d7c9-4c0c-894a-5a1adb6a863e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb38e4a1-f948-42da-9e04-bbd15c399fcb", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ff611b-1d91-4190-80a1-8c0c7616afdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d2106e-aec1-4b6c-9434-33195fc8a8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c44e9c8-4a5c-4354-a43f-9e573c272632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f35e06-9ea0-48c1-8546-a3428ee27024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1491741f-2c16-4e47-991c-6993a9541c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fef23dd-7dbe-46d7-8b0e-04dae24f71a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341762a6-cc2c-4e59-b401-b647e0adb219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0745c958-6769-4ecc-a163-f9991d8764cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb48cdae-0343-4e17-b87e-cc87f2a5b280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b16c6f-4086-436d-ab75-c5c0c12de628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59fc152-6b3c-46e1-9a4f-3d4e22cab3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf54b30-96b3-4e12-8a26-8917efad45a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3b10a9-a884-4e38-aa92-0dd0134eabed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d446e652-8d49-473a-9fea-c05108320692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0f0491-21cb-416c-ae82-b8584f47a8b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680e9fbe-3c4b-408c-bd9c-e792da343ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2a6a2e-6bdb-4d25-afef-a9d68fb77766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1babb4b5-79a2-49d8-aa3c-eeca2f3f85ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bec19b-eb55-4a8a-ab56-4de51bf4aee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f143d554-e984-40eb-9ecd-54a348e3b33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b08e16-296e-4f6b-8d3f-9d6013cb9782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0478dd6b-d995-41be-8dd7-84eef6bda95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206fd50f-3bf6-4bfc-a0f4-5407e8e55b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6843a983-ae32-41b9-916b-45162421fad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b5f2c0-1c47-44d1-935f-2f92c792e5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5ff1e8-6fe2-4049-be55-b783ba857e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd25e7ce-83d4-4e74-bc24-b675b478ba46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44af3d16-90bd-4406-94b1-1d46bfbd3a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e556e1-7a9e-4fe6-b02b-8114508e0bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de05116d-ce25-4c9b-b6ef-1dfd96b99302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba7ad78-61a4-4c4e-b2fd-f7e687f7aa6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd2a7fe-c728-43f8-9d79-92f8222dfdfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87cea7b-661a-4598-ae10-87946835a9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117a5bbf-52d5-4365-b8f6-292df3de357b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.216.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3a8087-2c71-42f2-8faa-ec31205ebcaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79996a7-e541-42b0-a131-112e0975827d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e93e24-baa2-4517-aca0-048d06ff539c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e932468-0cde-4373-b591-850978200c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.219.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e61295-ee99-42d0-97c1-d86aca2345f2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.220.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ad77ef-0438-4be9-84ef-aa5512a33812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.223.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a7668b-18b5-40c4-84ab-d10aeaca0ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f6d197-cf64-416e-840e-e9bd28b0644c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f21d16-e704-4d3a-88de-6ae782c8d05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237e02d9-53f6-4418-8547-5f5b5370ba23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b70dcc7-f4bb-4ab5-98b2-2aacc55ca88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c884709c-7fc4-43ca-9692-105f14e06f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0777ba-3566-4b57-92cc-18fbfdc4d4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.228.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6088563f-ee86-4529-bdc3-48af5087f876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e303c87f-8a59-4e9a-8031-1ad9950b1263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b7e734-d318-4936-a68c-408d7e1210ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1fe457-6905-4a87-93fe-d60435fb3cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50b3b0b-1116-4d2d-b00b-88d823940ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a275c228-9ae8-4a29-a0e3-f2e45c8a5cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60714ae-201f-4edd-adba-8a9d8c94e8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42f6e69-8ab4-43c7-9f15-107344e4ed4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb3171b-b8fe-4e51-ac4f-935a8d4de010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd856d5-b0ad-4283-9501-82cb0f21f035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b11601-b897-415f-bfdb-8d08975ef0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23000f27-9e6e-4a58-a070-37e7d1ca9724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425cbeba-0b12-44a9-9b5a-993f29cad0f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688ff738-afc5-44b4-b1f7-868486143ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81bc9ae-c7d3-4e53-9971-bcef04400195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa42c603-b82a-4ea9-ab21-759b80be7f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd423276-6d2d-43ba-9c96-d4d06b9ea3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e478a31-b07b-409f-bc8b-859ff53013e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5993ee-fc24-49d5-a1a8-7378b760ec55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c711f94e-e160-41f1-8762-4667b7ec674a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10d79c2-055b-4119-8414-cb8fe2d7540e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949d4902-de11-4084-bfd6-f3f50a6f01a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7993ad2e-20c9-4a5f-8759-91f6cf31f003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2440aa74-a88d-4d03-b22a-921e245e6218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.249.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2a04df-4222-47d3-b93b-06e0096d218c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.251.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5953e57c-28df-4f22-9ce9-2bf623436f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169dc043-8b43-4559-9b9d-e291c8f766fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e0f9c2-6a71-4907-acbd-362cc1d33bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.254.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf80a42-3a52-4efc-bf0e-4088d5168772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.255.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e2f1b9-3ab4-4505-b11a-c75f6dfa9eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.148.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f55530b-cc2f-410a-b9cb-b33fef98ea81", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.185.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cab0bec-db43-4737-8502-6d8bd4edb38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2ef45b-7690-44ab-a5ec-45b313e1e54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4dee84-12e5-4194-92a8-9492869e0f7e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.83.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7342a537-a1f4-4a43-8217-64d2fb332822", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.70.29.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfd1373-c5f3-44aa-9902-7b79c10baccd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.14.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd2b8f2-9a57-4ecb-995d-c6d62f268f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.40.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2579c35b-f4be-41e5-ab93-f1f7d5cc5678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.161.210.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65b7667-7690-430c-8a24-986802890bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.195.245.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c8982c-b016-4b0c-a9ff-151e269488a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.67.112.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3362123f-1b7e-4153-806a-8349bce63524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.11.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991b44e2-8df3-45bb-8c0c-20be54e3ca29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.14.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a175cd2-3559-46a7-b05b-90e8cbc1851d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.15.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e811da-f7c7-45c8-bc99-860d5370a70a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.15.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421e2e29-c090-4012-825a-7985500ee7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.76.16.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243dce9d-9ecc-4ba4-9928-00c538abd0f7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.170.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00c1108-6f73-474b-b7d6-a4e3c623cddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3464eab2-26b8-4074-9c47-8808c5c08242", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.29.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be7773e-d24e-440b-bdab-e5c0717a9274", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.144.253.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52ec24c-349b-49c1-9cec-0b82dcd70793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.178.90.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7341e3d7-c5df-4608-84d4-a37e2efc16c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46204a4d-0cb5-4240-8918-265be57cf6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a4ca50-e9cb-4861-a76f-64788b9873dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bf3a60-216f-4b60-a3e5-a132c81722da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbaff1c2-fa65-4dc8-8ef1-b86d599fd09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8276ba8f-84b5-4ef0-a371-85cab2d61f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21362a4c-f573-45ce-b67a-cd8103b1b9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6be400b-6e1c-4d28-8492-ceb5c286d99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920fba3d-a52c-4fb0-ada5-ec3b02cdbf99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6381caf1-ccfa-46a2-a3f1-75cb6710af0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.206.87.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78883309-b78b-4ac3-87a1-40ad2d6c5b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.24.38.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2749881-929a-4feb-96cf-e30f31ce1940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.29.79.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7380b0ad-910e-4df4-8d83-35ccacd39046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.43.52.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d630ba61-d058-47a6-92eb-0156c5d7ef91", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.53.162.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5775818-e78a-4342-bcc5-acc06d862c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.6.110.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15946c98-fc73-47bb-95ae-3d515ffab319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.66.107.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51978cc5-a519-418a-aed7-dcc6c7713c0d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.72.217.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf005621-eea8-4a26-a72f-5af5b9e1048c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d9345a-3a90-4fc3-babd-c471dcdeb37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a114ff3-0d18-4cff-9bd0-07158a7b7590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c3783ab-7e47-47bc-85c3-72e19ec4c9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2176e9-1c87-4bb2-9eed-055b04de1db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1608b302-6169-4824-a74f-eb691628a3e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a27064-8385-47e7-bbaa-7a951e42b751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7291951f-ec56-47f4-85fb-ce7bd9248713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.164']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d1f121-f994-40ac-aa5e-a16a56405db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.169']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cce0920-d92d-4c18-a1af-94a4d1b502f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59089eb-74c1-4fdd-aa73-483c04d557ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa2cf6d-10c0-4fa9-932d-5a85f96a0ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99abd14-56c0-4d67-b159-6b9b129528f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f68652-a6cb-4890-a7b6-7de77041a2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb24b1e-2f0d-473b-8c60-fd4efa637951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce0e1f3-1987-4218-a5d3-35e6cd5a839f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcf39f1-2d23-4742-942a-79048116786e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56159176-10e7-41dd-9da9-3f592be32411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7591117-86ce-4b86-9980-7c0300c16bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4741f5-a86c-4b17-a72d-70a0f1b62e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226b5ae5-ad2e-47f8-9a30-499352a59ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccfcd5f1-f956-42bb-b674-1eb506ebad24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0804eaa9-ffb4-4035-a764-d4a57e542063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c3f6c0-f7ad-4b8c-ac4d-6d5387d2bea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2360d05b-0179-4010-9890-3217bb2230d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9657c13b-7c2a-428d-98b2-4d89bec138d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab44809-f5d6-49d8-9bd5-04f246baf53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.181.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e818d5-4b26-4c44-b878-c327f304a43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.146.45.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250dba80-9b5b-43e3-827e-cd5c5e5a68b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.195.62.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6657c02-98b1-48b5-bdb0-79c8c5178f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9c430d-0992-4f5d-8a27-ccc22d04181a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a94a2c-5d4d-4c99-b6b3-3e116a4d44a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5877e072-59f4-40c5-8432-68823fb43358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39bb2cb-7074-442e-8025-db7c94330500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4a918c-9391-4c73-9ae3-59d0e83ab464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6c4ac6-f352-4252-b4e2-44f2f2e7293a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.21.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f23f92-6eb1-4e5f-9865-3bda8edac932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.238.224.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39dbfe63-3f96-41ff-9a04-213ad8667350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.59.197.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc8f48e-e983-4c4e-b28d-608451af8211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.67.31.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bbf38b-da5a-4871-a287-a972cfa63cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c4ea1b-0ca2-413b-ae07-db157135d8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.53.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be09f17-2ecc-4533-96a0-ca977cee88b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.58.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447223f6-8863-4407-907c-3b180a61f4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.144.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef535462-c25c-4a40-9db9-ac1877b3a6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.0.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cfe0c4-b767-469d-bf20-f7e803912d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.100.240']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9cb6e6-697b-4d7c-b872-0af72db60184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.12.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56658e04-c557-40e3-9200-4afb34e91c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.148.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24df364e-484f-46b8-b2a0-3a0236887348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.161.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fec48c-ec10-4b80-b5e7-9210e28a1a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.165.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50122ba-f4e0-450d-ac2f-f798fe6366f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.18.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75068aa6-fd14-45ff-b23b-ac9c43ca76a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.191.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63891bc-b07b-42d7-aca4-e196e404bad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.229.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa48c679-9418-4d97-8d2d-80f4928abe38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.220.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679a1026-80f6-4f2e-8bfc-54857f52d44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.222.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ce1a2c-be21-4525-91ae-687031e41dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.243.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f624c89-5829-46fb-b6c1-5b6d3e426742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.254.194.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f871ce-befb-4df3-877c-dd74815e1e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.254.194.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12eb750e-7cb0-4f91-80a2-926739cc58e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923f00c5-f171-4d2b-90eb-570c1f1d7cff", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.85.212.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ff62c4-410e-412c-9ae8-ba9a1c036de5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.158.32.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5647e9-a3bb-439b-b1dd-f0c029cef9a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.158.96.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa7957f-37a9-48f0-bc9e-242675286e6c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.241.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd14fdae-e7ec-49b4-aa17-a8d2ffdf1160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7977c6-a2a5-4f41-a059-c5be09d538fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5da27cd-307d-4800-b9f5-d2670f88c700", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.23.48.109']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f96e3dc-bb2e-43bb-9089-e758d67873d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844e04cd-528c-43bc-8e5b-f230db786908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11248893-56e1-4140-8251-d4b7cbc18b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db132fd1-12a4-4156-9acb-70807066df8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.44.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d07446-def9-4492-92cb-72c3044f944c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.104.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96c88eb-2804-4287-b8ed-e82d5e419ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.186.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afee9d1-3f57-4554-afcb-8aa04a149956", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.192.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60eec486-8b29-4b0f-b226-1d2363022bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.253.60.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe80002-c32b-428d-baac-a4f6da334a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.124.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e70d3f0-c68a-48b5-861c-a20200a91b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.126.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abd7ee4-7c6a-47ee-9b3e-7039ad57a16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.230.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da71efb8-9593-403b-9cc2-fbe40f6a5192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.233.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf6d34d-5d59-425e-94a3-3f28b6cc11fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.236.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0d2163-a5d2-4266-afa6-357860a3c5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.1.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9471c5e-095f-44b1-92f8-63ce5f2510ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.124.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9ffbbc-7eeb-47d8-a238-9a4784a19b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.58.56.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cdbe66-af2e-4a5b-944f-75f9fcb6caf3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.253.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f1f796-150b-4019-a93d-6a55826191d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a4ccb2-9882-440d-a38b-475e84baa746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd0e6af-08f9-44ad-b03d-b3348ea8c10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c3a9da-86a3-4d91-bb9f-1fdfb6cb5155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9df5358-9833-4941-b0cc-aec92943ed71", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614c905a-6823-4738-9e74-952fbca4eaae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd30fbb-fb6c-4f34-82b1-c093ad22101c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.154.31.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbd6ad5-89b7-47af-ad4c-8d453b1e05a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.180.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6922ee8-8021-4849-8fff-3c1cfe5f4a53", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.251.169.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b156822-1bd9-48e1-806e-6851eb62a017", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.107.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0488c49-d22d-474f-a792-c64ef5920887", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.168.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4c005e-2f4b-4b17-9376-d0f75f682b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.52.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f45192-9660-4ec1-a015-9c30d560addf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.3.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc42c35d-6535-42d4-a4c4-692c0319d21f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.154.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56bc13e-f418-43c7-bafd-daa25a9027cc", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.76.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6638c387-e708-422d-9ace-4490daf839fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfe17de-ad8b-4d34-b3f2-542cf6892561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a935b50b-2653-4647-8e89-4b5901ab8e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa0581f-e042-4724-8a30-923b641f412f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512760e6-d56e-4a3c-9cfb-0a2d0ff46608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7b4ff9-25c1-47ef-a47c-ea1bdd7f2382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7633a8-e8ab-4b76-b43a-0aa143a39603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54fde9c-7feb-4be9-94ff-135d64450b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bbf8c7-21ea-4224-a8d4-91a5a5b4b310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf83d1d-22b2-408b-883f-1e5b9ee643af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb7e99e-0329-48e7-ab17-ccdd49e781fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad999ee-e1b9-424e-a4e1-90ffef844f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e00e9db-5d53-4fb5-a97d-5ee67e82ef49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8169d6f6-620d-4c14-93d7-34567a3000d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2993911-efa8-4b75-9096-93881def7979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dd0db7-eb82-459d-9f17-b02029a3c390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17188a54-3846-4dfa-8630-40130ec3ca43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.193']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5581059d-0205-4cf2-89e7-f65782ffd748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59792b9d-1a4b-49d6-bed5-eb30206d538f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e613ca0-170e-4328-9e52-07cf7fac97cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d330cf1-b958-4f4a-9fdc-ac2f0c8d43d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2d109c-285c-401f-8ad2-23cdd59d1dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d815ed-f980-471b-83f8-186a953488e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61f1e1a-c47e-420c-9bfb-ac50f4b04ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.240']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12c0327-59e9-4cb6-861d-7f0d43d1fbe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f3aeab-b352-4de6-95f7-f2ff432258c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee06537-d8f1-44ed-b487-1dc3ab7a8465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67255786-f7ef-4734-ada4-9d9f517d507d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1298d259-eac6-4c83-b0d2-b6809afc0d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fbe207-52c2-402b-91ce-fb3c68c57be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a4dd48-6100-40fb-bd7c-da2d25ebcecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9adc70-95ea-4fe8-a827-57c17f16a880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd55a1b8-afff-44f9-bd1d-9d4123bb102f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.46']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca34209-05be-4f72-a588-31e18b0fa6bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4df71e-31f3-45b5-8146-e88975ef0d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045d7d6f-4b1d-4d33-8078-01c6b81be8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8524dbdc-acae-4276-86c8-fa7c00ba4f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d509174-73ab-4be7-8d16-2df76dc38ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab678ba-7aa9-4ba2-9b3c-f21e6428e46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52caf118-3434-4ab2-8c5c-79dcc3d2cee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b948d396-9e32-48d9-a155-bfa5022f8601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d67939-f583-4fbb-8afd-43b857d1b28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fdef51-ac0a-48cb-8cfb-6add2367ed94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a08b0e-eef3-49f3-a8b0-6a03e837bcf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e8c18a-b6e0-4c86-89e2-5c19cb43f907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae2f1b8-1cfd-4c83-9656-6dfa5977bee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285d7507-d95c-4997-a00b-c1d51c50e966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1148e49c-3adc-43f6-8bcc-e68e1deb9c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bc660d-55c2-4281-8bd0-a6b48b7a96bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151b1b62-91aa-4ca1-9495-1da96835c643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7d9ee5-5ab5-4b07-8c96-d55390fd83ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed80431-d2cf-420f-bfa2-62976182e842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a601f9-c93f-4a17-83b5-92b61a4e14cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1999b0-3288-41b4-a0b2-8d8c7338e80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73f933f-02c4-4102-81f6-cfd255794b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333139b8-9a95-4ca8-8f91-417896c50a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871c6611-b2c9-4bac-8c51-99d2fbb979b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096c8bec-22ee-46a8-86e7-4db5edac2d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9ec345-88f3-4140-baf9-0b8d4b77387e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c57281c-d94b-4043-94e5-28b1e836c29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e780a3ad-6a8e-49af-88af-371fd07f2a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d66a909-f780-49ae-ad08-26239cb9f669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3b031d-8cef-4dbb-a33d-53316ba8342b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50d8186-4bfa-45e6-896d-34bf85b9bdb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98ddf16-d01d-43dc-8550-d5f92a81f264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820f3c47-293d-4967-9ee4-c0732ff0342f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4791b9dc-cc24-4bb1-bb39-ff31d55ab00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af534dbf-9be7-443e-b76a-5d618dbcde7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d52a40a-ac4a-40d5-bf11-a6456cd227f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f77c6b9-74f5-4eee-ae3c-46dde02ce421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2b71e4-3dc4-4b56-9659-79ea19a80360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eaffd4e-0e72-413c-9e4f-1e128a3a6066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf7fb55-345f-4a3a-a04f-90285356cfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f1944d-7e01-4bb9-be9c-28e1d10faee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669d2190-dacb-479f-a4c6-9b7325d06d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f982a35b-cca1-4be0-900c-cc7cd9c4f6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cf97c4-8851-4e53-8e95-8f3f36c0f6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96c17d1-2b81-40ed-94bf-cdef79660570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da084ce3-eae1-4615-bd57-ca120a5a32d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da433d48-8335-453b-89fc-ec6a3a022223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4614fd66-4e8c-45bf-8134-819f4203633e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30737f3-218a-4adf-9fec-1dbe5b932a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c3112c-8e9a-48e3-8416-b6d2d95172ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe3b928-395d-4e46-80ca-4964c59ceed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe65b9a4-233c-4cc5-8c5c-cdb1fdbfbab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab447307-c470-4d13-b6fc-c4fa2c333f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19421721-db77-406e-b8f3-d4f8209ed824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617d46aa-1298-45e3-8d00-9ddc50ee2106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec21465-9793-4cec-a663-b04a68efa58f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663041ce-d76d-4511-8387-e71ee97b5d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8255b0e1-6732-4b76-95b0-12bc690c94ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.33.179.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88428958-394c-4755-b60d-eb16f58504d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.33.179.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bdca99-6838-4114-b7a2-b1ea28589fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.84.184.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0c04e6-988d-490e-811d-ce998dd4f7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.223.105.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d47fcb-47cb-41d0-bd06-1dc52b06a79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.151.136.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62156cf7-f224-479f-b466-ad3cfa93dbee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.152.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7287eb-5902-4544-bceb-d6757e0e9189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.165.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135f2f3d-9a2e-42cc-bf08-54df97cfaf73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.234.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801184c0-4ea7-4951-a98c-87e7df263863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.106.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160ccd7a-1282-4133-a9b6-7144830c3d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.114.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b98d368-3509-459f-bb26-ebfc8ab562c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.129.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a478ce17-5067-4631-bbbc-86cc0d15a421", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.140.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3002244-7f4e-4e7b-a677-41a03f60e7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ec9065-3317-437d-b4df-cb53e711f7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.163.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7654fec-7b55-43e4-9f43-c7d939d39713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.219.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f10936-bfcf-4fd8-b56a-55ee3de0137a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.232.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd0fca3-854f-488e-a351-30170ed206a3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.82.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b9467d-738c-4973-bce3-0eacc8cbc189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83556e8-16d3-482f-be42-043d3853fd35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f975d58-c0a5-4b71-96e3-27a276abc53b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405021bb-087b-4700-9dc0-92e085aa78b9", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7203f3b-7b52-41e6-bb23-3765aaf0e23a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1f6a93-1e27-4e4c-8a79-e2058a44c105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b687d10c-765c-4a39-93bd-4cde8588b0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003594d8-ed4e-4afe-bf51-1fe64ec6ce6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c340ab9-b1ce-4680-a54a-91391042a832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4375b4-df9b-4807-8dfb-4db55408d235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751a4d4b-7c40-4e15-9fb3-6a5ca6bd9692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115ac065-b404-47cb-ab66-5037ad7d9a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d65a09-9edc-4b28-a06e-cca71bc1d113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa066b59-6ebe-4905-b06c-6c1e68fdf524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8cf292-9ba8-48d6-9cc6-22bbdad129a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c20151-be2b-4499-a586-8b7b15ae1c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b536eeb-8d5b-4f25-b28a-0bbda22320c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a71922d-f32f-4fd1-bb29-67a071fc9103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e617fad6-2f63-4434-b27a-385d41e4ff5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7c18cc-2023-4b4a-8957-a3adc84733fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797fe5ce-a499-4eac-abbf-1a136ceb3fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d7dd49-af5d-42d8-ab57-22ea111b92c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603134be-c1c6-41b8-99d5-7ce07ce8122b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8c60ef-4776-49ed-b3b1-61e6a7ec27ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a82d91-331f-4463-afe1-8f76b15c6ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65612b1c-10e0-4e1e-82b7-883289e68d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3946beab-6222-4d4d-ab4d-8faa84142734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb29dcb-be9d-4de2-a3ee-743ceec1d1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9510b222-23b0-40c5-ab40-d839dbafb1d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d87bb6-dd76-4b64-b67d-acf6daae86a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce89a79d-b1e0-4851-b317-a8028ad16984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b66ad60-2cd9-4582-bb54-7c469642324d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96326bfc-a0fc-470a-8f0b-f961c0735221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46403f8-20dd-485c-be1c-8b1cd4f4b2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95ba7a2-b7cb-4a8c-a6c6-3d7933ea12ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bd92e5-38a0-4924-aebc-d713e4e5715a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.136.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dc8e5f-9145-4e1a-a6d2-fefb72e693d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8ade81-0e0d-4c94-bd13-a3186fd306a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49daa4ea-1571-4ed4-b2b7-7cc28c8bdb0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6c20c6-2fa7-4932-b240-fb7bc5e69b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3e1f87-ac91-4c85-879d-4107b4d4edd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838baa4a-73a1-400c-afd2-0db485ee6ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04d2f86-39f2-445d-8b2f-8be25ea11c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e463cf-ed6a-464e-b881-ab3510c7f095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b125bdff-e1b8-44e1-8507-09e23659b783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a4201b-84b8-4550-8674-3329ab4f33d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be9092a-06df-460b-9436-534dca636ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0705afc5-6b59-4698-9695-d1d0d53c1ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8b2d8e-a0a9-44a4-9a49-5246da281ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5781bdbb-3549-4c73-9be8-7bab6349f4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbceca7-74af-44e2-be9c-ec5b6053d9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73719e2-9d56-4753-88d0-fd37e74e90dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0976ff-a2ba-4520-b2e7-51d81f4fb055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa23007e-3527-4372-8c4d-b357ddb170ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e281bd-60ed-453a-8301-43424fb823cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cba6be2-e24b-49a8-8e6d-8705bc2e945e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5096c09-08e3-451e-b18a-aa3872a1db5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0bfd013-cd9f-4d7d-b980-912a9da23e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e406da93-6319-412c-9387-ee0f495e26e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703fe5c8-0d4c-40d7-88ad-b8482c9eb838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ee6447-091d-4336-b082-2b573019b50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6978ba27-a1d4-471d-827b-a4f09defec4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b855207-cc22-40e7-8e8c-802bf0cc6821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e01e7b-591c-42cc-b805-baa7236335be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73170cf0-930c-4bc2-8f58-885d35a7d8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e2048e-bf8b-4e3d-a211-a9ac6eba98d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6586ea85-7fa8-413e-90d3-15fa676d6ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c16309-dd1a-4c3c-953a-457cda5d7113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519db23f-f4aa-40c0-a6c0-1fba31f39bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03e9c8d-594e-4bbe-80b8-ac6298a3f8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb430fd3-7dfd-4bc6-9f4b-b8fbd040409b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bace8c-eb57-44ef-9b77-4c7c9bf1d3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ea52aa-c167-4ff3-8fe8-0e1f2a4cb2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19e743c-ff20-4442-81ca-5017c7cea020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6349cd1-5b64-43ff-99a8-1cbda433a4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8d8b72-d77c-4256-b7a1-0a6bc0b0b22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cb123a-4c0e-4c7f-8a5d-b4fa4b5b05fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccb3446-7880-4f70-a9ec-25338177e60b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ab8ea3-800a-4015-86f9-496db42347ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93fb4bd-25de-4ac2-9a3b-3d89779cffbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5d619f-ff86-49a5-acde-7e1bb922bc89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd7a4ee-4337-43b1-8f38-2173d6bf157f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b213b37-9408-4936-88d4-dbccc3583ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9514e99f-ce4d-40be-bec9-b5be2468c73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8649342f-cda1-41fd-ae47-c0914b2bc467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfe8b52-f222-4a47-b10e-6d5c63ed0e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d99162-a735-44e4-b603-61e0a3e7d792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed039a2-67cf-4a38-9cbd-0d9c03ed592a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c1ffa7-a9b8-4665-834d-620485f3fb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf957ac-cbd2-429c-8b13-c72e71f66b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee4487e-649c-4cc3-bdd3-20b0239752eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208e598b-b24c-4676-9056-4a59105e77ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c958afa9-fce0-4815-925e-3174fb54b8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc5658c-a582-4a2e-a38c-a53eb0b400db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c76fc33-e5fb-4223-b840-143737e4061f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04c9089-370b-404f-b869-0bab8b49181a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87887ca4-d41e-4cd3-a3f9-b460526e1656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2662102a-f109-45dc-a6d3-eeb472c1e469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75076cf3-33d1-4264-9223-73c7169fdd0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407bd31d-09df-449f-b513-6a78b927b0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d31223-97b6-4b96-99ee-f613eb69605b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527ca16d-760a-4299-9695-967008577065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094fbfdd-ffae-483b-b4e2-4b1c7c2fa515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8252244-e8f0-4b3a-9587-defbc25df2ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea94c509-74ba-45a3-8de9-5890111137d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4556823f-75d8-4114-a29a-c241d80a7ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075203d1-7134-4c77-b56c-3f02665531ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d62139f-7b4f-4501-9d87-04b67d14efc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b354e5a-0993-4290-84f3-4685b5c1c83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfff651-493b-495d-a552-6159e16c037b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8308ac9c-ca9e-4a83-9156-343f076f4d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75644f65-6e37-48e3-b8ba-aeb0fabb3094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de02f3d-5a2e-451c-a53f-7dbf7fb1cd0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b55f26-c701-4fea-8a4c-2d7e3f2a49dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1b47b9-d2cb-45e3-b21f-8b06f3300a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a821b69-b3f7-41a4-a12d-1231c8792853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.145']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8193b265-9103-4aba-8687-efbd24e717e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ea0910-5686-4df5-bc48-60d07956e7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd12d34-b9f3-4bc2-a869-82196d928045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b71ce5-0758-48ce-b3a3-a431f9a09399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8911e65-919f-48d8-8207-867764e741e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189a1cfa-2bae-4483-b391-12e2a7cef901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f3976a-2910-46b8-bbbb-90c4e9662647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d75ded2-90fe-42f2-a25d-12fa4fb04b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4223ed06-6ccc-46c2-add0-f020ebfb6c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74befa29-fb34-4321-9565-2be63bef4931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b095779-fcd7-4f86-bc99-78e898a18d2b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.235.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188aa14b-066f-4735-b764-134c0b6c6227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f69e7b0-7b7a-4b4e-af55-a5896cde7638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35457438-b3ad-4428-ad71-3a404feb921e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca428f6d-3a93-4455-8596-2b724a6bfa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181a405b-9966-46b9-82cf-f0e491bf10a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7906486-50d7-4fa9-8470-644116abdcce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edc5ce8-eceb-4175-9082-fba8d0ae3895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592e2634-1efc-49b0-9b66-4c7bcdb9c150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42430d4-d4d2-42a2-98d7-cd51311a1fd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec45cd4-bfeb-4fdc-a87a-e161d6ffa723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4420f5-ecc3-4b49-8691-b3596de742b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc6f474-d716-4505-81b0-881d3a20def0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedbbc54-469f-4b9c-aaad-00be0c2068d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7fb14a-43cc-4ad1-bb57-a3c4d4f0a929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083a8240-8a0a-4484-928e-4ee40fc63b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df880ce8-5eb1-4624-92b6-361e5782959b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c24435e-b61f-4e27-b0f2-6037f85b78be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c548e4-c47c-415d-9ee3-b803fd4a6ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd902e72-6428-4eee-add3-f46749151d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae998f9-c934-4a17-b192-cfc3bc3f8fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a48c39-2918-49c1-baea-1cd2a32295da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5eeb706-68f4-4bce-a7b2-515d393de02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e45d94a-8b5c-43bb-a398-68ed2d9b0cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007e68c2-0f69-4d77-9dfa-9f74530005bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd319aa7-3622-410f-81ca-e3d48084de31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dadcbd9-b654-41db-9f2b-1b05c8d67c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f723636-40e3-4871-a4b0-c8bcbf07708a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789c5253-909e-4a0f-aea9-501ee42fc193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c811ff61-7e72-4a9f-a2c2-d28714f45b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218bddbb-3369-4f7f-8fb7-675ca2b77c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b08735-8207-4e9a-98e8-27334471de1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29317850-af6a-4541-8806-04e947f8ec1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.191.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b527a9-c2ce-4e1d-a63d-98d97abae820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.60.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8529bb6a-9da7-4b61-9cc7-6fcb4747ab10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.69.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace134ba-eb6e-49c0-871f-980633a76a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.110.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc5cf17-1b36-44d3-aa06-0d0e66afceb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.172.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3e3c9f-cf82-40e3-9583-2bf7693f972c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.188.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee8fd10-e87e-4002-9855-e4abe1a7226a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.47.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be6e484-2adb-4822-abb0-1416ec311fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.114.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bd2745-ad93-4bc7-a0c6-9a3b3f609ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.143.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8ad2ca-85b3-45a8-b45b-d35fede4d561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.33.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f9a064-b0ec-4bc6-84ed-2910f47108db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.176.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d680e40b-8751-4226-8e32-905a413c6840", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.99.21.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f8de97-d54d-4e2f-885b-4c23aa2d2acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.152.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49dc69b7-707b-4514-9b5c-cfdcbb5ae08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.249.13.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f63628c-2308-4e7a-897c-d7aa922d6988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.61.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e191630b-6510-4add-bf30-667fe25f4e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.114.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdf9edc-446f-46b6-8be4-526b3687785b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.164.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49039d08-1bd9-405e-ab9c-bff621ea773e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.164.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9de64d-0ad9-4964-8cc0-0b40f51b451e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.164.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b840b384-bb2b-491e-9a3e-fdc217dc719a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.164.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5719a5f-6da0-48fc-86f0-2dd0d0a8ef4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.164.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e84717e-4a46-4436-811c-d37320108f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.165.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98189b4-0fa6-4dac-8cc1-d7032228a731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.165.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3b83b2-9b6a-4fdb-8423-18cd8def0302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec993ca-597a-455b-941e-7ed35226ade4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705b3d1c-1494-4290-adf3-a1590c80ff73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5aeeab4-bb77-433a-875e-dcf9f299bdfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914bce26-a925-4d3d-ae94-8fb24a9ef3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3f74a4-7f30-435e-a599-746fe435e3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd671687-7c22-4b7b-8b44-ec7cd024872b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a68ff38-1b55-49eb-bdb3-62c17882c20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01cfc25-eb28-4a2f-9534-d671e562282f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a06bf8-361b-4e84-ab12-9c07f5c8690e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efd4a96-6a6c-4997-8b66-f2d17044ccae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ae076a-8828-4cbb-a811-ef7237781f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4255b1e9-c94c-4a8f-931b-f65b4b219c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b167cb-1907-4fe6-a61b-a82cde95046b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b1a643-d978-477a-9e38-37e779d40ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c89045-6acd-4611-940f-58164d8b2b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12e7a92-4192-4472-835a-819e83c95f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d59e76-c3ad-4f71-b76f-eb98857b2168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96b8add-65ae-4c13-9f02-7136aabf3e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f18e7e-e9ce-4438-9269-3a8e52edf9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af795c3d-9e85-4c68-b05e-6cdeeee17d33", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420be1d1-f439-4027-bba6-1f2fcb0f8842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fedc4f-7c29-4586-bf18-fe162eb9657b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee513d15-c2a9-43ca-a868-b2c7c7ec34fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8b3ffa-29fe-4c41-97a5-51eeebb9be60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0c7cf4-af60-4e22-a5cb-70ede5f00e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e402e3b-e336-4d1a-b5f7-ef09f3ef45c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4971279a-51e3-4ba1-8475-68cc62451888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbc2f63-6691-4222-83ec-23026651460e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35749b0-19b2-4bff-a5f7-821c1e3cde8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb6bce0-bbf5-41a1-a9e3-b85c2bafb046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9347050f-56ff-464f-8bdb-d666f62fa5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b00ad4-0bb5-4d83-bf73-dd6c604de460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe063751-3a43-41b9-b631-f123dfdca1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.101.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8703b12-da4f-49a7-9513-d4d430482b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.113.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd771193-52a1-4374-a4fd-a84e70494522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c506d5ee-53cb-4eac-bc60-d46a74f43dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.232.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbe8022-e3f4-43a9-afd6-45c1649ac31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.164.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c90cbe-0963-4671-a637-8392818fc2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafa3009-385a-43ee-90eb-baf8d19bcd8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.0.112.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1600d1fd-dcad-4571-ae51-a4f307907ab7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.35.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a2f2ad-0127-4b1d-9f2f-5f6335b77f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.204.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd10445-aea6-4918-9b35-eb4cfadd67e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.204.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b83046-52dd-45fd-a291-07ebb64b2cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.204.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9b6fb0-6cf0-4af9-a5ea-aacb624270ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.204.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738009f8-cc7b-4a70-b712-146b7c4211c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.130.204.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7401c376-12a0-4a47-a3b7-2b5db27e64e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.150.35.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbb06ad-845e-45f0-9a09-c1236c9775e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5253af1f-b130-4d9f-a52c-cb8f357adfb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb2176f-a912-463d-9a1b-5dbb8329daac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891fbe75-0c45-4b0f-b31f-7f7b661b487d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecde77a-118a-419f-9063-99be785cf214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eaf4c64-99ac-4f6a-bae4-643b1364c51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e38c38-121a-4257-a0bb-321832c52040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73998237-626d-4c6c-b287-c1d1ff9154bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206537b6-54b5-4ee1-b100-5f30b60fd446", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.233.51.0']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245ee9c4-4651-48a9-ba48-30f568109dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.244.91.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140bede1-f4f5-4211-b29b-c405ca214d08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.141.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275521fa-9256-4c1e-be04-8c3d528e6494", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.56.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a129ca9-79ee-45c7-841b-8b863633858d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.39.184.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87afbf5e-2e82-4f9d-ab95-c0beea90cedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.136.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cddcfa1-fd86-4992-bbad-f85db98f18da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.154.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77db69fd-9ac8-472f-819e-457c5821693e", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.80.37.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2d4dfc-7633-4a13-b0fd-68fee8e3675e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.80.48.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a533e1-d0f9-4381-824b-2ab44abc6934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.83.212.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e638774e-92a6-45c7-9bb9-1f40e0a28f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.108.182.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03319455-116d-4333-8a78-fe45922bd158", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.22.215.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d7737d-8953-470e-8308-9df962e2408a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.221.205.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e104ae0-c890-4856-b2cc-f03b0c56e44d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.27.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93be6697-1533-41fd-96f3-2969971ba869", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4105e402-1573-4429-9089-1e5038495a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.36.214.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfd42ea-b5f4-41c5-aa56-ac597f7e4e1d", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.96.136.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc1683f-3f08-4b88-b703-237090739011", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.99.132.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ef98fa-8b78-48a9-8832-b4d3ad2ff038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccef1707-6c18-49ce-a592-0e7301ecb3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.105.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476228b4-dd21-471a-8ddc-a67c5ad1871d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20c6d42-717f-4be2-addc-659d63dc6270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779623cd-0a78-4637-a442-97b9292df59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86e73c9-9312-43cb-a3c8-80a73100db55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.186.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4892ed7c-d078-4386-9a62-7717145e4dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.208.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569a32c5-a5c7-4bd8-98fe-a93c6a0ac8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1860d793-863d-489f-aa8b-431755201bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06436f7-be6c-4641-965c-8b75f7baa4a6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.237.193']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6fb789-eb5a-4c5f-b696-c4eb94999bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0fb35b-8b2d-421a-a97d-b9201b16944c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.81.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23815256-cbcf-4b3c-880a-9092614a4bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.183.149.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e742dc1-85f4-409e-8306-2e397b4a04a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.197.168.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c9dc3c-a34c-4856-a23e-169183b03a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5635bb1-f2e4-4791-aea8-d6376de2732b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fbdbb8-441d-4823-82fb-8928a258c3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c3de75-a3e0-4151-8ad2-8d202d828ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bc3746-4804-4b1e-9acb-ffe6f130faeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910fb000-4bf8-4894-937f-79512f126b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f122b236-141a-4288-af62-579f0b1509d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c9a53d-d27b-4fb4-bf25-369b505b3445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4489adac-49fc-4f95-b09e-7da84d728b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cce31f0-acb2-4e95-8c8e-6e84d8737796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f17a68-a602-4e0f-8c69-51636491a4c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.44.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42280be2-85e3-4494-ab22-9bfcea4d34f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.49.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609278b6-9859-43ec-8042-7b163e30bc5c", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.224.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67500da1-4fcf-4279-9ad9-bf7163fbcd9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.225.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc01848-6439-4ad5-90f2-568d3cff937f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.242.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8f31f1-381c-4edc-a145-2edf8807c592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.224.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0261fca8-4e3a-452c-a4a5-9c4f6157cdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56ac409-8638-4691-adf3-04ed66372876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.201.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6135e7-84d3-44c1-a0db-51b54bf9070f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a86115b-eef2-4904-b3d0-ebf8118d07da", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.214.2.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba2314f-e838-4e83-aab4-fe4720d4a326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61021c1c-3832-4dab-9d5f-c348879bf26c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0f0369-726d-46ea-8272-407284696e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cbfdd3-42eb-46ce-ae11-2e0978d00489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc2f78e-360b-4a2a-9157-0b0971a106f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b158a2-d747-4e0f-920e-123428b77a18", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.146.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5c7264-b248-4f9d-a1e5-1a15c8a8a3c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b45d29c-0283-4070-8df0-0dd3f856b932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd99c87d-e256-41cc-905e-2e0c40f242a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10aa8ed-09c6-4654-bcbc-254ccc16d245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b332bcf1-7cbf-4f0f-b9e6-dddeea8dd022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d582329-5bf7-4f0e-b960-881e9cbfaa7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84d2ff0-fb53-4e7c-a1c5-19ac5f705b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4808c407-5aae-44c9-9969-2fc934b6ca95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa12b27-8402-4e2a-8f94-1a4de1d1669f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4b6c67-2ce0-4d19-9d88-0ddbc07e7c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5505a370-7776-402e-911a-eef2198665cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9eec675-fd7d-4de5-918a-7419788dec81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134283fa-f648-4a72-8a5b-7a78f1085104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a3ff1a-7a38-4cf1-84f9-cc6a1d6d8933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57a91fc-21a9-44d8-83e3-d466e5988bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e49b7dc-a231-41cc-a5ce-4cff0efa2812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c036b147-7ab4-4b0e-b821-2da6ff06c4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251af526-7bc7-4bb2-b195-81623d1cff83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e40665e-ce2a-4837-9747-a7f5ad6f904d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131af435-f3bc-4177-9384-664c16c53884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02908717-0c9b-41d6-9424-393b839d03c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c688895c-ecd0-407c-81a1-ad8b6d33baa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30ffd5f-49c1-410e-ad53-fd39d74d3143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05556d9c-0537-49d1-b4fa-29c37a8ec67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7367a91-71fc-4b40-9a04-79655cd0371b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1f37bd-2fa8-4b47-8353-c7f414a72585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36cb6e1-5e09-4614-b853-3bf79897d7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff28baa-7f01-4d56-b1fa-0a200e18b0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85e189f-5d78-4dbd-a7c9-77883cf768ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c7043c-3ed3-4333-b91c-3677b1ee4601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2a69ff-b1fc-45cb-b696-49a9bf97c265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2876dc-6094-4132-8de2-4e0ed1b3eef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85710ed-a36e-48fd-b62e-a128d99a5474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1172acfe-bd5e-4f3b-adaf-d18af22971b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7931c807-981d-4ded-9b1e-e05f89181209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c89b03c-3933-48f7-a2a2-e997bdf66818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6185776d-0fe3-4c67-bcc6-c5bc2140eae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4201115-4c26-4aa5-82f8-8aa182d87d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88dfab79-8554-4c3e-82a8-1497e8bc4bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f8b954-5147-4f7a-af84-367ccc1fd066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bef9d15-7a23-482c-a977-e4b9af985615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534542fd-2471-49bd-b80d-15f704c95c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cfe8d5-2984-4bde-8abb-6518eaf9e1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f0bb51-ccea-484f-9309-5d30f6062ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1375367c-d07e-490d-87ec-d26ce28d85c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.16.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c66679-4ea7-426d-8dca-30ec7865f524", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.56.88.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d240ad-ad02-4ba9-8e89-5a0330d7c0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.121.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9b3b4e-e1e0-440f-bc71-63cd32a95b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.123.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ed0be4-bc05-43e0-9ae2-3a6adb511603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04d6847-f440-4c90-b87e-7dd817a35a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe78302-76ba-4ece-9e47-51a3eab338ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3fa01c5-5db2-4330-abce-ad638bdc5018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57379dad-a88b-49c1-918a-6b0094176c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.201.44.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c78edb-c48e-4f40-ae80-3029588eabbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.201.46.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8af8c66-f36d-4812-a732-e84e98c68921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de252560-0891-4884-86f9-6cb74a41a33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df4e34c-c576-48b1-8040-a1d0b269fba7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.247.226.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3dc980d-0cdb-49be-8a19-2ef97eadbd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.53.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4500deb-7fbf-4ee1-95b9-e6d6eefd4505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8751300-5d77-4570-86bf-f5f269805e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b12f8c-1728-4c9b-a615-e3862464d963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f3bdc9-3b17-4a18-9abd-84f7e4dcd3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9ff96e-7394-49d7-9082-2d1f1318120b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d445280d-5547-449b-8def-c46196a21690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532d4072-a2db-40e4-a4a5-495e44a4cbb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec769ed-91c6-4968-b6d3-97dcbdd1b13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e92fd26-5ec2-4613-b1a8-1bac4e0d2f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5bc91e-8d59-48ce-9884-a57812ee445b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a29214-eb8b-4bf0-9df5-09889027e35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0cd33f-e518-4fe8-a6ea-c1d01e5678f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be770a6-c077-44c5-a27f-e7e408a43534", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.54.32.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe004e99-be8e-4e2d-99e3-6c0b7d45ee90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.129.58.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390497a1-9df8-4665-94fb-a6d71fdbb2ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.129.71.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455b59d6-5308-41b9-a0a2-d99eaeacae7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6914fd5d-82d3-4db3-850a-f2152a95f82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.7.32.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68744bd0-b2eb-46da-96f6-2187b1d89c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.0.46']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f5d48d-6efa-47cd-952b-b5b186ab43b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.62.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96259e43-214f-4e7e-aaeb-020cb9fb7fc6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.139.91.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f97a55-e926-48f1-8d9c-a1fcd2856d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.15.214.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34cc50ef-7e39-4088-87c3-2b6cf2e0f98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.196.136.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e850be30-314d-4cf3-a0e9-4c83d17cee8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.200.104.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6a4f09-6818-4b39-a9b9-7920b05b4daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.209.246.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3c53db-84a6-4ec9-913d-d8bb5b8ab543", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.27.171.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67be5cc4-1631-4b17-87d2-04dc97e3c0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.29.21.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46414d0a-365e-42dd-9082-7e34bc24aec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33d0b57-472c-44bb-9792-37b71fab6951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d831f42e-3719-49d4-b604-f77d9fa350dc", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.100.31.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24293d40-d3c9-4300-bec8-88b4f7d07491", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.105.201.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839f3e2d-05dd-4c02-a842-2cdcb26e156a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.105.222.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a3304a-b68a-4aec-8e02-84914886ff79", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.108.106.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c76876-6ffd-42de-9f7e-1c3d3040c8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.111.51.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423ef730-b19f-4764-ba90-304346ca9506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56f4cad-a489-4a97-b986-8cf0b7d3bbaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09abb23f-ba10-4f03-99cd-c8906649f455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.6.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de91149b-b182-4f2b-889b-d549da6445aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.192.198.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f87680f-7e80-4c63-bf18-3e8e3d18585d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.236.27.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552fc732-1e97-40fe-aabc-120284153deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6e8205-2a3b-427f-951f-20cbf7981281", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.39.49.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7ea426-dac1-4809-8ba3-fbc35597f892", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.44.51.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f592d8-14ba-4ea1-bd90-92fcd2804deb", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.52.103.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59525915-8de3-4121-9220-c3373a5d45ee", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.52.42.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d73729e-ddd1-4931-b7d7-94639b056219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.159.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea71043-765b-4f42-974c-42f0c4379cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f63f2b-b0a6-4ef9-af06-07d9256548fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8ff4cf-a4ed-402f-bfa4-53fff7e5d3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3074da5-f6ca-4717-bc36-2e231d59622d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbe16ab-302e-4211-b477-e215b303adaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bbaffa-b226-4508-a26b-59317a63ad3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b4d981-53a4-4516-bc17-303cfdf1796a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a9abfc-b731-4773-8f6d-52bc305f5a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9695747-c944-486c-9a6b-d8d6400192e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6493a2b9-ef89-4725-b755-423a6c291beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550e1ab3-7d95-4664-a784-702c2f34b5bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6597a6dd-d7a2-42e7-b959-28f9bae2749a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2ce600-e560-41a2-ad11-fd047da9f1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5739df-17ba-4d7f-82ad-e28dc8338b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8e2079-e932-4ce6-81f3-6e5c99b91b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3372429f-3923-411a-9be3-a2c38d21636b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e61d604-9670-4c8e-bae0-0ce842036b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2973a093-86a7-455a-bc9b-a769cf763b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c51b21-569a-491f-8ace-5526b33f9a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb70c7b-191e-4b59-b18f-007ea8295107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463cae9a-cecc-4ec3-8de1-dcf7a8a1f3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa14a47-0b1d-416f-b018-5b34a3631521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22cc6700-e333-4845-91fc-ca99f3f69fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e84023-d4ff-42c9-9d5a-488edfa0ab72", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.34.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2bebd8f-12fd-4973-846e-a9e3125b2f00", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.97.63.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e585d86a-ee24-417f-8361-602632f4d79a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.98.11.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22791a3e-7e86-4ef7-b6a8-c3191ec23117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.10.201.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b4dfb2-2dfe-4f16-bd33-64e3a992023f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.104.174.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02403ad8-b176-410a-83c7-a1b907de960d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.105.246.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8ecb41-5a08-42d0-a3f5-36126fdbd7e9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.124.34.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99db3c49-2035-4e77-a421-699eeeaea1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.172.61.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52808bf8-e224-49bb-92e5-ecf77e7316d0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.222.109.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c45ff92-7581-4642-8f37-b0ec866d7cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.225.80.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ea2f19-5bf4-460f-9714-8eede788b13e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.25.58.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4efe132-4263-4b21-95b3-0886ab3f61f9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.52.27.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ed1560-f3a7-4f68-ad58-83c407ef78d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.85.56.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea28ca61-684b-459f-b50b-a486aa869ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.32.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed964130-4a22-4745-ad47-b33989101f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.52.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2b7fe2-368d-4e13-8022-ccf2e6cf05ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.88.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72f0a76-134a-4f3f-99ca-20a352b9593c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.15.143.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467eb92b-970e-4ff1-ac0c-f8dc6ac7d87a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.159.210.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef2bb50-ee96-4ac6-a6b6-0c80cdba4ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db25ccfa-94c8-4b9f-917c-024956e10157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d1714a-d676-43fc-bbbb-c2b7a1631230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bdea47-f01e-4ac9-9fe8-c10b903c9353", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.220.118.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b337ee56-7f3f-4abd-a392-99dd562ef0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.222.111.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7a0faf-05f8-49e4-bf64-c33f334f3ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.107.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2806d59e-cf68-4abb-a983-64aac913b431", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.33.138.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7726e74-e02f-4cb4-bb90-dac6355782ee", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.49.236.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2454aa02-e143-4d6c-97da-17b178a46883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.79.132.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b83ac89-8d68-4f1d-8218-97d3f7b6fa70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.79.144.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831777fd-d209-4879-b368-28d2607978b0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.133.48.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc71921b-06b5-43f7-bb1a-b62567cd4a13", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.135.218.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60da9032-aea5-4d44-93d0-1f860f47dab7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.250.45.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ed37e6-3536-4c64-8906-bef338813c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.150.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f588eb8-a186-4cc9-9153-80995784cd82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.186.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0327eef-4660-4d94-8130-b9e3e2efe959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.60.149.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e13f145-816b-4f31-994e-6fad48331d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.60.149.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1073e62-57d3-41e0-aed3-2ca4fb54be48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.60.149.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af905d4-78ae-4b34-a88d-7281e1adfa45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.99.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f8b99d-98a9-48ae-af9b-b41b005ce845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fb2f59-c5b0-480f-bae1-91c59130ea5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d124a3-eb52-415b-841a-5db5d0182d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df203bf7-b5b2-4876-a664-3dcffb857351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77b4579-87c8-4abb-a5f4-56e206abe273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.206.157.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58dd107-07e4-479e-b3f3-1c6afb7f3c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.206.38.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccad8a0d-79fc-4c32-97c1-00a799a0db0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.208.214.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce59b38-ec91-4275-9f3e-9dd874c05f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.183.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996194bc-d719-4402-a7e8-7d82f88f0ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.234.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e38e1b-9337-4820-b97b-e02f50133d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96465a9a-7e26-4e62-a37a-5a5f4aeb06f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.118.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f8ac5a-9726-4b6b-8378-404032e189ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95cf2b9-e8b7-4fe0-8f65-d9472376f344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.234.140.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0018bf-764c-4709-b1d9-1a9b28314b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.26.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58784a7e-54a6-4842-a83a-a970983b77ff", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.5.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a16236-f59f-48dd-aac0-15f1a27ae03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.5.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a498e0d-945c-4362-b6b9-c4c45e5f7b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.114.38.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99fb9137-c833-4fa2-9295-583f27b750ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.13.241.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0f332c-18e3-41d6-aa23-eab0e794508a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b04622-eded-43f6-9c61-a41c0bebe114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332518f7-9344-4ad5-b46f-fb68ef5513c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.134.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617595fa-99cd-4bd1-9076-7c001c9d5950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.160.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af4eb0a-d618-4e25-95d9-19e42873cc0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438d3c83-4299-433a-92d8-02938a65d6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.57.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd7a1a5-e1d3-45cd-a404-192e079b3922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.245.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506a797e-1e6f-4e1f-951f-7ce4cf38f4da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.164.12.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab9a649-0d89-4104-a8c0-a4176e039467", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.199.61.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cb8244-a517-4ad3-bfc0-7143744087a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.78.4.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2080a30-ab89-4ca9-b1dc-92c93f354c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.91.173.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a9776c-4d17-4344-8ae6-a8fc37c94ef9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.91.85.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c63608-21bf-42a4-8c08-fac4af1ef0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.10.130.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842c0606-272a-4b91-91e4-6bc8588bf5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.105.123.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a2d8d4-e342-4d16-9b7f-452c35dc7f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.225.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354dd0e9-7f4e-47d2-8430-e939acece80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.229.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7d68ee-f99a-4bef-94ea-c0b8fb1dc36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.230.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31948045-02fd-461f-a6e9-8fe5abd00e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97fe489-5f7b-4602-b64e-e3aabd972389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21ef560-439b-40f2-a39b-025ed6ea5467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9ba096-45ac-4510-84ea-88951f2baf19", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.150.25.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4038371-f5f9-485a-b849-25d5c9a7e45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.220.60.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8a95cc-dba8-49b2-bf49-b0d4abde7b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.23.54.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6baa94d8-8334-46b2-878a-beffdcf9ceed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d195b4-19e2-40df-aa23-74cb8503f02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a1de9b-540a-49f2-a9e4-3cd81e505c8e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.253.55.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155fc406-b600-4598-967c-c9d66583cf6f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.43.76.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15259327-7025-4b60-8017-6abca967f549", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.61.35.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0fff43-a766-4679-94a5-7fcb2d516bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.88.27.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49242c7-41bb-47ff-ae6e-5e6cb7ea4371", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.93.50.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd49f82d-2501-4c49-8457-510bc0a7b524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.129.48.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f80eef7-e192-454c-9f7a-cf9b8f4a86ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.134.217.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc40971-3bbb-42a9-bff0-4862c9dba8e0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.151.103.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082120cc-d190-4eee-88cf-29f457e8f702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.184.53.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373f86c8-d5cf-4030-8318-5ff98f6a5d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.201.208.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdb81dc-f4e7-4fe5-a8d5-6443a9e754a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.250.89.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccce645c-b53f-41f5-bdb1-d5d006fe58c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.56.210.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a549f2e-8956-45ec-8eec-a63b3545e6a9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.62.172.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c139981-3b4d-4221-aed5-c7852e0388b8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.115.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec963f82-d21b-4ab1-84a2-da52e3e30689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.168.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f21ea2c-b9de-4b91-9f03-b87380db0d40", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.83.33.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e45b653-da57-40a8-a74a-aac5d460486b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.90.173.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53b7ccc-0429-4123-badb-470fa5d08937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9645f20d-f8b1-44de-87ec-5285da2894d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe0de74-62c2-4972-aad7-ad2e6aea3ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95a6ee9-bed1-4112-b6fb-366dad183781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dfc274-5cea-4f14-b744-d637e344391b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c917034-3b74-45df-8428-e53061688ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751907c4-0708-43b9-8a53-3a9e9f2f5f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45520a86-dcfa-4ceb-98f3-0cac06d3d371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd20c3ba-94c0-4408-94e5-77a64060bd72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9defc6ed-4b97-4f7e-a50e-deefefd2c31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69165807-06ed-46a3-9b0c-6b1acc522638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70b22cb-8825-4abc-ac0d-5613299df951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08ebccf-483f-405e-9de8-54cbfc14f194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf52854-8ba5-4c76-bdca-4d32b2d0219b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8979210-44c0-4678-b4e2-f8c133f24a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176b472e-6cbf-4172-a532-9c66d5b39981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7efa836-804d-40c1-86d9-5683540101db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b96d49f-a487-49b6-a357-0ced4d30d850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434d35cd-3f6f-4f1f-9c28-d1114ef49bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d8d31b-549c-4902-b50c-a8148bb1ec8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a966dd-95be-4c2d-bebb-3a45c09dc99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5242ded-4a36-4457-920b-4d4d51853f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431a49b3-f589-428a-84b8-ae4e8258fadd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ad4ad8-e792-4559-90c8-cf7c13eb374d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f6085c-df0f-47c6-b08d-b1dd2f56dce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8774fde-bb1c-4944-ad70-bd0db5f892b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e2420a-36bb-4964-82c2-2097922e6347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1547804-3a5b-4a8b-810f-d722b8e512e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5407a12-4dab-4c5e-937f-a6e24d418698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14590167-8bab-4052-b8cc-3813f9a2a572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.107.179.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b4bdba-c954-4c6f-adb2-8a8033d62713", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.15.231.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3caf389-3972-4bb9-a7cc-1b7a1d3f9d64", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.22.9.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2607a50-b78f-4c03-8237-ff3011bdd09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.72.64.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c302218-3eb6-4e25-8b0b-f5378f946833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1aad63-f6f5-4710-aeeb-dfade681a0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab53fbf2-8813-41cd-8568-0d10a7127abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33cb985-f127-4deb-a122-3cd5eef51a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e96e35-8601-47a6-bed8-3b6a4c5e2162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bb277d-89c8-4382-9bab-88e2b369fefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.138.230.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad4357f-9612-4595-9279-a4c9f815ef71", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.148.240.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77db753-6240-422e-be7c-b8613d709127", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.153.231.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd399c9-d9c4-496e-bc56-9227a52d1483", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.159.162.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9c4b3c-0b6d-4800-bf60-c0b5bc4441c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.159.162.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ea03c0-5a3e-4a3e-bc22-247ef187b974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.162.144.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b192f7-c970-438e-b63d-652d49708656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.171.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b41ecfc-aa9d-4955-8a80-749950e04171", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.189.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b589e1-9c69-453c-bd0c-f6b0ae637d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eefcbfd-d54f-4eaa-97df-6cc154315677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c313e83e-4dad-4c2c-999d-d10ed95c3bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ac2f87-fb15-40a8-8bd7-6b2524a90e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae053a3-d62c-46cd-b942-f877b8c7d319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6539df9-d2cd-4221-b7f7-0d4f2e22a3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729ab423-cba5-4a5c-a759-cf1afd78682e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109820e1-3d06-402d-9d8c-4ccaa9068216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.186.50.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db120b8-0573-42fb-b4ec-1dff5cc507ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4ffa13-ea62-413f-8a6a-3921440d9ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e563e1-41ef-457d-8a31-16bb75025a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.190.25.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e62ffd3-be3e-45f8-99a9-d281a62a165c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cd36b7-0ef6-4946-87d8-b4d4309efd25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414cdafe-9ad1-4f92-9ee3-cde5766d595d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ab9651-00ab-44a9-995d-669620c7b695", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96db3ca4-e4ba-4f9e-b50b-7024190c2e65", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7d9da2-e9e4-4d58-9ad9-b43aefbe218e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d824a76-7489-4bb4-8ebd-905d8780220b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43905199-1842-473e-9fae-e06e40971d08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b81ef35-1a24-4c71-817c-3ba77aeb3881", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d504255-678a-460a-a9cd-8914c4d35f5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc9b018-3fec-48f7-8f42-6adc990aaaaa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cb8eb5-5f4c-4f3d-971f-19c472dfd88c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4ce0e1-de1f-47dc-94c9-153793a06deb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5515ede2-6313-41dc-88cf-8e61c751e672", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37933a44-39fd-440c-a3a7-f3b6e388ff16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589541c6-3149-4344-9961-023435dee07f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c9248f-1ae7-4b33-b19d-6b2f65a1cdd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd21313b-8f62-49e2-8833-fdb0db710282", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7841a9-06e6-4fe6-9f3e-5aec9e5ae34d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b95b2ae-ab87-45a5-913d-a1ae7392b2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca086bf-cb7e-4756-aedf-d53b7f360764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43494df-c509-41ed-93e1-5c1feedaa1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7573aeaf-75d6-4f70-a493-bd7fd1385443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674e8041-b1de-41f4-8070-36d76895c616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03160142-11fe-4c61-a783-58b7dcfb6754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00eaafb5-7a4b-44a2-9316-af24c5fa184b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2cb4c2-aed8-416a-94ec-e46474a79d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963b7e08-a17a-44ef-a94b-93df2b180a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f52add-66d4-4e03-8a1d-bed462dcbb46", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.205.210.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b52bb9-d002-4514-b2fb-644a5cf86461", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.144.164']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9ab0e6-baa9-41b8-bd36-54c24c1b4f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1229433c-17ce-4cdc-9bb2-cf9fb9e6b2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14725d27-219c-480f-9a65-106e2b0e0d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.109']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d4d0b6-f6e1-4316-9327-6f1ee501db79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884976c1-bd1f-4578-9b0b-f89f43428376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba14978-9af2-465b-94a9-03125cc00773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d1b961-58ff-476d-90cb-e5ea3ec3d1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e075644-c6e6-427a-acea-af746077132b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646dce86-ade1-4ff8-a663-ad62a93aed9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fef139-bf6f-4265-81dd-a1eab77b5b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e68cbcd-f402-4579-b72a-da482af8bf02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb5bc97-8ecd-43c8-8783-b0592e7a188b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b303a070-bf21-4dfd-aef5-231ed48cb393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be90007e-04fd-4ad5-9795-9475bbaa7950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902d3632-778a-4fb7-a94f-9a86bad1f727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bc0c0f-edbe-4b00-bb34-502f16ea419d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4058dc-a1bb-4453-b967-7650a4566a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da91c5db-e808-4251-8702-4c0dc334fdd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ead1dd-aca1-4e02-9916-cf3f8590fbdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d57f15-2da0-4164-8eb9-dff9670d39e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb58fa2-ebb5-4c1f-9d1b-e9e72c543542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b6f7fc-5b0f-43ff-8646-42850e917437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.145']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc17783d-1ed8-4e02-8fc6-5b5c10453557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fed373b-018b-45fb-add7-73a91316478e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6577ea-d13c-4ea3-9a34-6783fa9db03a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7558f9d3-aef6-426a-81c3-0bd973f8a144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0579e03-db5f-4b63-911e-b96a90daf7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87699b5-377c-48bc-94d2-ef5c98c00296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bc3c8f-ee8d-4d0a-89d5-e45c98d9d587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0614d8a-ac3a-49a6-8934-b2b88d0cf9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6906b3-596a-4640-8c17-313be14ce0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61650d94-41a6-4d98-a5f7-9388b24700e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2fda08-b877-4873-9860-9fd3b7f28cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ae5c5b-c9bb-4f23-b730-437be58d9d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11409f2-66dc-447f-8ece-f81416c5268c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c6b946-3292-4a93-b4bb-6786557322fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f90a7a-c720-431f-a8f6-fbd887edb657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.171']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401a1cfb-7592-46c6-9b78-d06edbb0d215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3725b11-2ee3-4b98-906a-d2f9f7d5c358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab98f37c-275d-456f-a2b5-917a8550748e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a507cf-2213-4932-8fb4-2660f748c9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55481872-fad8-47e9-9791-9e75bae57c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f38dc1-ed2e-4b4c-9a05-0e805b9bd11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac3fc5a-9746-46ea-8560-2badfbd6c49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ce9a64-ed37-4fbd-b27b-019bb3a3f856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef35cefa-ed71-453f-8d2b-f5e5d10ead13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095f8d65-94c3-49aa-a716-e600840ed780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcb9e99-eced-4cd3-9552-0265d35f772a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94010a11-27c2-47f7-9b7a-8cd7ad5d5d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881163bf-084f-47d4-9df5-6bb9c5017fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f8e205-b4af-48a6-a357-2ef92f0ba30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb3b365-a963-4b65-9481-7b278e02700f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fc49ec-dfde-4651-8a40-8c2ce4d2f6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068ad51c-fbb2-47f7-b269-cb6c761dfe59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ddedae-209a-43e2-af4f-4b475886a1f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf63e5d-c5dd-42b1-8922-7d4a4a14a2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8b1b4c-e065-4121-8f19-6f858e13658f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8d1698-6f37-410a-9334-7a8eef10586f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8746ab65-e88b-4d9b-a89a-e7e1b66b42d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70412212-9b06-426a-ab7d-6064e968f88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7da8b1-89b4-4b82-89cf-a47adf38f6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c56dc3-6cc4-4e2b-8044-5790cbdd5dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45969232-d58d-475f-9a52-304dd9d40563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7cb6c4-258d-4f3c-bd0a-5c8467163fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb626cc8-df2f-43e5-bfd2-cc9233664ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18799b15-92b3-4e2b-91eb-cff4cae8b6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6164c0-6bd5-4ab1-9760-453e63b26ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6499f080-c690-463e-9798-31d2db20a33e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb0489a-0b07-47f5-aa62-8dfee10179c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba5d15d-fc7f-4420-8659-6e85f6bf4b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63ff807-10a6-4ecf-91af-984371ebb086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e6edbf-27d3-4479-a824-db8d75d3c8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1cce4f-a51d-463b-aa9e-d0ad792e24f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c73bac-5b61-410e-bdc1-ba7ab63f4d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791057a7-6527-4cc6-be21-5c0b130bb663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83b900e-81e5-49d3-bba3-32556881c4c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4db865-117e-4967-b832-88a2b2058a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772e64c5-5898-4ec9-92ca-2a332da42b5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8a747a-d17f-44ce-a4ef-4d4bea3f79d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2956fa-2f5c-46ee-8321-c4db6cb67603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598689fc-dbbb-45fb-8be2-4c8d51639664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ed59b1-8109-4030-ba21-fbb738d43ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8578ddf-0d14-4aa4-bf88-1e08fbd10248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b888701-404c-40cd-8b04-d08d6990cefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e8e7ee-a544-4266-852f-7cb53fb405b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade5acaf-1bc1-44a1-8bf6-2d8b3445222d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c3fb53-fa59-4001-b3f8-360a04e4cc00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4620bcd6-ecd6-4bee-b2d3-85fe1815a8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57754d2b-2973-459f-aaf4-0410a167456c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c08f4b-237e-4194-bedc-768e33a40b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f4dc08-2af0-43ab-bbf4-21b0dd7cfa9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ffc4bb-7039-435d-8cfc-94101e0bb739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2faa5d7-a216-40c4-9a35-fa4a531c7db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4ae6ce-1da0-4505-b32c-722502140edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcaebcda-a822-4b6f-8168-c14b9fd46f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cebe521-e89c-44df-8e93-8346e91068f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757d86ee-5c08-4dfb-9e12-7ac5245136ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5b5ed9-1824-46db-a416-ffc234f8892a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c344b8e5-34df-442f-97a5-596858e7b034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f19b237-e13c-4deb-91d6-e7f8fa7dc395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717be8a3-ab7d-46dd-af18-15f1861a7365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1424faad-5685-4e03-a415-335b1eab2e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5084ef7-9c0c-4fd5-be41-8b20660c8b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f313dc3-948f-48b3-9f9d-f0c9cef7ed8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e38a18-5ab0-43b2-b196-d920b50d2550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b70f4c8-6ae1-4bb0-9641-e2341af25cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02b5a96-3d57-4a7c-9c8a-4e70960d63e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09aa6787-e360-489e-9598-39fa8ccc6101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506e1eb3-a578-4639-9e43-1bd9c810b036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b00da4-722a-45ba-8358-05c49fec89c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65813b90-2889-47c2-8eb0-ff668da76699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eed1c2a-fe52-44ce-9bb6-444c251dead7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eef1149-a4f6-4f6b-84df-56f93d6b4dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1d56c9-32e5-4986-90b3-84492b807fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715bcb71-b462-4bc1-be4c-589061cbba4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ea3c90-6169-43d9-81ad-70f7062869d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ee5e8c-eaa6-444f-9393-539bf2e2cb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6267dd26-6626-4f5f-82cb-ad35bbd4a4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e34b06d-d05f-4b92-b598-94c01b8d0929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1708ad-e23b-4b71-8692-52ddb5782dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6f5acf-45ca-41b4-8782-c2e2c811bfb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce04792e-aaba-4697-88cd-a56d523a323b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277b2237-3448-4234-8cde-c8e75e121ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59a76a9-8b07-4c72-a802-75b6c6ccff37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f9dee4-257e-4279-8a9e-1898818b0bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8165bf15-9394-4856-afcd-193b28c56f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ef6b49-edd1-4acc-90a9-f18f21f426ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.51.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b21d83d-b6fc-4b9c-9221-4f36f035c47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d10a52c-e5e0-440a-aa2d-03646ebea569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f500b77-415f-4ba6-9086-7e4218f8f80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81c231c-6055-4321-bd3d-4d8947116fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6df80d-c8a5-4c04-b7d0-1c718ae5671b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d4d6d5-1d21-49db-8e38-344236c50db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742fe598-9d29-49de-8226-afc7470a5ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1756d024-10ba-4128-97a0-b7cda8ca1808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc031710-52c5-4a2d-81d2-ce99771d6028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb0ed24-ab7f-4a84-8672-b50091821e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a9d518-7f90-47ee-92e9-fddba6471810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.92.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6b3809-54d9-44b6-839b-9552f3fd3b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.92.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f04f61-03fb-4fbd-8194-fdd23d96fc04", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.229.227.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded4e8b4-acce-4b65-b3c4-7ed8e7917d8c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.23.72.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d830758-a30e-4b87-ace9-01fdf5376afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6823cc92-ca4c-4c7d-9fdd-f12628b64f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bc935e-5e41-42a5-8592-58ea13dc6508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d34dc6-3ab8-4cdc-8616-34387ae2ade4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0292337-c0ef-40b9-9a4e-6bc53e9e51a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb409623-80db-463f-90e2-7daa7518c831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2df66a2-146e-4eb6-a1a2-863f9e39d70f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e00dce-c046-4c69-9561-c40e3069d097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e55eddf-efb9-4ddc-9f81-9878a0427854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7302c531-42cf-4143-80d0-8ac470f1f138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30d13d7-69fa-4e27-bedf-88c964f84198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f496bd2d-37a3-44a2-af45-7ab0b2f909f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f190c4-01b8-475c-b249-564ee9231e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbb954a-1573-4a5b-ad94-4cb5ecd53d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fe8fcb-7d1c-4fe5-b50a-e09d54c4164f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3ddbad-804d-403c-b12e-23670438afa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9497eb2-d243-4b77-a739-4f5f84d88f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45dff009-6626-4a7d-a0d8-ff4560d468a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0515a102-b7fa-4344-a6d4-fcb0ad46f4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee31c98-38a8-4973-9162-83ad5dcd4020", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b190432-f68b-4686-967f-6e2236e2b4c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bee5531-4677-4b18-9acb-1562eb08693f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ae70cc-066c-4a08-a788-f85d498a0cd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc15054a-7dbe-4ca2-bf2e-8126abbfaccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.254.197.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8ba344-7fda-458b-b5c9-fd733e6b1071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.237.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487cba91-177b-4cde-bbd9-ed557ed35c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.36.81.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9211a1-0e00-4718-a7c9-0adda3544731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.211.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba64d46-df86-4c99-9568-5b79fda87ba1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.7.242.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0159c007-f945-4892-88f3-c7545a597bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.82.247.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7067f5-2e7e-4444-91ee-567e379f3152", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.85.205.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5005345f-9e92-4778-a063-dc62b7498594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720c6228-f9e2-4b59-8924-2a85f4b9a17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e6f515-d5e7-40f8-8260-d6649c1ce0d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f57383-7149-4dc9-a157-b2f400c29277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22695db4-658f-45bc-94a6-4c5d5cb1f76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.0.205.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e626a393-a518-4857-a6f4-91cd4a624bef", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.148.224.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e8628d-22a3-49a9-a2c2-a58af3f06049", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.19.45.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90961b2-5e8c-4a37-82a4-5b4d26e38653", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.228.152.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1738e1a7-6a64-4ea3-b6f2-aaca67a0a307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.236.208.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b08de8-bf15-42b2-a580-8e2c99f2f3d1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.4.255.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f2dd2c-9d68-4e8f-9c56-cd5ec0d42170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.71.90.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b169f1-35ec-4fb6-b60e-91d562370120", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.73.9.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157b8a7c-6ca3-48f8-99e1-7545ab3da47f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a59dd8-be4a-4686-a5f0-6eaa4ce7d58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.223.106.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e9188c-5237-4868-bbde-e41434fe8a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.228.48.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2474fd-0cc1-4f75-b1d2-3697d30b0352", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.62.18.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b5d24e-a854-4ea3-b46e-36f8decb58f5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.8.45.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9b3b74-2202-4af0-ad94-1378a279f40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.95.56.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9c094b-9737-48f7-8fde-e33b4005b93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.119.190.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f657e7-d6ed-4371-a9d2-3f65e57a32d5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.132.128.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe27c47-a31b-4747-809f-50740b53d349", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.132.128.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64b32c0-dee3-4601-b893-f7b938966aeb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.17.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b5b312-ea7c-4aec-abd6-ff8aae2ef851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.241.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43c7b2c-0068-4642-a4b1-b9dc130a807f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.247.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba271e5-635d-46a1-8a7e-3a3fa99bbdaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.0']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa06f82c-f4c3-4216-a94f-4a8fdcd46300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9ebdee-c178-401f-bfed-598bbba15ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f741f65-dba7-41e3-9552-1b2dc0f56fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf13228-972d-4a17-9a16-35bc0394a90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8cb76bc-4755-4012-ab3f-0169fc72147b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ec298e-0030-4b5c-bd76-b0bfc265ef50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2d7b72-54f0-4778-babc-0430357034c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6551d0a1-9881-4355-a9e1-9c5eb49470b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd3f910-c68c-44d9-8e75-a00ba90a6a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2751e137-c0e5-42bd-a59d-c6c5b177f92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b421a9-6050-4364-84ac-2262e1d80e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e62d11f-d846-4aad-98ab-65559426edc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5908c4-b972-4d8d-805e-06329afae3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cc5ba2-ef1a-41b6-993d-2e03b798a6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b55528b-f119-4f4a-9917-ca62d65163c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd276f49-98b1-4553-88ef-3c642b528fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b342aee0-6e35-4d1b-8c24-30eb3d5870e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd32efbe-f24e-4f20-a44f-e3ccc74a772f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572f37a9-af9f-4d3c-9eaf-431926b4ba4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccb26cb-831b-4c14-afaf-46a1c281e268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca23d6b-8a28-474d-a89b-6ca6b25eb7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc24e596-327c-42ca-9f2e-f24f5b589e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d67e8a2-dcc5-45c7-a892-cc02edeede6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37bf26a-12c2-41f5-ba27-79257b49eaaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b11c2f2-adc5-4b6b-83b7-2017cbb19faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a13067b-eacf-4630-ba75-adcbeaf21634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111f3ad8-4df9-4c73-9d53-f950f6e172de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c880807d-5f3b-482c-bf3a-d610acbcde23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc09448-ca7d-4ed1-ad2a-dd77cdaf93bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dffecb2-7e46-47f5-9957-e84541fbfd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36be6d8-aadd-41da-8f0e-1d90e6d52b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d227f8f-12c9-44de-81c4-55772a1b357a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938b5945-745c-4449-8aeb-0733c5e1f93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9c5aef-cf6d-40e0-a4f6-e56ff0cd0dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99494d2-daab-4bf9-98ee-dd316aa46a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b28c69-161a-4f7e-81bd-952efbad6eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c113fae-0f92-44ca-a694-ae4ceb335615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.169']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b8a224-0a88-433d-aba8-c30b7429aaa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49153cb-03a7-45c8-85d3-3ede593c3d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c6010e-2fb9-42d6-af96-91f61882a8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6866af5c-52ec-406a-9497-fd41a41fc898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2251ac-2d63-4764-bf0a-874357388c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820796aa-a8af-4208-96fc-e907d8c9658e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e43b575-ebbb-4da9-862b-025a980f6aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede908d1-013a-4c13-bb46-f0b1cf325ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bc6cfc-5c23-401e-bb28-e9d236c81486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8151d09-872d-4a07-b360-867e30141d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e046a96b-5cd4-4271-a380-6999070d8a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112f79d3-7b28-4156-8f0c-807d3542e724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.193']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a372073-71f2-4c8d-8da6-174b9b87ac3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37deb19-56aa-4eff-89b5-b73042beb005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b82dce-4dff-4140-871d-6cb35e31efe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f424a7-ac6b-4f0c-b806-94b7d8514842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869a9230-9787-4c80-9a1d-740590665a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d22656d-c9e9-4438-88b2-772641a6baa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53265aca-0f4e-4ea9-a569-9e6d3f002a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d717d388-36a2-41d3-84f7-32b3cf44a39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767d0fde-9ef8-45e5-87d2-2900b8eb6cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58073f7-ce0e-4949-81db-d83ce1380623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2456c66-f5ab-4851-bd42-5497d99fc377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c74e40-6ca1-4d5e-99d0-823814cb1d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b64223-28e3-4eaf-8ad1-6865e650e0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e256b88-5bef-47d9-ba18-a594b2330302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126d21d8-1234-45e3-b3a8-4e6e7cb2d5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64796df-1d2a-4c9e-993f-93ca0240f11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09572c0e-3e23-4238-acfd-aef6b6a82d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aad9d36-1b4a-4205-8d03-b26813887ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf2ce50-2afb-479c-80e5-15aa7bf54029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523e813f-02b5-4c86-b85a-d1dc5f8474ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5faa43-e28a-4411-a5c8-fa2ce27acaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb9d464-a428-4bdb-9f68-7f0545aef670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f81ebee-6ac9-4653-8ec3-a74e4bd689ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f393e4a-8894-4f57-871b-d9a0d99b4472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe5d0d6-0281-49cb-9d7a-d17dfd5d0027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34904917-9f61-4719-b9ba-b459b08c59e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.46']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79be91dc-5b0d-4cf6-bc94-2507f99ee300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cc8235-125a-4e7f-a888-67502d66906a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264f05fe-14b0-438c-8fd0-53e2ef2ed7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd95cecd-2b09-4c5b-ac29-b1578b7f6876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab2aecd-9c5d-426e-b193-c2a2d77772b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98874da-5e99-465e-b193-7cde51235be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9692b65c-44fb-4b58-9977-2bf636274cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a828a4-a09f-435b-866c-3e7c831073dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacbd311-82a9-45d8-8749-226b878cfe85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61c7038-47ef-4cee-b98a-43c671034c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb43e9c-3229-4514-9e6e-f3249b80f03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02cd1d4-6eed-4a16-a449-403aded9faf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d940528d-3ec4-407e-be45-82d5dfbeae11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5cb6db6-a3c5-4c6f-a3b1-e151def71d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67ba22c-6fdc-4d81-932f-bb814b5aea56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69aae55f-8784-4b48-8cf4-22ae77686215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8eedace-64a9-4d6a-ad52-8fb200d6e4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47bdbd9-1eb4-401c-8ad0-e798b95d8655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afabb12-110b-4bc7-8cbc-d9398f6e1db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3ed4e8-3eb3-4646-ba1a-2bf40c1599d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb48c8b-1633-4fb4-a757-f3d1fe6e04a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a102bd4e-0ecf-454a-b5e6-4a604e23d196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.200.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68f2227-7a60-42ac-bd37-d52f80142759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1b0136-53ba-49ef-8a40-45e85e9ac3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5daeb90f-0bd4-486a-ba81-e185872ef221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7279a09-573c-4904-b970-768c3bb817b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3762b816-c6f8-448a-9a43-e877cb61bc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdc49c7-03b4-409f-a781-9eb82f86ea5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e302bf1b-1451-4f02-a766-8cc1d18b57d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7187d4-0a6b-4d3b-9d3b-7b766016b4f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e86d90-a686-4fab-b8c9-9c2708eee33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212dcd5b-3cd9-435a-a22a-445d25918113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c647d897-4328-401d-97c8-9adae19aed9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88a8303-b5ac-4531-8f86-c36d24e544e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b409994-27f2-4039-9b09-00bf537206b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e78c7eb-7d34-495f-a77f-0e2c2ee79fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db77a98a-18a1-47b4-b7f9-c4cb81780319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be5b20d-8efd-4d14-ba31-24994c0c9a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f54fed7-fdb7-4021-962f-7455dfb56cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802c1b99-4e29-4702-bdb7-8431dfe467ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5233a0c-592b-4733-a16d-9f8c11e3e8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1f5eed-f68e-45ef-9b5e-cc74daf4b75d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7c8a09-f12c-4f65-ac6f-31ba780b7bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5507088-e308-4534-a0e5-46a8702b606c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39001be3-8fe2-4a6f-a434-e9d2b84a493a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692fd45c-b80f-4c3c-b1b8-8b8b54f4f661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e57d0f6-6b16-4433-b7d6-37e6fdb178b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b7aed5-2072-4033-a8a5-94105a3fd6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca02061-5d26-4e7a-bf09-f977aef42ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e42ee10-e118-4706-81f9-8c839a795c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29416160-f261-41ed-b264-9ff488599395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.164']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b01e3f-7574-41df-bb80-d6d8bb17e532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.169']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548effdd-4a0e-426f-952a-b955545b4981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db5bea6-0dad-4706-a919-85a5863e148e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7f8d1b-0cc3-444c-b9d0-1ee1d9a86f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db917600-5c85-43c0-887e-45a9bef01459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77b2134-2b87-478d-8345-ea7c17473b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4622ce95-d514-46be-8368-3749b0e75cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8425f9af-3bf8-46ff-acda-c22f5af6e00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b177e3-b5a6-4625-aff3-57187a04ef6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c8622a-f06d-4e86-84c1-efecc3988a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0d09b7-1ce4-4ec5-a41b-119165d52cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0206a29b-fc31-4091-a12a-f10f2a4def20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cefc313-63e9-45e7-90a8-8d6ab4d0ce7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e75b51-534c-4b9a-85c2-7e555cee4c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcfad7a-62d3-4d06-9463-e9c04c82fa83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316fb874-bb2b-4160-a013-87eb469341de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61541b7-ac08-4c6d-8212-cae06572f506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c608ce-1549-47aa-8c4e-a952d21747ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5daefc2f-790a-452c-ae6f-4634eeae486f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce895001-89fd-4d4a-9f8a-fd2c1f8fe51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb628ec-936c-4b3b-9201-87b222b9a8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e526c69f-5e95-47f7-9e8e-d0bcbbc5d829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a96806a-639a-43b6-ab5b-a84f5a9ed453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f4fb85-5ea3-4e74-8756-2c310b8c3c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80297c6-2805-4dd8-a5de-e37540ffbd95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b42b64-b2fb-41d9-a695-6803eda1af21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a7434b-fd11-4571-b815-a25f0ee74a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f3d8fa-bf13-48a6-8c2a-c971f8fa8dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5936d555-bbda-4304-ada3-e9e64071f0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e417d73-402f-473f-91c3-509484d9d0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8904a04b-90bc-4ae4-a218-26fe19360a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe448e4-0ad3-4890-8b77-f6684271351d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298f08da-a2fe-4443-9be3-7da971549315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1149a0-fa28-45f1-aac3-2b2e8e1f3f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f78cd7-aec5-402e-83ca-5b4d9f89300f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd983f46-54a6-49d7-b14a-149de4c5541b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ecd9694-0e89-4611-a9a0-cab9fabc1c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbec5eb6-5904-4828-b75c-95c43e134694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee38e49-c666-4a87-81c4-b72199b0cef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c36e447-be2f-4e15-900d-a5c25f991013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b49440f-6205-40f9-83a4-63ad852d2274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fad65ac-e2d7-4ba3-9bac-dcfd07e69bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.46']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93b4651-8136-4b83-acc1-ca068c6b6ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64979c86-b423-4f1b-ba9e-ffc472f29d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a66aa3-7be1-485f-84d1-3db9593aaf90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f1f36ea-7688-4dad-b3dd-0fd33ed0d77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7498b1-0129-4d4f-9713-11ecaebb2f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1776f6b9-80c9-4027-8759-ed410db4c71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597f6185-c925-4e2d-995b-3a8f39d6aa00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d682c7-a3c6-42f2-9726-c4b82dffe00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6153b5-7a64-40be-b636-f50284849c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2767140d-2e47-4d56-bfa7-32f7c2566ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58c617f-874c-47b2-ae5c-a986531e00f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed6d06f-c866-4b43-9f63-ed17ca51b720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d319a398-07ac-474d-943d-15109ee93799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdfb9fa-c717-497f-b9b0-d4d4985a2fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b74ab3-1cf7-4885-9fb5-ff1dca9d59b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807476af-4400-45d5-9c46-e47b6e68448d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c797388-7ce2-46e8-a1e9-48c725af875d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb952ae-b2c8-443e-a9f3-76cf1832c781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023e21ab-b80a-408f-95a2-f5c9c1cc46ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c41a25-f0e2-483a-9c03-96e846469fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1e614c-1393-45bd-bd30-0999f895c255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db4d5dd-3c8f-4cb1-9919-8c7d85ace93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45fb8b9-b418-4054-907b-47593bc1e85d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.201.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c15ea25-7a56-4b58-8adc-bcce0c88d2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cff2a39-16c0-4627-989e-fb05548c3626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79f6259-558d-4c0e-80a7-c6a99fb47a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36244d21-3711-441f-a481-5e68ba62d472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65a7209-9df7-4bd4-bc68-248df1543306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9548316-9de7-4ebd-91b0-0eb3ce5840aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f857b9-2046-44ff-9082-70c3866f02f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37ee08f-e484-4962-bc43-38990fc8e640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baaf5a72-18fc-4962-91df-008ed1b78045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d082adf-d1bb-46c5-af47-e7656a7f5182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce28be7-7a54-4539-95da-6cafab5802bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39546b4e-6796-401c-9b62-a184da42505f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79c287e-5016-4b5f-b18f-7d8916c528f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a0c90f-b808-4acc-8b5e-280e1cbbbb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7c23cf-f96d-4950-b208-4adc53d3f161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f09ab95-8878-4395-8fdc-21a96b8f8707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae888f8-854d-4118-a41f-99a8cf1f7521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d77aeb4-29be-49ee-a81e-dca10b4ea9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143195df-e1f2-4731-a1c9-dfc0a956b370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664b1518-dbfe-4e33-aa40-4f01819f5e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1f10fa-f1e4-402a-8172-04540fb66d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5ad10b-0969-473c-8e99-4a69eb275608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a23617-41d6-424a-b408-3509e114b361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81971d5-642b-43d9-b14d-7919a75491c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8439b6-1005-4828-9dc2-300fb81838e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e88fd7-1f58-4a9c-af6b-633157b62997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd5140c-c22d-4655-b95d-cf2252fea0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e19bc1-e969-4663-a06a-eb767b94ce01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011f35ce-3e31-4452-9b6d-19aa1c9b46e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa9fe00-6dc0-4935-8bae-4564f71bfe34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90763ce-0d99-4548-82d8-6d2316298d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf87120-287d-4529-b77f-6906f8574dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445d3cfd-7a93-466e-8e25-cc25841545f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afc3aae-8645-4e3c-883c-e80856ba63bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf44f72f-9621-4c0b-9f70-52c30ff2c52e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b2ace8-e5bf-45eb-a092-9c7bc2178ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4237efa2-3b6f-498d-9fcc-1baab004e546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cf63cf-8ec9-4079-bcc0-7c067500bd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a9364f-ea89-42dc-b1cc-686d89b68fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39460d5f-3af5-4de3-974f-e438e7bd35a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b1d2bc-5fbd-4380-b189-8f1d87717e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75daf9fb-6c4d-4882-a6fa-86deabe329cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16e9fc1-a4f1-4945-943b-87ee6f4163cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d933ad-069a-487b-8c29-6782e7d574d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd33f973-3999-4a2d-b9a3-e0e5f434a7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59135e78-ffe6-41ef-8e98-d658f1b6530f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042f1c92-5d80-4117-8535-dd1a04c2945b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73975478-6c3a-4cd4-a858-2d4f85fbce9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb80096-ea35-48ea-84ce-9da93a5aba0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b96076-83c7-48c3-ba7c-90008207379c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.207.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e031d10d-7cc5-4195-95fa-c21de9654c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.65.133.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f9a814-75a6-472f-aa6b-90b828fb31db", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.71.241.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209a6df8-cf26-483e-88f6-fdf13a954fcc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.123.96.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40458fe7-8eb7-4813-abfd-f8439450902b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.126.64.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4c427b-43a9-4312-aa33-192a8c6910cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.147.193.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18c4ac7-fcf2-483b-b8c8-3adb6a283c72", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.161.43.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa39d29-bb89-49e0-8963-39c0631e5f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.50.195.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb16973b-8fac-4044-94df-b8c5fe2adf8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.7.183.109']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3eb8ab5-5b71-467c-ac89-e31eb3495f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.142.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ab6986-042a-4a2c-8195-f893f64245c5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.112.194.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ff3a0a-eeb5-4b80-8d77-5e2380426f9c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.181.27.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1734708-aff3-4d26-ae1b-d53ae335c192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.182.160.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c6f367-be4d-45ec-92e4-c380d8fe5c79", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.57.140.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8539efe5-eb7b-48cc-8e65-c6f21f63c067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.60.55.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06212f37-01e4-466a-9817-64ac2ddb689f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.77.200.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf66537-b3ac-4fa1-977a-10bdc843ef46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.240.226.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e786c27-67cb-486d-9a05-2046bb56d26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.37.172.171']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8769e526-79be-41dd-8ee3-2da0c3f2e05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.28.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30586988-1bff-4d91-a428-181e4829da4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d61252a-aa15-4061-b2ae-78a1ef2a41ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5c0565-6248-4b67-9f87-d900977e7ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c73dae-6b2d-40be-ae8b-1bf3f54e9445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.159.99.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5374cb68-4ece-443f-ad82-f54a938d390b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.161.49.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e1e5e0-0f21-4d48-b935-990c0e0ce99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.179.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b478914c-9fb3-4872-89b7-3231091c200d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.179.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af10b819-6e45-49ed-8157-a8f558d44eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de6c18f-6461-413e-aa2a-6d41c54d4e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c88e25-0c03-4b34-80a7-eca176f6204e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.36.109.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f13dd8-47df-4bae-8209-0afbc0ed0036", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.36.109.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23468c8-4ef4-44c2-869e-fdf5043726ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072a9247-930c-4a15-8048-b4c0ece96cf1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.12.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4e4270-73d1-4e73-a2cf-4b84c4774448", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.126.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b52d957-5298-43f6-af9a-40c851ecc71d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.107.177.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c258d3b-7138-4f8f-bf92-434d35c2691a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.114.36.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70083f42-f6ca-4601-8712-5b307db60869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f773098d-c046-4515-839e-07b8d0715f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d9cb1f-2dbb-474f-818c-464531c11f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1a7370-55f8-4848-bad5-77d3082cdacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24345c8f-20f9-40fe-9630-99c52587c5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f8e30e-dbae-4114-a49e-3dcf774bf367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e700432-aefa-4cb0-b217-ea328ee0c4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd14f777-8b64-4e66-9e6f-760bf1a6dc37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b367b5-dd13-403c-9bad-59ccc248b431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df191f30-0bad-4526-b749-298404e34841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6fe106-148f-4878-a4ca-53ea209ccc7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5ed30b-6852-40c6-b568-596c8941cccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d152ec-7c50-4fdb-93ca-8addc990ca22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c819e6-5c6c-4f2f-8d37-48b843544ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645cd694-b7b2-4058-b83b-443d092fdcbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.143.1.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6945501-ba19-4acc-869c-8b198bdf4034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.151.135.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99a0e88-40ee-49ee-9af4-da3572c45724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7dc846-9b77-4e59-9578-88079cb46b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b69ce5-f7f0-4979-8a84-db9e898bd239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ad912a-3733-482d-9024-51cb0151f157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30acc307-bfae-469b-89a3-a43ab21172b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad7002e-b7ee-4458-9e07-00e624b5318f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839a8f19-8783-4b3a-a831-d7a91b10b0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e413b7e1-7128-4773-aff2-2c04d0a75ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b7a755-3b13-4f57-961d-686d94417f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3aa383-312d-42b8-844a-e0699c741e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877ebda4-757d-443d-bdbe-b6f1e79d3675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89b9493-9a5f-4b90-90ec-74cd4dc0ea43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0cda6f-af2f-43ba-8620-8cf786321527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2095eb4c-e01e-4564-b9ac-d25af4c2dd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837588bd-e58d-4935-9ae4-b13386a7c6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0afe712-f666-4237-9abe-85c50df71006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb95044-5834-48cf-8766-ad8078e01349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4143b278-f7a7-4a5b-ae73-84467ef8131b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5745ad81-9ba6-4741-9d91-12597e61f6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.164']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d7fdd5-33d7-4f41-964a-3e6e7f70fa05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1010213d-8713-42bd-b702-fab3ce148889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6abf4eb9-f3e4-420f-b3ed-b14a3a2592a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034ec90f-b4e0-46cb-835a-287e3f51a7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76de8a4e-ea85-4d25-bf89-b6140869a19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.169']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d78e9bb-7ad2-4f52-9c89-0ad8150d0f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.171']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d50c445-5d04-4146-8058-2e99c0999ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bb3978-9cc9-4ffa-b12d-16e62e963d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e83226-f997-402e-a5ba-8a0ed3c9b010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96844de-8424-4e2b-b30b-56187b85f5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92db427d-5be9-4633-a228-5329f7cc5ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7bd92c-3f9a-4766-978f-60dc4ae49c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55409b2c-edb3-480e-8531-b6e98e3ce9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a736604-27c9-4087-b6f9-e520d07d4874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99865879-5fee-4d53-b4b1-4620f237e80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a512cded-5b1e-4cbf-8d48-fbb4f53c781d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011df131-7b9e-4136-873b-078eeb054e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb73b460-17db-4223-bca9-0958bfc20c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a2f73e-db93-4e92-92b7-1beab32e2f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce4999a-ad02-4471-93c8-99e410af7ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c2734e-ccd3-4f81-9830-275fc38b0e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47090a0-872d-4625-bd9d-3c25d60b8ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e5e7b5-a466-4093-8a56-e125b24e4108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216c8224-55fc-4038-89d6-68be330dade7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9afe34-4dad-4453-a8f4-48c1a38824dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd21290-932d-49fe-8dcd-8c1f5cf9d087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360fc058-c613-4e4e-bf52-e675e76f888b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f99ead4-98d2-4dc9-b203-f0045ff8a88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35466afe-d645-4147-a74c-11eb6ff499af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbf6a10-b61c-4b56-936c-5ec3eb66fb22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9fb79d-2d45-4268-bd7f-be070edf7959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ea8f07-3f8a-4251-b6a7-87e6819f23c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a20ffa5-ccb9-43cf-97ec-affbafa7cf0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c119e026-8dbb-497b-a0d2-cd0da355e4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51544de8-baab-47f4-9f4e-48cb722b3a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbf6621-1530-4318-83b1-cc30fff81f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab1eaab-4efa-4ecb-9a7a-4af220ae384d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8173c58-8457-4f1b-b6a6-bf7582f58df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc40d99-cc8d-4378-9a37-6ff67e71e537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559eb9e4-6d89-49c9-b84a-187669f4e636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd9eae6-cffe-43bf-9a8e-69040299fc68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b48c92f-2da8-44fe-b9f3-6cdde83301fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10e1596-36fa-4be6-a294-5927b1cc05fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4075af-5d1c-4091-8f2f-3ff6be026109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b931d4da-53e4-40f8-89ec-d866e74210b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9482a337-fbff-4363-9086-62371ea48133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85ff173-8403-4f99-b56a-e320e9c106a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd962db-bf0a-4767-9c6d-beb7d48ace02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916777de-4e4a-41fd-a0b9-8b201fa45d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a5bfe2-01d7-4c1b-9728-c9be634176f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d213ae-f497-40a4-8575-096386935fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f94c21-3a8b-406d-b22e-913f700c0cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56979f61-51b2-4b39-9b39-ba7247ad4c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a22c16-13c1-48f7-8543-3ecd9aaac227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48bdd4f-1f86-4682-841e-e6f265e1fa96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a5d8a9-5cf1-4995-af86-cec0300b05ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa9dbea-8013-4f35-b1f7-c5326db49ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04aa083b-2e09-45bb-a536-70950587f54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dfcde8-a532-4cdc-a953-d6f7f1471f2d", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9546c93c-3d14-41b2-afe4-3bcb1a0a0ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a69e81-ff55-444d-9f77-e8b48e1d2a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60916724-63e7-4c66-b7d8-eefbb656618e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95224f2d-7ef6-4a9f-a114-510308aac8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1546178-09e3-42c5-b062-4d8049b7c31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1068f97-25cd-4412-b1d6-fd4951ab784e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53c57ae-8414-4b0e-836b-15ac690c560b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fa86f2-6945-453d-b33c-56397c8e2152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe3ea7b-a0b8-4c2f-87e5-2592fd929af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc86e801-afa8-4cb1-9f9c-214e20d74dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1d6bd8-d520-490a-ba3e-5a5aca22542c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727683b6-e43b-4711-824e-9fb606cf402f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385edda4-56ac-4dcc-8f34-95ab98343928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ac99a7-1329-4aca-b2c4-40e3c5eed385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5637ce17-38d1-4a2d-9c57-60f3b7f4b95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd84870-d33c-4cf9-8cf1-44e7e1ad1b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffcb489-9622-4f3b-8e66-e2dbd83556e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3394c137-77de-450c-a7f4-24bc826b30e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85826f6-166f-4ae5-9ddd-100f0e7743de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5564296e-829c-4510-a717-7391f8982e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb6ed5b-8816-4a95-895a-04b44c5003e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55e5286-5629-433b-965a-c1852df7e940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474d0379-6a41-4f95-8786-eb83dcf2661c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4782fda0-fb35-4d16-afa4-4c72451fcd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19962545-bbf4-4597-8666-37d304967459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed39a762-94f3-46fb-b2dc-9152f2f95538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fd2fcb-3564-45a3-82fa-4e4bdb820f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324408b9-8ec4-427e-b02c-50903b550a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eff351c-ade4-49fc-abd3-04a3745fb047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c85053e-0908-4d90-9acf-29463e89395f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5011f53c-d694-4082-a19d-ee0175025271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d41ee3-110d-491e-a406-5f847962ad41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6481a3a5-5a24-40d5-acdf-698bb518ee8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a768ff8e-9f8a-4ba5-a892-6fe9010e99a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c8f1ce-9a39-4e05-83dc-c096d3f81f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b96659-ab8a-45f8-b615-8dc58d0dae99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069a210f-f9c4-4f26-bacc-2f76288f99d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82dbceee-0993-477e-928f-276af939cd68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448063b7-4f15-4614-bcd6-594bdb9d5669", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d427c265-bd7b-4219-bcef-0ccb3a8125df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.56.117.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76931f7b-a26a-4808-86c4-1b6f8ce3b6a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.57.215.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904cc966-16e3-4677-9b77-9b67b78eaa03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43057a44-2783-4ea5-86de-ae57e575ce3f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.156.249.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4171200c-57e6-4788-8006-adacc608fb28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbe56fc-850c-41fc-ba4e-7f4ce13b2932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d568c69-3486-4993-a537-7ee21e38e293", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.54.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506a3f88-9fda-4ec1-aa4a-497971feb80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af8d8ba-86cf-4e16-9647-9445d25af0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0277e7db-0a12-4399-b953-1e0eb32a3d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2c1c00-cf6e-4f89-9f4e-1820096ada7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376ce992-1687-4464-9534-78c02c1f1430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753449c8-2129-4f8e-8d81-42aba420e868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e21a72-9dfe-4867-8ac6-b20c6b8714d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa58c4f-7016-42ef-acb6-48d4a5817c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca55617b-a29d-4307-9773-7424d9c68355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbcbb9b-a304-4ed5-8036-fe3c05f4ad78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a38d862-7ee4-4a1d-a587-4899a0dc8b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ba4d5e-22c3-4694-b9e2-83b0cc971d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9566f3-e11b-43fb-8175-727102b733a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a102f4e4-45c3-4efd-9347-e15f32539bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4234fd51-35ea-4dcf-8dda-3d5d92b3445f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4feb920-3a60-438e-81cc-c69997ac1a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18b6c60-a998-435b-a91b-7a60a50aec9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12308d28-3655-45a5-b5ce-408163dd2aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d12474-0064-425a-bf06-a6fa22ff7473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1cea8b8-c80e-4f43-b017-beba780cf956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8c3bad-156e-4c0b-b402-fc6805642aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e9e990-2f04-47ab-a1cb-1124011bb72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d00b4b9-08f3-48c0-8310-5119199cbabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1846deff-59a7-47be-9f4c-60f9ed104ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.242.99.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1948ee54-8361-442a-bcd6-5ca51cfd6056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.36.81.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f173c2f-8749-452a-bea9-ff1bb5a0ed07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.44.112.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97969283-c214-4e90-bacc-27a3e8e7fe4a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.44.26.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e42eaf3-e570-43d6-bd71-b45dc625bd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.44.50.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0095d3-eca9-497a-a1b0-05fc0d928aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.48.248.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d223af-a9b6-4bde-89e1-da56b975a41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.48.97.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc6d6d0-e192-47ca-951c-2bdafb0e911e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.5.176.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44b191a-c5e3-4ca9-a631-7057bd00ad66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fcb228c-4128-44ee-8e2c-71dcb00a9f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e5994e-b5fc-427e-bc3d-1354554b3c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffee3a0a-35c1-4164-b766-b9441fb5b485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cdb7b1-8977-4b18-8945-ac50748683ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81855aad-4b32-40d2-acda-67f247a0f899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed07180-19ab-43a7-9a72-0b68f4fde18d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e744fed-c802-4cf1-b565-392c2fd77879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d478ebe0-8178-44de-89ff-32228ed6c492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce788038-68ac-49b4-9938-a7260cedba95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30039ea3-8255-42dd-a5a6-ac0e7e122faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e752b68-6079-4eca-b62e-443f9d63c665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df0edee-bd65-4e7a-a70a-a51f03108109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e30805-581a-4ee2-b1cb-701724a8070c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dec2afd-3a45-403a-9bfb-28d8d3ca2da2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.114.96.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35127b1c-d11c-43f4-9632-ab3443deae43", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.155.108.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fe80ae-1b32-449b-a9c0-babc6c003870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36fb84d-c73c-4b1f-a680-18033c64006b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2dd8c8a-c842-46bc-a680-784129806544", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aba2a1d-2b17-44f0-af9d-33d078b64cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ce4708-0646-4dc2-8339-2c6bb1ba5b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57dbeeeb-c5ce-4c66-87c4-e2f42c083457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.182.16.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816df394-74c4-4a25-8fa5-d0b65a76b1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9e4097-9bd0-4d83-8dd6-460ff92c4070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23078251-875a-4356-b96e-1431729d8f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdf1c4a-7cc7-45a4-b9f7-a8c2075bd91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ab29d0-7061-4afc-99c4-177a8abea34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7e3d32-3aa0-4247-b682-44f98bb6ce20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f083bf25-b99e-4bc8-be34-a609edfb0165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991d6b03-8b5e-4494-8a60-eda3910b8a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca997552-8ba5-4c6d-8fc9-e436537b3543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d59efe-30bd-406a-9a4f-9ea2c059db2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c8393b-7dec-4d04-8841-d98a0ad56759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd94affa-fdc0-471f-9a8d-66b784a39708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abab003-0944-466d-8048-dc986f0a5740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4931535e-b4e9-4951-bb56-78c44c1297fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518e2779-f339-4f76-91c2-85bef86c1d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f5f9be-7103-428c-a95b-c6078582a4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c01b5bf-6b5f-4c71-876c-a573af09ebdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cad7293-2cec-4b4d-9f6c-3c0b5b45f982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840c7899-f778-47f1-82db-b947b60bc9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c242ac-019f-4919-943e-062fe205928b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c9357c-24e5-4e58-8e7e-818f2a19c274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5b5f2c-74e3-4939-95b3-63ddbf00278b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26423c4-5ec8-4e3e-9e99-b7c85cc25d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e535f07f-1c69-4d3d-9d8d-172cf47bc4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bfef3a-d8f2-424f-92ae-b59f784f9d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b9bfd7-6582-4b53-a88d-2303393656d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5af8fd-eb56-4f5c-833b-985d5b3675e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa04b1ca-fa37-408d-89a3-87f04ee78eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf0df88-1da3-4a57-bd13-ea779e40c2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592fa5b6-aa1b-47a7-8156-80dee7617503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.164']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7ac874-1b0b-448a-80b0-513cfac6c881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f60511-53d1-49a8-a255-3e87315e8b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1732959c-b14d-4724-bfae-8af87e8937e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf23965-bc4b-4def-b480-6562aed2cb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57632b21-05e3-459b-856c-fea7f0d8a6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a50ee9e-4e86-4b50-b759-1a2eab091043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32fa60fb-630d-48e5-96e6-44a21db605ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d982a32-126c-4397-8930-db5f8710e5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1d6dda-bb1a-44a9-b2eb-82ac61971866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fc8a3e-a1be-478b-8469-f17656d18a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da271799-c51d-4cf1-b028-ae4395668a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c1ea1b-b674-44fc-9ffb-8e09b327999b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53647a30-afeb-419a-acab-727d97cda50d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59484a3f-ed82-4f67-8b70-ea04f7618ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db488a5-de5d-4765-ae6d-034ba7fd85e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5bcd18-48e2-4f0e-b432-609f5b68181d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bdb634-abe9-41b9-aa86-1a3d36de2e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d73ae3-6dd0-4254-a1e7-ca44a395c1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5f02a4-7cd8-4729-afc8-070eb0f135e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f10cfbf-9596-4b9b-903f-cba02f5b51a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d10dec-9a83-4b62-a511-91ea01b50da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1047c6ea-7351-4a4f-a140-c4381ca289e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4b4f0b-a87d-4360-b9a6-4e740016e978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de560b3a-d356-4d90-b0ef-eef483f0d9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929cdcd4-5750-498f-8d30-89ffbce8960e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e872fa7c-c6ef-400d-bc95-3a74003c5829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ebcbed-bb30-41c2-8cee-041565ba71a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.193']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1799145-c8e8-417f-a520-28079700bd6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3787957-cf7d-45d1-beac-23ef49ce92bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043c84e5-7d31-424d-a239-9b4cb5d1cb84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47bf1f9c-6d4e-4f24-b482-81ae3c889e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569206f1-73f5-4a4e-be29-c1b4f76fbd08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edca6459-ce00-43d6-8b64-9ef7684a785c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786892fe-4f59-4e36-97ce-ab70cd1535ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9600f2a7-fd52-4a13-8f35-e13fc3d8af10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d24b5a6-806f-4054-a8b4-4efc3d86adf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4d9dd3-fc2c-44c0-b436-f69f7b05c245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebb8ace-e851-4397-97e1-006912c9a001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d66a85b-c38d-46be-82ec-96585501645e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b938332-8c1b-4b5b-8b20-5b1708fd3d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc40d65-0ab2-446f-b229-a9d47e9bfef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba32930-d941-4594-b6dd-51081e9c3bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6a43db-e5e0-4140-9966-d92ba980a432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed25b30a-659d-48d4-8f5c-9ea40b7b830b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deea3690-03d1-4489-b1eb-868688b9469a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44bf03c0-d640-40d0-8727-819ab7c721e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df461120-2a75-4b80-aa86-910a8d697cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33b42bd-ed60-4eaa-8232-3479e492c6ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5034618-c0fd-4051-a342-27ca7caee3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b180ce-187c-4a5e-b68b-ed4b6a7c6769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2238a9fc-0e74-4c7b-9af9-7f87e47d7f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff70b31-da7c-4b38-a90b-f6160ca4bd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05970646-80af-4a4e-8293-96a2d2460c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea0572b-87bc-434d-873f-356af5194eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1519e473-d770-4555-aba3-3e4582460a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529527e2-7240-41d0-904d-0a9203d90aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3865aef5-0141-470a-82b0-7731683ef6b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c128be6d-a7bc-47d3-8404-5caff6358875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e13640-6f6d-4f2a-91d9-47ac91ab1bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeeaedbd-b17b-4035-8ece-0016ed54ca91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c267a593-6d6d-4526-9fff-481fe5542e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc1f420-cffd-4d24-abe2-3aba1096bda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa14d02-4263-4f13-9ab2-a70cc22b1f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.240']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20cfaf06-2095-4ddf-92d0-5168054e76cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149c1080-a580-4d98-a4ba-572d6af14878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da736e52-beb6-4e44-ac78-c2c9ca9a69e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7f3cf2-be77-4e14-a466-4453eecc81db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56046ac7-0ecc-49df-b924-14a4103bad8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1632672a-e276-43fa-a0e6-2edd4b13e183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1731cc-1810-45f5-a757-38572c985920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49728338-587f-4152-97ee-bc83ee86a95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f738528-2e55-4738-88e1-4693d7f5b473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28fa4e8-e7a2-4712-b51e-a72a62ea856a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed4843d-8481-4107-ba15-ac0b3af9d95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895660b2-e710-4d30-bf4c-1b32d41b0a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37000a17-cb65-4aef-a2fd-5e876b0ea8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306a626b-d1e4-4c54-ad43-276ac5bcaca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad58093-85df-4ab6-ac3a-f52ce84fbd32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7820bc3e-86df-4999-a7f3-e3c31345bb5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75474078-133b-476a-8eba-7ada4994d62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5ed293-ca8f-458e-b5da-6e730aea1561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e711f5-4376-4263-8ac2-a8b5c49289ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8dbc73-35a2-4ccb-a9c8-12495e64e619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a76973-cced-45be-b16a-7a6e0671c8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a20556b-be06-448b-8b8a-81b676b2a839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3af599-3a2c-4c0a-a6b4-bd39f1e34c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c67484-892f-43ab-aab0-a8a44e883bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34297b03-753e-462e-b4af-cfd6da472f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d0339b-e52e-4be6-bcf8-c643753d828e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027520a2-18bb-4cef-b4f5-e07f8787ed2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19893c3-3f4f-4333-995d-bd4aa59b7616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8f10f9-2df2-4d74-b000-3e0ee5f34312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f2290c-39e1-4725-8417-ea80a4b87b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc41159-bcc3-4f56-9f1e-154ba8f96475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95692319-eedd-49e5-9e43-dc301d9228ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f316df-9757-425c-bb60-4096ee374ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085cf37f-220b-4c37-bcbe-64439afe22c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3531c70-9a3c-46bb-a3de-f0c82a56b4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650a3365-03d8-479f-8a79-a4f34bce8f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7e8b65-c11e-4de8-8607-021a41a3c9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73db4966-0221-4ad5-a3b7-c51babdd8551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d59acf7-e048-4060-929d-63133a1ac910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c738c560-56a0-4cce-9d44-837de7334dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfe9f19-1478-49c4-8b90-5f29d275a9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915e7ecc-d849-4cf2-b583-aabb3c74ae42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120777e8-681d-4c4e-a9d3-09bf5284f882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.19.126.164']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ed4ce3-b6c6-4061-8799-2989636809f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.199.210.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce28ddb-6114-4523-9a8c-45c9eda42de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8482485f-8d9b-4e6b-851f-d17006c3c0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edea7549-555c-470e-bad3-ea22bda08ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb17ccd2-0daa-4d05-a209-135d5b84c334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7fa6f47-2759-4853-bfb9-4e420bf58d6b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.245.97.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc53ba4-46ed-4240-9a47-68d1660ee5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf091480-cfd0-4807-b41d-9f7fbbe17ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.223.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8de919-d01e-4064-a011-badac49b9970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5b8065-123f-4722-9d18-ebfb465e4058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60eb4777-e8ce-4ed7-9535-e77fa4e61174", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04354e5c-1674-492d-8766-516311511b46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.115.96.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8df94c-66d7-4b40-a2ce-3746a43e74a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.126.3.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe65ef4a-f14a-4899-9cb2-82557eed45bb", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.171.193.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b733d04-b2f3-4160-86cd-849ad74ba7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.202.4.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ce07d0-bde2-4c74-8a3a-32121aea7ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.159.214.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3deb86-42f0-48bc-9b7a-9d88253989f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.249.255.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8494992-a502-4f35-9bfb-ac3f64e7a618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.3.217.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223a31b7-eaea-420e-ac0a-d89863a677bb", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.44.60.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365ef1b5-d334-415f-9750-ec8917018023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.123.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcad00ef-4b58-4ad1-9b6a-da3aed9cd6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.80.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c1dbc4-ab59-464a-a4bb-53513f37c434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.200.42.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7771811-c403-40b8-b317-a5667ee5136d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4407a394-3b24-4b33-bdfb-11d82869a6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa39ba59-8ab4-4c6f-a2ad-1b15aaebb346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835e1bb0-1a7e-4f27-96de-d122f3c3859c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c86e8f6-cd0c-4a01-9b8e-9e5201521d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577bac93-1b50-43c2-bc7d-95d0f0ebaf3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faadb18b-586e-4e1e-a075-0628cbf50cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00b9c1c-b75f-4f4d-8e25-c52a4636645f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9940bc2c-ec04-470b-93f6-ea681bb48e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ddd73a7-4e37-42fc-8bc7-e8ec44ee49ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42527d6d-de5c-46f9-b7f2-a4ea1979aab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e2c475-3e5a-4b07-ae89-63b8c2627951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e245151-64c6-4e6f-913a-355335152a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2229363-ab77-4e94-a158-52e61e6a0b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e257a1-468c-44ad-9b2b-05aad3f7c4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7657de69-61b3-4a04-875f-c0af1ab293a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff509c7-c7f7-4775-a74b-5c67e74d96af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d97f2a2-fbbf-427a-a69d-955c5d002fad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db10d484-de15-4d2e-9d97-6f111e538e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a27f016-0c05-49cc-98a6-c0e6f8021326", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8ea1cd-b1f8-4419-9383-eeacd9cdb68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e497569-c0f5-4010-944a-1229d5ca4887", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46110d5-3996-4f66-9fc5-61d399fbe946", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e80b65a-a1ae-40b1-aefc-f631336233d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fd56b1-268c-4022-be1d-b0b003e72e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb7055c-7c11-4627-a3e3-b7ca07a48c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d9c477-5d0f-4bc1-bf0d-0029ddd27d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f7c843-e178-4291-ad53-93e1af3054b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835bb155-6261-4327-9187-db7f51a18c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe37742-1666-43a6-814d-a633aaf3a980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6c747d-a035-4ccf-8500-e3b994b9dece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a52a5e-64cb-43cb-8f8a-b0c53b79d5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c3ff5b-c7f1-4041-995c-0bca55ffe68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3ff038-e412-4fa7-9b8e-156844a113ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbf2150-c015-4ee8-80a9-5a241d4ed6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47bddaf-a47f-448c-9a65-0b63a6887d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ea2bcf-9339-4362-8395-431366ae37f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24057f42-8418-434d-a5a6-f3d301d5786b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd614c5-c30a-42f4-bb0d-1d96c5eb843e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ea709d-24bb-45da-a405-f5cc71d7c0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd13d10b-eca9-4840-93df-6b6e56302783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f3c089-dc27-4330-bd47-25fd748cf9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c591c802-f4c7-45c8-b18a-12550c2e4429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4c9d89-80b5-4b50-a329-1dc4977264b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6783b53e-f63e-48b7-bee5-2975321ecf00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190691f3-6989-4e69-895e-f39fb898d4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b213892-40db-453f-b571-be60185dcebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d552b07-862c-4935-b38e-493d9070cc70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7545b4-7a62-4bea-8501-fd3370cbadda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85c9e82-f0e6-476a-b367-6d231c4b81dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0692b03-c809-489e-a676-4b76ad7a0c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1775dffb-2d3b-45cf-8fe7-74f2f9427127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195a6507-049f-4c7b-a0e6-0e4c91bbfeac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38527445-5553-4855-997e-f42293014fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd4c047-8d16-4d05-8f75-108224d2d466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06c2dae-61ab-4e31-8b07-48c6c4e37bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b9014b-ab5c-4a5f-b678-1f70f996eda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7866ea3-3bbc-4dbd-a57b-5180c814ecd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c000cd69-1cdc-4522-8af5-ea79f31623ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9393656-39d7-4ed0-85b5-d576e59ed1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6516038e-1c8a-4b8d-b097-0c6be4d099ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1dcd18-28d8-4cc4-a420-dd7c31786cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2470c7a5-b68f-4fc7-859d-d7620c7fe1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22b3b0a-4f24-4a28-ac0f-3e6682333146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1783eb-6787-4800-a1f1-559ccce13cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82adf7b2-d36b-4232-a159-442d52258e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36903304-91e9-4f45-a11f-b5d04d2765c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09803977-c2e3-458e-b9b0-e2974e7facfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f22c4eb-2a4e-4cbf-8cd8-c7ea8ac26d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7020c87e-77b5-45c9-a4d9-ba63b6e0a6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62cd459-944a-4a4d-a604-0bef44114b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a3cc8c-4227-4a1e-8962-ebb0dedda85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cac0da4-67c4-442e-af1d-671128e6642d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ee3e2d-0664-419c-b001-a2c2360e9d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8750e05-ee64-4a59-a550-656921d158e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5354d2dc-9ad4-4fe6-a685-06314853fe60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6ac678-9aa1-4005-ad66-b23f8c0dd144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8668250f-cf93-4c00-b4f2-adfbb2d5c83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a96b380-ca67-459d-bd53-9902ea5a9869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4488e7-8d18-4dfc-b9e0-19e83ced6943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f212e3-e003-48a1-920f-380b8362617c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c82c76-690f-4531-8e5c-a382d49a6687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1c2124-f85b-4e65-820b-7d25903766dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e572a1-fc7c-412d-a29e-94e6ba55dd6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca46dc1a-14c1-4650-aa55-5c27a48125ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425b6b61-cca0-47ba-8cdc-67c1e4c0e928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc698be-3cee-4e27-8ac4-f029fa068f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018022a5-0203-4f2e-a72a-e70cfb0bd647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a8f864-2072-4fcd-a02a-35d5cc8f9663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6045df-6f15-4d69-9463-70be3fe325d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4d590d-781f-4b9a-ae73-80a4494d0ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cb62dd-77d2-4a2f-a410-4b032ebe6371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f76585-2b7b-4371-81c4-5667c53c624a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f1bbb9-4596-4757-ac5a-33f2e87dd2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a683a05a-8df3-4f3e-bbb7-3c1a94048588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6851950-fea6-4aaf-8a1f-7c2c2adc7df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e2135c-291a-4027-830c-4d012e81fdf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e086321-a2d6-4c95-95fe-088810e91c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804172b6-4501-444d-b932-dd7fb3ee951b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1384d0-061d-4e87-a33b-aea5c7a01ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d9cbb5-cf70-4ec9-9506-648c33ab8a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ff8383-fce5-4d3e-932a-bb032502bcdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d30267a-1411-4a08-b2d6-ab4d9e49c28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac4a441-5052-4e66-b93f-8869a94379aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f71fda-5a43-4f54-9909-291b0ef374e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718d9dfd-a7ea-4538-af34-d3ee411cb1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d3e2e2-6aa4-4949-b4ed-cf9d875bde5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1082f1-7ffa-4ec0-9578-77ae189f52d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1180fd1-31bf-47ce-bbc6-5f598384ac46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28227a7-2a71-40ea-a00f-1b4ca8666861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39eb63f3-9a72-4d86-aab4-43dd0486fc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913ebe6e-bc03-4198-a1f4-26d6520bce46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352d375b-6806-4b9e-bb93-820c99ef2b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3155333f-7ccf-485f-a3a9-b9fcb108f1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de600c53-3d7d-4e00-a72e-8613a1b57405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad39a1a-269d-4997-9277-383bd58766b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df880cef-5adc-4b10-8889-8b4bf1035724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3ce70c-1f1e-4ddc-9b1e-31a88d534e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c2b916-87f8-48e7-8c3a-7266331ea329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548e4b7f-d5e6-403c-98f8-b49953a06f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961f1dec-0fcc-4358-8871-d1f94bc2ab61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.244.216.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec2dc6c-5306-4b57-bca1-b5119053380a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.84.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1be3fb5-6060-4587-b9db-90dfd1dda535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41337506-1b8e-4aee-9072-cc56bd0521b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.57.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403e12bd-8d6e-4e2d-b3e8-6135719241e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83d7f37-8b68-4b15-b493-a1c9785febe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.217.99.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4879e0a-2302-4732-8280-64a20aaf47e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6dc145-4125-477a-b013-9fbc7c132352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88231782-e003-44cb-96bc-26bfcacfdfc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89705a20-6b76-43b9-b9ad-547399f06a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db7f624-edb4-4ed4-a4c1-529723c80f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16c0fb4-da90-46ad-8f9f-e08bfe75b198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46db1920-7515-4584-a23c-2a3c7384be41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3a7c32-9990-4e5d-b8c2-f8e066204d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66613c8b-21ed-4b72-bdcc-e6c4c784e1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b127b79-b1e3-4210-ae8e-4d3df0808c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e381193-645e-47f8-9041-1ef696e8354d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b219d256-9e9b-4f37-a1f1-13a0f9b005c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9182fe38-c9dc-4fd4-b5cf-2878eb4f47de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac19c5b4-b0e8-4b48-8857-6aefb37e932f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c554a4-fe28-4d67-9d86-2bca0892cdb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab2c68a-9b0a-44b0-9c29-240e3c90c67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d693e6-4186-4917-add8-cfbbd9c3c4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd50f0fa-2b6a-4c71-b2a2-cfdb1e3e5f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3df60a5-c541-45d6-8270-6542f7ef53b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45630dc5-cb14-4996-8575-c564d6644d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e015699d-696b-48a0-9c90-e09c3c5c4360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649a0efe-b4de-4a20-bf0d-b71f32fc7b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8ee37b-db02-42b0-b010-62500befe63e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5f59d1-fad7-4421-a637-ae26a05726f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bf937b-da5a-4c03-886b-333875bbfdcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef499813-5eeb-4658-9627-6a38045dcfce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8c587a-635a-4008-be83-ec2d12844d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ba4c13-191c-4a37-8c76-96af47a58117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb05458-ec70-4c88-a692-bb7feef58195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c016ff-c5fa-4e8f-a13e-69d915808b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9144be-e632-4aed-a1a5-3855af10a59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bea1cdb-0570-463f-8a28-ca0cf2d4d524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5228dde-c7b0-4930-aeea-2e781387f862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.109']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c2feab-71fc-40f5-ae62-9606d968bb0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b5ab19-f773-40f4-b49d-71726a496c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e2dc40-8a3d-4885-b3d0-8281c7e69a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468623a2-064d-4bcc-a287-18ee76b22544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8341f668-1e1d-4ba1-b0fb-9afe0d8dbf17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed2353e-455a-4188-9b8b-657391da6a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97c306d-861e-49c8-89ff-c8b390f7ee66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b60556c-8a4b-4291-84e1-24c9b08657d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf9db68-22a3-467d-84cf-b4331c48da12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13ff31c-aaa2-424d-a363-d5a3a232355d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c8f112-2dd4-48e3-8347-6667553f7538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10a1302-2661-4541-98e6-00e0dca4fcdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed394e1-2383-4e06-9083-b334da32340b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a197dd92-16a6-45eb-92a0-0c8b03fdbb89", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.132.232.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9557f749-fb1e-4252-b4e4-40b920a052c9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.134.15.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635a3f05-c984-4eb6-a686-1e9aca634dde", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.176.55.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d74d31-cbdf-4954-a4b9-427522d74f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.185.18.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e11c74-2106-41e3-b8cb-aba5df965a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.248.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39839f3-302e-44b1-94d7-61b0b856800d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.56.30.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e77d1bc-cf44-40a5-99d7-40786ad66869", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff36dac-cd00-463f-a949-7ed805e2c050", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b32c0bc-54df-4f67-a469-ec62aa81050a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f322e48-1507-4d2b-a0bd-d8f4142a7613", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7bd993-b738-4482-b81f-a034ad658547", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7db3e0e-2822-45bd-b03a-933132477d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.58.202.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d760ef83-3d24-4d8f-8aa9-eb0e5aba3dd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.82.47.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8fccddd-8aea-4039-945c-3306fa04f012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.97.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb47f83-8a0d-4c81-8a48-e341d4373726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cc3278-60c0-4dd6-94e7-2de5aa37b173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615d8887-3afc-4d66-ac3b-6d50b73044a7", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.205.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c21249-aa17-4325-b177-2e674019a28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97c0947-debb-477c-ae24-5f95031b6a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e67583-774b-4681-bae9-a0de3fbae680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7c015b-9ddd-4665-b637-44b978a4e137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.45.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d85ba3-087f-4faf-b99d-bb9b68acbeb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.201.169']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f5e797-2c95-471e-a685-ec49b70e62bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.225.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f263e3-7561-4a2f-950b-1bff720644e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e24f312-a8fa-421c-beca-dcfa32e2c0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.123.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ed4d7e-9a06-4013-8c3e-c11d6280c2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.80.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648d3409-0a24-4cd7-b5d9-ad1790017048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.157.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8146ed75-b10b-4f2a-8145-1b09b71884c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.187.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9c2784-9993-4b69-838c-ac13e1b653af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.200.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2e4b79-f513-4222-894c-1f6ca757e403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c61fee-a7b7-4f3c-9c95-14965e025227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb25168-7735-4d28-b72c-becfee37b12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903bfda6-2dbe-40a0-a9b7-d33c03204027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314bea13-9ec9-4025-9f02-8e1056e177e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd6ea9f-d418-4a5f-b15e-b38cbc528c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5568e246-1bdb-4345-b920-23666548cf11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744f4b09-56b5-454c-bfae-27389d9c4587", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.13.164.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614bf2a4-6837-4e88-9b61-ea7d8d39c501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.72.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c966ddac-8d45-4642-acaa-ca25de98a8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229b5ca5-d6ac-448d-b9a9-b9daea289538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fe5433-f85d-4feb-ac3c-cf95c56d334e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9250bee-ea58-44fc-94fa-c229d57429d1", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e196d85-8dab-4f76-bede-9f4e5dd6a4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.75.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2022be-dc4f-4baa-9834-813ef782a4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f97a788-62ef-4d7e-8ceb-82ec4bc96d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.94.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bde356-0463-48a7-8f13-170f39b20cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29896ee6-304d-4714-8c54-7e5e694db96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.169']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fa66a7-eeb2-47b3-bdfd-e347c07fa2d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1aed011-220a-48db-8663-8634dcf6e469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac3ae5b-bf71-40e5-a3ee-1362c0c2cd82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5274b29-0b56-4367-825e-b3d16ebad58f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817355e0-d2ee-4d3f-869c-d953d9127f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35823b39-a3d1-4094-804d-29c075062f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.194.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85732768-e901-4854-9929-93c35d7a1724", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.151.221.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03717b91-2158-46df-b3e0-a6ccce3849df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c171a7-70dc-4b3a-9111-c6b10a681665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82c3c4c-b694-4f3c-82db-33c1ffd87229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd63b12-179d-4ee9-aa6b-9a605f67ce2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a564c5-aa0d-4a15-83bd-5875466577ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7f9b7e-33c0-497e-827c-02629ef67d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2c355f-8c16-48b8-b09a-4d4013e19d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc0dcca-78dd-4166-bc0c-0a9ec426ba15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba791bb-db2a-4192-a785-9dd3aede30f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ccb8c7a-4b2e-4d85-b818-0fb8f1b46a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675b2375-542e-4a99-9ffa-e34d76d0eaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51330d5-9def-4e10-94e8-21e58b625368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f101e3-1401-42b9-8743-869e81dffeab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d0fe4b-c12e-4f09-a7bd-6538ba2f8ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c200f46a-c1a2-415c-b16b-b565aa3f3890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7652b2-af62-4fb7-ab3a-7ffdb7ec8837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.37.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b967e9-0b37-485c-9654-6ac0a083aa15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.38.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218c98a7-2e71-4227-a4dc-7d5feacdec8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.58.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01881513-ec22-46e4-a25c-468fb8c1584e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63d954c-9c95-47b2-81d1-4284938471c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92c87ab-10c4-4c62-bf94-9d2597dd5c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816e6789-3db9-4ff2-8b64-8aa5cb3a7093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8b44ad-1d1d-4629-9ae8-3de42a71cb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.113.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecce2fd-dc51-4fda-a3d8-fad8c232a721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705f0437-ee0c-4820-84f9-1bc8b734f102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cc5b01-9a7d-4f85-8724-2264ac559d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12348e66-0861-4931-a9fc-011bf61a0f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3351bb-2412-4974-b490-c9a9b47b2ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53336b76-89b5-4236-a9ae-ddc4444dfd65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb18a322-c3a0-4ed6-b498-dc41b8543c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4427c6-95e2-4abc-925d-cf04ff37a02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2d4f7f-d6e9-46a3-931a-9ede8926f5f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21de717d-1e97-492f-b833-36c69f6d511f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f000fe-fe15-4b0c-b1f5-10a27dd94204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b33293-0b58-4871-a890-92123387d64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723a19e3-7e08-4929-9952-30d470af1ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97989914-dfde-4491-86ad-7c0b4bd8f912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1ea792-ae75-40ce-be90-779425f31b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be95a1bc-5336-440c-b79d-f65e7836d982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333466f2-927e-48be-9316-8b69ec67b120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950b949e-3f5d-47aa-b660-ac8ae67a0df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36f88a7-1261-4705-b2b6-59cbca31ad82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca14d9a6-8f7d-42d0-b600-347231c8e82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aebdb7d-de72-464f-b43e-a1c2dddaf6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28c37f7-4fac-4a95-ace3-686f2e165817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5953a6eb-3e2c-411e-aee6-669117f2d7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd1f4d2-d5d6-42a8-8f7c-7340e6cb9543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7effc57-25ee-4412-b099-e931ff09d69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.255']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d61a0a-b062-4014-9a1a-30928d272901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f12dda7-2fab-4336-80ad-2a1184a47735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb6e75f-03cf-4f3d-8194-e5839c1ca997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cf8eed-fd1f-4af7-bea3-047745feb5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a017ea-b393-421a-b2ff-b41157d285cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a775ae04-888a-4b83-aac3-e9aff21e61ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6afa0d1-a71c-4767-9164-a83f67b5354f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98b47a1-b581-4cf4-9dba-2acb578a547b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fb6ec9-7338-4a90-a1b8-cb3ca0fcc729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4698bbf-b73e-42b6-bbea-e621392efee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddec436d-ab19-443a-ae81-31bf89898ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde615ea-10e3-489c-8799-7c2446e87acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ad1d35-0c8f-4a04-a267-e1de97301878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763264c6-61b3-4c31-bf3c-46c487ca5ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b4ac2e-dad2-4e11-a9d4-76ba010cc0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b27889-34db-4ed0-bac7-6f52ec02779e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09cb4ea4-e170-43d8-89ed-f4013b126e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf37765-950e-4d5e-8425-ae9ea47c82ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.51.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536be9a7-0d22-4267-8187-85fc4092ddfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c69155-d219-4901-beb3-7e7b928d75a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ac15a0-603e-4b72-8155-ea5df853c11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d254f72-572c-4187-aed9-43d70760240b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb1b04e-3490-421c-90b8-9fe2ba1e0185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95594af8-b956-4687-b3f3-897ef1104ff8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.55.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae22b12-db2e-44a0-a9f2-204d8b01023b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0832de-1868-40f3-a026-ed26e09abc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c9d085-8c2e-44a2-b1ca-d2552471ded2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b7cb41-bdaa-487c-953d-49dbb77aeced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35e2e3c-f6c2-4070-aee3-c769c89efa10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6296a68-bce1-42e1-a797-2fa107d24edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.70.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1c51dd-5223-4d2b-af6d-5cf3e186f448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.186.232.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c606ed8a-19eb-404d-85f1-6151d242d03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.186.232.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24728d01-c6fa-4986-8a2e-bb2a41463422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.146.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc017568-e390-4432-ba28-d305e9af2ea3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.195.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4df9dfd-8430-4620-a8b9-bd03c06c05ce", "name": "Malicious Host", "description": "Observed: OPENCLAW, WEB activity. Sensors: cfglobal, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.142.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:openclawglobal", "protocol:openclaw", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a568d638-1217-41b9-9341-b28ffcd8493b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.219.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c358e77-c4a3-402e-85ba-9f2936a30cf2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.220.63.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6a515b-025f-4bb1-be81-738584a28504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa7324b-63de-468e-b709-4f94db5b75c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b371ff94-56ee-47ab-8c1c-c26273f038b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790119ec-ae00-40c6-b777-72ca35985521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe0575a-a4bc-41ed-972f-720731ddd49f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.228.149.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf931da-8e3c-423d-8189-25accc00fe06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.24.65.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2bee403-54e5-4c2c-a1b2-9b052c475a2a", "name": "Malicious Host", "description": "Observed: WEB activity. CVEs: CVE-2002-1149. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.251.58.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--108ad1c3-81da-4b41-87af-1c567ec30915", "relationship_type": "indicates", "source_ref": "indicator--d2bee403-54e5-4c2c-a1b2-9b052c475a2a", "target_ref": "vulnerability--3c0008c4-2f55-4e69-9930-95caf3c0f026", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4a7e85-a0b0-4f00-9c40-151126762915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953c79dd-7a63-4d4c-a1f0-c13a68aaae03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35a58c3-9319-4474-82b3-7d82de3512fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126e9eb4-c416-418b-bc34-80b143eab8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197127e6-ccf4-496a-924d-e5c5b491f98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4a58a9-7208-419a-ad28-5c90a2d5f16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.209.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27fbb4b-f303-4eea-8e27-867cb96f9ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d656df1-9df5-4759-b22e-ee69b0ec0ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.108.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856e1fe4-0717-4ac3-8441-697d39557512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.164']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56039695-6ff2-4ff1-a9aa-a40b546a57da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.48.238.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a910b926-6d3f-4e55-a60b-ed67d844ae77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.235.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197c3d41-929c-4099-b4eb-b6d4cf4043d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.244.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8373c3fb-cefa-474d-90ef-d31717dc67ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.245.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aca4a10-3c8b-4353-b806-571f1a507a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0577d3-5b1a-41cf-a41b-4f0e657a766b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.36.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8fdccd-e510-4742-86b2-dd3c7b14915e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5c8dc1-57df-43ef-9a00-fcd5c7a00e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.198.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6c39b4-b6b3-4ec1-b42c-4c4722530baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.164']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0205485e-819e-45fa-abc3-aa7c7d601005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f44566-2ecf-4936-bf69-344d78a6449e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d91ea5-aab2-44ee-8a48-1a9e0bdacc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a68b9e-6649-4518-9252-e510630e51cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac123f8f-89ae-4ee9-8325-79eb9f76647c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6501791f-4962-4910-86a6-86e047ccbd8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e0a933-b262-48b5-8951-536049cdeac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11208dfa-564e-4679-b6ef-534cbba4c416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac1b14f-d8f5-4c2f-be4c-a090140127ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90146a90-5747-4927-aec2-c834d4c08392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0a6399-132e-4e5d-9403-7d233988f131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1e3f08-313c-40f8-b483-314507b056c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15638224-38b4-47c3-94b5-c8696dd9594b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b23b25-f1a1-439d-8d14-128c2b723a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e25d612-3a1a-4af8-ab4e-05819b2e218c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a143538-7fea-4b2d-afd5-c9dcf0b4c513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa99ef6f-6c48-4fc0-91ab-5a522d2c604d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161c01a5-4cb7-44e8-9010-41009fc55296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2792b388-e8ac-47e6-ad42-1e03fb875136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f489ea0-3b5d-460c-8e12-18f9b48d4d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9255133a-23ff-49d9-b088-10a8fca1ec3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a491d2-b872-4fb2-b308-760674af2a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01bfe01-faf3-4fb9-8980-02e74310ee12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db88c20-4b38-41a1-b026-6d80d8a70531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ee1125-54e1-434f-904f-8d85d01291e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f6cebb-44f5-4344-9ac8-a3ea4dbf015b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.96.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afaa1793-703c-41ff-84d0-5c585d974d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07efc950-d122-41fa-a3b0-19ee605a0a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544ede9d-3e23-46c6-b69f-e55a095d88d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eaf8f9d-3d91-4e0d-b55f-e60e5fa2fa55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2699c6f1-8d37-4a34-a660-d05289e2e273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb55bf74-b6ee-4d43-affd-40c6385c49f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8888f69-8a65-4d1d-b9d8-48f662942102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dd8db3-5a19-4441-a537-cdd56206f1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6420f92-42d0-4079-ab27-f86ac6e87072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.0']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89131b34-83b6-4f8b-9ac3-98e5256a90d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8d5010-243b-4dd5-92ab-941fbcc07ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c92cd7-e504-4003-97c2-5f95325b5425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8586253d-f880-4201-b385-2f0cc9d93598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357f87b9-ce45-4f55-8cb6-688dc230685c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34d6bfb-eee9-4df8-bc7f-6246572fca96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a426fbe-31e6-450a-923a-f0849ab0ab3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080863d7-abe7-430b-a219-ed91cb35a922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b5324d-649d-440b-a9d1-b786bd4c5747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f790903-3e17-4794-abe3-7a05ad4b800f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39776ed-794a-40d1-95fe-ce6ef2772c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b44318-4a58-4bf0-9dbb-81e28ef35f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337a1525-42a7-4384-864d-21be93be8045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680c1e30-9d23-419b-8713-613ce419791a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7bbc390-5a27-4ef5-9bb8-64069f34eac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae427d4-448c-41ba-b1d5-dc12613ca54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c73a3ef-c175-446a-99fa-b4d22babd7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f869fc-7acb-4773-a45e-65fab8077425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a7e54d-036f-4b9d-aedb-a9ac9f5a92aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41686997-aa87-4cfd-890c-53b0a84dadd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3373b6d-8b84-4243-9dd8-9522fa313849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e7350a-54d5-4424-a20e-23f7cc22c499", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cee6346-9ecb-4c57-a379-436a90b46873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1530fd-2a82-447e-ad25-28421203fffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e13c96d-0c62-4ed3-b4d6-7fcda63cd7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc68ac4-b0cd-43ef-886e-42eefb6e9e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34305dc7-fca6-45d3-8995-467fa551350c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33566e0-2234-4047-963e-d44b97668bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b571162b-2467-40ed-8127-0a687f3b9c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f2d580-3e66-4ce6-8d44-3f9aedc67466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817cc82a-5626-471c-8495-7c2e3688d80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2995c12e-91ed-40f4-942d-adc7585e142a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfd0594-d4da-4618-b1cd-11c441ac0491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548b2bbf-2b54-498c-ac0c-80446c4e2417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd77f1a-1c84-425d-a871-29df77c3cfee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a27b67-8ce1-4e1a-9dd6-193dca46b1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.226.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3532377a-ad03-4727-8f41-113c886f6a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8254fa4f-42a8-4c8a-9209-a4aced1bb55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecc3af3-8b55-45cd-bd4c-12a3a059bfc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.185.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb6a1c2-c654-4621-ac32-83d8b75493e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1833fc-ea6d-4fd2-a7f7-cb1e3b186371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236e8f09-af5f-409e-a915-7f14dc3cfcdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.58.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1aebe9-0e50-46a7-bf23-b88450f0dc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.61.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f02922-d6d9-4d5a-98cb-af69de2d9a88", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.89.68.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d831ea18-55bf-4488-b777-61acb3d4755a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c974f7e8-5eb3-4dfb-b9d2-3f0b0dbc3730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.136.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d30cce-fcc6-4362-ac35-c84818fe1907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.137.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3463647f-7107-4b1b-be3d-bf5f33983ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70a3e48-363c-48ba-b176-608bd5d2661b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.1.218.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee228e8-0a43-4d9e-9238-26a4e29f945d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.110.59.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eacd2b9-4066-4e5f-ac93-a8ca8a8897ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.37.103.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb4e67e-ba93-41f7-b240-0164ae79fd56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.45.94.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac468f9c-b462-46ba-a97b-5c7b0aa4673f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.137.202.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48d9e88-1380-4264-8978-50b2d72cc182", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.138.137.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa78b48-13c3-41c5-9acb-4353058029cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.147.239.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24486540-9469-4111-aa87-035849457e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.161.46.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c366d8-5dc5-4535-8e1d-869acf6d5e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.46.20.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9a3912-ed73-499d-b329-60c365a212d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.54.235.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4d87a5-76d1-48a3-8cda-6e89c8c6f8f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772cb150-3273-4f61-8213-928f65cfbc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.145.0.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d292a7ac-2614-426e-9858-a2889651bc71", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.162.198.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f5b926-3b36-49c2-a72e-f74ad2b776da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.53.94.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db88aa96-0b97-4e2c-aa7c-372be53ad7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.79.49.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f22371-36da-42e0-b8b3-38bc8d8441d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.107.63.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f2f639-8778-4688-981e-6cc7068feefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.156.108.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bf341f-dc0b-4603-afc8-ecb0d7a199c5", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.202.242.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cc3920-8777-41af-94df-5064a8402fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7dca33-867a-4b6d-84b9-b2c92f652573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f8f6d2-d536-4888-9522-ce87135f38f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.57.235.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b183d9-c68a-4c3c-be64-c89b1c452a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.236.215.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83d005b-11f7-4953-98d8-f2fcfd71a052", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.186.144.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649c6166-01c0-4a9e-aa4f-142eadade366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f612f39-ff86-44e5-a986-f3ded8873346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a462aa6-3b87-4e87-b25c-59a84670b364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61020ec9-fc0b-4d04-b5d4-a807227ee6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece449f4-c3af-40d5-9bab-6d43115d490a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f46d2d-73a5-445d-8a6b-d0f300df6a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14407a0-4372-414b-92e7-c3414bfb2e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb23583-1f15-43ef-a971-3024c6435b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a78ecd-0312-4d86-873b-4982efd6f94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2710f52-78a3-483f-99c7-7d99edf7f3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6fc1d2-9235-4240-9b25-deb30ca30634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95955fa0-96c0-4ef6-bc51-077eccae7b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548e978b-f844-40e7-9405-610782a0b6a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2ff212-8419-4440-8f86-ac305624e2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820842d9-80e2-42c7-a039-82d8861a809b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d374e459-fb00-4481-8126-a3f907b82d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc79977-55b8-4eae-8e8b-443e3657e6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c276dd7-973a-4da9-858f-09f146300dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32e7c12-df46-4550-b31d-e97f66aa16ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d0f67f-780e-4afd-ae57-f7bcc05258e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bb3d5c-a10f-46ea-990f-fda3d8d1d7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1c619b-dd8d-4989-823a-792db5b7d077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acff3ba-d90a-4f66-80fd-5afe32dfe10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18183b3-7b36-4b40-8489-9530efa94151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0713f8d7-5872-424f-a7d8-ea3fc642f8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79762355-7642-4402-87a3-48958655013c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00e502b-e146-4b75-910b-83d5de4f8ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e377e1-9cf9-49de-8845-1f8c63ee0fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0f4759-8aea-4aed-889f-610c6df7d7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6f16f7-8a19-489b-a905-3717bd973a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a647c356-7bca-452f-904b-1cff0a400316", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ccdb3b-b920-47b1-b264-e59fe152c0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ecbae7-2a1f-4060-8fff-f44dbb6901db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1c0885-9e6d-44af-a0df-6f9d526c54fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9b7da7-c590-48dc-bbc0-e21a4cd9c9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43044a50-7892-462f-ac49-ebd4b204fbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c82d98-523c-4701-9fbf-a4037abad933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ecb73aa-0d56-42cd-a1cd-7e74e12abf91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca410e1-9c74-44ef-b1ae-2811f9537030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c186924-17e3-4996-9508-88c2a72c0a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7fda71-a430-40cb-91fd-cc3b2671f3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7906c0-c24c-4f67-a9f4-6a0447ff8f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e672b840-dc72-42cc-bb17-3a61471562f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9288a27-e88a-4f77-83d7-8ed93c360cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079e9d80-ca1c-4115-ae37-5812a19bb8f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d1e47d-45a5-4c5a-ba5c-4e5dc0256e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc45ca12-682b-49f6-bdd6-4a06aa5a1176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494d929b-13b9-4225-9040-1907529576c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9483086-bc0e-45d8-ac92-ae18b96d9482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304d15bd-a2ab-4ab1-8187-534f82006a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2bab2c-8122-4d21-8f1c-f0a5690925b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae427bdc-7601-4ad2-86d3-e11e75f63c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0089e70-894e-4073-be9f-4c34855cc7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db048ae5-152a-4d26-815b-52f7c2decd63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc284b0-88d4-453d-8582-1a24bce46e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60eedba4-1b63-456f-9c84-7f0fa9d1c479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127babad-a145-4671-a52c-ea01fb030cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8f2774-2246-4525-b934-b9c6147ae838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5051e5b8-e4ce-4b5d-8225-bbfd598af99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090e7741-b969-4df5-808c-6ee1ffb300df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd96e5d-fd9c-4611-8180-c47d743811c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fc634c-893e-43d3-9be2-0c666fa494f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66088b92-53a2-4e3b-a2b0-3d51b751b4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c4132f-ae75-4750-8bf1-38eb3e96ff73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0919b2-2469-4eb7-9809-e5fc807c7062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc842714-b943-4f63-a0bd-4a1986353f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9661a68-ef3a-4330-b71f-7a0809a80bf7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf3d8c5-0328-446f-bf7e-002419a192cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15139f74-cdd0-45d4-a190-0d09dd9ec297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5683a8-2e1e-4815-94f7-d6bd71ec90ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bfb154-1360-4caf-a686-42c7c287cdc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db66250-8da6-42bb-9d79-94adb54e5c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6e6d14-4666-46b7-9991-6e5f58686142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f418c9c4-ed34-4113-847c-8be0e7e25f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb92f209-d709-4039-8e83-6cb544cc67f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9d6be2-e530-4def-9fa8-acef24a3af72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b652b6ca-0f04-46f9-b55c-5489f29feec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11545707-5d41-4e38-9dc7-8fb3a4a08225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de840279-e35d-4d31-a22e-f629b36a9a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a2d3c3-a98c-461c-8289-8661caf62a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055d897e-3bf4-439a-b51a-1f8c61f16b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a951c1f-75f7-48e4-a981-db6d1d746aca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd146a1-857a-4291-9ff3-7acecc9815bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de261644-cb23-4f41-ad88-37a90a5de9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc34d9f-95ed-4732-baf7-2282b36bceb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcbfdf2-a60f-4b22-9478-fc489a54ed79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12747382-d860-4494-ae7f-5a589690d822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9ca1a2-d5b9-4413-ac2b-99ee3fc49998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3304c3e6-7a43-443e-9587-30918eb33a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255d1909-d986-4374-8bb7-fbe081885a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d5ebcc-ec8e-4372-b5ec-4b22e5227071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeeba9fd-7821-4388-9f6f-623efacaf55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c230afd8-b46c-46eb-9a31-add7e8734bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28882f6e-e1ca-499e-a3a4-3ea16c1772bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf676125-92e9-482e-91d8-ad2dac561595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f041856-0fda-4f0d-a87d-a1a48941342d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a58e5e7-0802-4b28-90e8-57177da18780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8708098e-7577-46ab-bb84-73f8c025dec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d840e7f-7797-4fbe-8448-b90f363d070b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05f8281-a7cf-4e45-9c22-48253052514c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5cc170-e117-4b50-a6d0-b4ebbd43674d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227d56fd-def5-4b1b-8065-c435f593dc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e43527a-06d6-4b5f-8365-7df6c992395e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381be6a3-1daf-4b2b-b7ed-009fd18b5f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f560c456-8354-4b97-a180-06a463a06a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190cd7b1-586d-4b70-9f7f-54b21600e3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a54120-afb2-45b8-84c7-653207f467af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.58.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b7edc9-86a6-464e-97ad-72fbbd83be65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.223.224.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8234c98d-9520-40de-a7d0-e6bbc679449b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.13.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8031f6-3126-4381-b211-66f656a00d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.18.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e5da2f-912c-4baa-9f00-37c2613c48ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.7.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a048ab-eb18-4222-83d8-e2cfeb4c8901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.221.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cab868-0757-4a28-a8d0-84588f30cc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.222.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b9dedf-3e31-4123-b03a-afa62094f092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.228.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9baae2-ca90-46c3-bc3b-276bee1d0c7a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.112.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15ac37c-bee1-4f6a-8a3c-90ff3d99c888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.122.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bd364f-600e-4b7c-9340-5dec89adf528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.135.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bdb3e3-0035-4e43-aa11-dc0cde71595c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.55.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13472689-5efe-4240-b9db-8d4195c780af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.76.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1def8d4-a224-43d6-8905-95550443ce76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.182.143.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05547542-8140-461c-b0d5-af4dbf84d21f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f62e73-068b-49b0-9ed4-fe95ee74de5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7dd8bd-4c23-4dcd-b919-013f1a23255b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4aa6253-7b7f-45c6-8075-638db25ef5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ad7530-dd9f-4a50-b594-79bf860cd241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98bf31d-ac9a-4018-8b1d-6a54c54109ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77265a7d-fc5c-45f2-8fc3-290c6d8ec5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff21f6e6-49e0-433e-ab96-c50bf42ba5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797ba73c-e571-4321-8e0d-e02715eaedab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca92d73-e927-410b-b7c8-a4e4e168913c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c3bbb0-90b0-431a-b16f-fa803ac516d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b38eb9d-94c0-4504-a8ca-f11f7544a36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02a8d56-3585-4be5-891e-bea2c040bcfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d90dec6-30dc-4720-bc4b-16e4d4b0ca51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc576ba1-160c-44dc-a32c-eaf74ca43d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c4a263-7de1-4995-bff0-93563a8f39cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba9588e-50dd-4e7d-8f30-4c1cc0057851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272803b7-b37e-4c77-83a1-33cb6275799c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a8311c-ea3c-4866-8b8e-91287ff00d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6bc153-71ed-4aa7-88cc-12981c085b43", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46d1b1e-6829-4f02-976b-79e8a9a1294c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8804b2-0017-4371-9b19-d01581b60039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade9dc00-35ba-4786-908f-22714adfe440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.145.51.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1098f515-dfec-428e-9d11-9b47421f58f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.145.59.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de175f8-ddc5-4e56-a4f9-f75f87316022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.131.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df14fab-264a-44ec-8032-ca0ec27c8a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.237.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3655ced-393b-41fe-9c22-6638a5083c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.70.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f72951f-d34c-4bac-a0db-47a4f143ccf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.61.7.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9a0d4b-1cd6-4c3b-a076-ed197c853b5b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.87.169.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcce1ba1-1850-499a-acd8-b9ed379cecbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.186.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5396e1dd-0100-468c-81e8-03ca0df397fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.164.166.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a9ddc7-e708-4cef-a434-d368f1fbbbb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.211.122.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435551cc-c874-42a8-bd1a-8cbf8b03e1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.217.42.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d4bf52-8592-4927-b0e3-5feb031a0a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.140.232.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86df3b14-8635-4d05-9316-81a3229547fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.155.100.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad57b20b-4963-4a6c-98b9-835796a7172a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.198.32.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a198ec-f323-4b8d-a893-2316687174f4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.20.147.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d082701-0f63-4054-b4fd-a93be2e2e704", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.21.227.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6776c877-1610-4d9e-8284-c78ecd195c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.23.246.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f705550-db0b-4980-85ce-815446c90c46", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.103.187.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee753396-d594-4e13-9d9f-c2036810aa9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375ab2cb-e44a-4656-959e-890a0474d706", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.154.12.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b27dda-b161-416e-a717-119507925dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.164.65.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10df2837-1b49-4da7-b400-6d42cb70c643", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.252.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a2660d-86b5-4d82-8af8-3224faca232c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.252.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf504a23-0284-489f-9240-b18838b1adbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.0']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bdfbcd3-8248-4391-86a9-cbf4b19c3232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01726059-9c94-4f4a-9f2e-5e286b58d6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22fd837-908d-4edc-af09-6c63e0023053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3facc83c-0c26-454a-a82e-aca6b76da0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b770db7-6b5c-48ab-9345-1fa5fe46fe66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9bd702-8314-4a3a-9d54-9966c0c6cfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b4c00b-7009-40d9-a0d8-f9cc4a062078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d510d47-6162-4360-b034-83d35685291a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3f60b6-ff8a-4eda-a4c2-93ad34be3dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74adb4db-d8e2-46bb-ac59-75f571cb8644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f404ed-a447-4021-86d5-efe670e0b18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4908b138-c11f-40e9-9b20-dc176b6ba3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22aa7e03-006d-4492-943c-4e896b6d452a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab12221-09aa-4a70-a7db-bc9ded3a075b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103ae1c6-11eb-4051-a53a-895106403d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9102672c-b2c2-4fbc-b2af-ba7dcb22a1a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22deff7d-cd34-4547-bd0e-e495426af7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe575f7-0c3f-4e01-9838-3d0021854be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659d5bda-6de8-4ad8-8be6-3cf08aab11aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf1f487-3a46-4008-b681-5f72f100f71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8e71d3-dbb6-416d-ae5b-2778f59f9e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1947e2f7-f36d-4591-9ec0-65e9b0c964b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05ebee8-99ce-4f5d-b0db-e305f39f7c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1313ff59-8194-4a4c-ad42-06cb7f7f0e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5509cde-0980-483d-b56b-1183667ba69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbb4925-8331-4311-9c04-fa23fcd73249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47338666-1356-4fee-92a0-e19455041e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ce4fc3-dfa3-4d94-8d7e-53f98c24358c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ee307e-4745-421d-91ad-5d17942285fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1abfa0-47ad-4a24-8084-38751b98f111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d50cd10-d9bf-4c9e-8ab6-1a275fb1ee87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa6730e-8f1d-48ef-8d4a-a3ecf97e25a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936711ee-e24d-40cc-b017-b3f05c5ef30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae23413-137b-43d7-9cec-ab1f4e839b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.8.242.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45afbaa5-1ae6-40af-9f75-2cc6b940b702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.8.49.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a28377-77a1-47f9-81a0-ed4e9b4b618a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.83.140.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af73cbf-d5a3-4ba0-9bcf-7d9618a97156", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.103.26.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3737570-4f0f-49b4-b588-b0073af616b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.77.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85371fa8-f768-49d7-861d-da3e4732bde5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.83.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd0c4fa-8566-47c3-b743-61df3a409f5e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.142.151.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af4d8bf-55b9-45f9-8c1d-097721fd754f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.176.26.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8dfd33-191b-49b9-88bb-fa63ad4ac308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.194.156.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7995cc-0138-4de0-830e-c48ea67bc39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.200.31.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5167418f-01aa-45db-9f7b-de20a68106c7", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068f0203-f441-4112-b291-a7a0b290c4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898900c3-fe61-449c-98a4-d41e13599ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9701681-9ca0-4e98-bb24-4944c08473bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae7d7c9-f3a3-43fb-b495-5a7b9660b9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9a994e-d414-40a8-bc2e-d2b7e69688ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be9c5fa-ee8d-4672-af65-c44e13dd6b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.86.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a264444-78cb-491f-be98-4d6b4102e6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.86.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c873a319-6b15-4dbb-93af-eda2cb1af8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.237.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0f2bc4-f39e-4d4b-bb8b-98fa15fe8ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.152.241.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe77ebed-e96e-4ad7-90e5-7f2491a0fa04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5700e7-877f-4f6d-a9b1-43f38769d935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70f2842-d304-4c2d-9ab5-6dad03bd49ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7a492b-9102-4109-9593-c6785eb051a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc811ed-2229-442e-913d-64b40c5af64c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193783eb-e3b3-4a98-afd5-69a02d901d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9762981-7d0f-4ae1-b12c-304889243648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f35e364-09ab-4c41-8b3e-be7530069e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c31a01a-d7e7-49e1-ac37-b75c70c06a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a366a4-3de8-43f5-ad13-354af3f92f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7c4085-0e36-4733-bc89-3ad1803d6181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c433430-6d22-4778-ab32-b3239a39200b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0678f010-16ea-4216-b890-04b3a4ba6e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122db8b5-6dc2-4dc0-8168-f020442e6888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77543fc6-4bf8-4a2b-9cb5-c68e31dbe478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585065a2-a4b5-4155-997c-bbcc95ec7ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2256b5ae-91db-425c-8a75-782e3d0f0b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85583056-e595-4e3e-8941-d5303557edd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9951642d-05f1-4859-94e7-76762c0fbbe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd10ae5-bbfb-469f-ac02-4c491bec0736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39695cb9-a9a5-4b6b-916d-597ad0f3f216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7067b7a4-4937-4246-8d79-dd839cb8de6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857b793e-1520-4c08-9f34-3377d55aa214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fba777-f799-48ed-a0b6-1bec1e77a5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445ed1b0-9d08-4ab3-a5e2-9ea14465813f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d3dd46-2cc8-4877-bf41-8f8d65bee655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db65dad9-fe8a-43ba-8f2f-87626d46db85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792d43f1-97fe-4aaf-a0a7-93cca497635d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede2d3bc-2edc-4ced-993c-683fd1a57aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb49a27-13c1-4d48-9ec3-48d395f2df41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2d3dcd-be74-4d3d-9a45-76964d74c0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a385242-4b45-4ebc-9977-c916fadecca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ece133-405a-422f-9e16-4d03206e17aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081e74bd-f479-4d40-b691-2fb760ee22b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b907da0a-77a8-447b-974d-1d31c4bdc7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c77c6e2-508b-4dca-a62b-6a83178f0192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983c59af-520b-4e7a-ace7-4cf734814a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2df7d1-64fd-4ba5-9001-5f046915bc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d52a2f-463d-4da2-8283-1d30aae3f49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a96910-57c3-4b77-bbe0-5ac8dd17c7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b52cd9-3d9a-4578-aa20-b90de2dd4436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600ef799-6c23-4931-976a-b8bfdb2d6f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0736d0af-4b9a-4b78-8498-0c8218fb6242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a7d894-0987-4356-b6a5-b70937bd655b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54bebe1-877d-415d-99d2-bff6859e0740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9082e5-f4c2-46ba-9f93-f6d8c06cc6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9260630f-fdd8-47bc-b958-a320415cbafe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174409d8-9b7e-4d1a-ae2d-5a42ae47155f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949a2924-799b-439f-92f6-faf31403dd41", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.163.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5004dd4-f99e-434e-a279-77b72688341d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05dc12d2-7ba3-4ead-97be-38d3e0dd36fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504bd29b-8c1d-48d4-b02d-c409a349fac0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90334329-3231-49f3-87fb-f3cf36360a03", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d81e2e-c16e-495e-b1cb-abc384ac3cc2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed62e0cc-c2b2-47b3-87b5-12e347e8ef85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.11.181.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691b131b-fd34-42f0-9c8a-060bac544aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.95.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acfb6e2f-783b-4e7a-a153-66e30f1b8818", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.160.194.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195d2503-a35e-4fdf-b044-b349832e28e6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.24.137.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafbad07-f2e5-484f-98de-96683551c08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb2f957-8780-4159-acb6-f6f16b766fb1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.78.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fcc11a-3cd2-417b-b4e3-d240db2bf06f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.76.55.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eda01f2-0828-4a2b-afc7-d31b48c0c0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751f60e1-fec6-4580-a535-23a570f66726", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.21.182.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31016da4-358e-4d36-87c6-992a4a16e18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.75.165.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b6e0cd-762c-4a21-905c-6fe479ad8a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.102.146.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5938815-d61a-4fed-997a-65993eb46e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.176.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aaef125-8940-4dc3-9ddd-63947ebc7cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.250.188.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55172862-b001-4b29-9bd0-971cb9464680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.135.119.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91aee9fa-a9e2-4730-86bc-6ee6bee9ce8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.233.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee841351-9689-4338-b195-d0743fabdc68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.233.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c72ab4-faac-46dd-9031-29f008cc2431", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901aac62-fce1-49da-9fe5-dd17f76a9718", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb197a31-9c8d-4ecf-8bad-74f68ff0e85d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244f80ef-be81-43d9-8d86-65b56112a57e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.169']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92931de7-8964-412e-a43f-a1b84c22174a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868f5b24-64b1-4287-b2e8-2d4a5feb59c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eece3779-00b0-43b4-851b-8aa2e16a41b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a299f2-57db-4a8c-82a3-77046c16a0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a77ef44-f899-45a8-8f61-63c1fb27b4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.79.229.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70ae43a-e313-498c-accf-3a10c8067b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.95.208.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b31fee-9721-47d1-b006-db36d3714f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.0.8.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac8fd65-e28f-4b8a-928b-09baa2c423d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.10.118.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e411e8a9-400c-4b3c-8d35-b65b257e5ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.11.4.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfb82e1-11c7-4bf4-a6ee-1b8dc46c40a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.130.29.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb74c8d-60b0-4047-882b-54ccb44da5a0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.228.10.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4e662b-c86a-48b4-b462-d75e9d199a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.229.218.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c1f2b5-b9c3-48e3-bc83-2152639ddba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.109.31.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a471a09a-8fd2-4791-92b7-3c9c3891ee05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.117.132.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d131be3-7293-4d9b-91bd-c2d05ac83006", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.118.59.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1be22e6-47b4-4ff0-91a2-3a86bc60c97a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.128.15.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f1d574-355c-4f91-8276-a29da0373fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.200.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7668b233-36bb-4570-89f3-ff47a2d789da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.222.168.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe4d38d-be54-4487-951b-14d8fc5b1d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.254.194.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f1e485-9504-477b-8d87-92c2e3d71c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.41.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6541a6-e0fa-48d2-8fdd-e308aa544e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.72.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc10c31-2608-4edd-b4a3-23e96ce97958", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.73.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0087e697-31f4-4219-a5df-08e997db034f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.92.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ace942f-5477-4687-a692-c1f770efba7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.206.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5c9144-0aaa-4b45-9e05-c3201e572330", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.184.245.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c83539-5701-4cde-ba6b-4f1d0fbe1cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.251.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e99291-8601-435b-98ad-57c1a9e2928c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b180c6f-a2c8-42fb-bb8c-04a76b248c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2328e0e3-7854-4472-b65b-88e3f8d0ab70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05406276-7b7a-437e-a12a-15494cd0a5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb79ec07-e203-40c0-81d5-3675afc6478f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509738d1-2cd9-4626-b94f-c375e20ff289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce5240f-6b15-4251-bb11-5ec2ec4dc5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ddee75-d397-49c0-b285-c87643c50df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c763c0d-bcec-4973-8f9b-5104b8281951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57096bb-5369-4aa7-b337-eb8474bb766f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0de5b07-e895-4de4-9254-222ecd99fd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4382fd0-56c7-484f-af83-00793a76dd8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410d84a1-88c6-45d7-8a5f-41371fac47fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005b1b39-a373-4fbe-b1ac-d16389e13a45", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.96.1.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c7c954-0c0b-4f1c-8dcf-89f1c519177d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.111.174.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d473f6f5-a530-4352-8990-31e8448e1601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.160.75.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f9ddac-da2e-496d-9941-14bba3886b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.126.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abe3c71-59e7-43f6-b930-194e6fbf1c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.98.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8d5e8e-c16f-40bd-9a9e-ce22c2d93cab", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.48.217.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b993939f-130b-41fc-9d10-8cb970ace036", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.53.29.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da14a7c1-870a-4f29-ab82-0a58b45ee44f", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.17.76.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f57e7e2-5f17-408b-ab4c-31503311aa2a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.21.25.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55712f1d-a5a2-4f2f-b7c6-66ae5426280a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.50.29.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987c511a-da5b-4d90-b4e5-f986833acc27", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.47.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51646640-c28a-4b57-b9f4-0bb56e583664", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a09:bac0:1000:c48::21f:e8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4deea2c0-d10c-40b3-a876-298209f53a6b", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a09:bac0:1000:c48::2e9:9c']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f7de2e-103a-4dac-913a-845388dc0a8d", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a09:bac5:a6f4:6e::b:2d0']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd3462e-09ef-46b5-adea-c6e04dc86e9b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.111.185.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa46246b-f3a7-420f-9dcf-132b28b3411e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdabf7b-26a6-42be-af45-4a926f015b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.220.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e94da9-79a4-440c-9398-94183449bb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfb7761-43f1-428c-b38e-a8b5ac677ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e651bb5b-b677-4e04-8b01-782b9236442d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.17.131.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12256a1-f23a-4367-b789-11a625acb596", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.225.222.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ef583c-b4f6-4003-a1d4-1e666adb7508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e065eaf-6cfe-4438-8793-29259baee785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.233.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c6f5ea-7fff-43ab-ba94-0ae4228b86b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5acbcd-b52c-414e-bcc0-1f6cefa521c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.85.201.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7508e4a1-2127-4ae7-846b-b0050bfaa44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.114.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa0fb2c-45a8-4701-a439-f96f1310589f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.87.186.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28cbe8ba-fb81-490a-b3ba-36ca3f3581df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.155.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64dc810-440a-441c-b199-2d73b4ee3089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.93.76.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8359732-4dbd-44ba-a8ee-ba0f31272b97", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.94.189.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3bfcbe6-136e-49c4-9af4-549195ca0d43", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.131.155.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e14125-d3b7-4f5e-8179-cb14fb0ef64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af17f0fc-65d2-4d4b-9377-ed211e2dc477", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22831990-8ff8-4cab-a52d-527f9c71aa5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e76e81-df54-4ddc-84fe-47ddb6b30320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13b1441-994c-4794-af4d-04fa77b31b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c3ede4-2a51-4a36-8528-98ce4c4644f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e53ab37-502f-4917-86df-41ccd5feac12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652d1698-e5c4-4d03-8889-68e2f5cc9dcf", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.190.16.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8396d2-15f2-455a-be57-7b111eeb37b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.202.60.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adca306-cffe-4fe9-8e6b-0f1ad0baac97", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.215.219.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefb7dd5-9ccf-4ef9-befc-09ee94b616c1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.223.7.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a17d5a-22ad-4294-9efa-c41c33eea0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.43.49.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f217f042-9f41-4883-b969-4b60fabacd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.43.51.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b50055c-3476-434a-9dd0-e0e97105d9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99655738-12d6-42f7-9e23-f0894e06490a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55150a56-c18f-45cb-8495-f0718733b232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d35fcfe-30d6-41de-a15e-6e873f1faaf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.184.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46116f44-f71d-4362-a83d-5d576970115e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.181.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f5d58b-3e0b-4f43-8f41-da7fc9960625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.236.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c611ed3-68cf-4ffa-bcca-e82f524c5653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.105.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b31a15-7913-4110-a65a-806087d182cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.111.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293b6a85-c713-4416-8ec8-93b60dc8b2d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.149.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0518fff5-c910-4602-ae66-af35069644a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.227.109']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8df21fe-020b-49a9-ba52-ed1a27edfed1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.100.248.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a39df6-0690-4ca2-9365-24ac3dc2d80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.1.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e2f650-e270-473f-8996-d48f95855ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.116.228.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdea9253-210c-409f-a708-837b029a7df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.126.195.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418f2427-f5c9-44e7-ab0b-d3c6352706af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.171.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7137a1c-4a24-436d-8a65-3386dcde710d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.13.8.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7282d519-1491-4fe7-af81-97b12a22e05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.218.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c8bae6-b1a9-4708-92f5-12587782cd83", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.122.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf246e7-6c29-4680-adac-1ac01f75e6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.18.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4791ad19-1a43-41a8-8f1c-c4ced7df01b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.38.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b73595-44d9-4b08-8080-e29bd64240f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.148.251.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8106051-3a0e-4610-a26f-7a125260937b", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.0.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544e5304-9404-41bd-aa4e-963f6c98dedc", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.149.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b2cfe6-1712-4d1e-8932-7b745e1530a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.22.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c6db45-1fe9-479c-9b12-ce506b5d6692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.254.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92583c5b-2f2a-4a95-82e3-87d6d5257b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.83.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50cfe04c-63ea-4a1b-be64-3ee12aba3f28", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.85.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fac8d59-ee34-44e5-b515-89120342c208", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.16.45.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67da3d7-1a5d-4373-9ceb-de492ca5a8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.185.248.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c33e2e-51ee-46d4-badb-42e39578d167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.186.172.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c182a9-e929-4c0c-a1cb-28b935250a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0f650a-03c6-4fc0-a3d3-108dd9de1fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.203.202.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb0f33d-c56b-4ba3-b990-53f12e3ea998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.203.242.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc27a49b-9eb3-46d7-83bf-2f58b60bb0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.205.139.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858f5725-941f-4dc2-a8b6-14c85c4a26a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.178.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b997d8d3-1ba6-4cc8-917b-77dc5d094015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.203.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a0b55c-62fe-436d-9075-24c36c85d82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.214.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1626f300-04fb-41a2-84e7-4dd843450b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.227.14.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d217df-59e9-4d7b-ba4e-4d6e85383287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.227.30.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9391d660-d5dc-4f36-9e26-ababda8d3bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742bf890-3705-42b9-8956-5983cc1ba7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.239.105.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f890a195-e5fa-42c0-bfb6-9dd6971a8e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.106.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e9bdb7-2b9e-47de-9218-1b509c5a378e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.217.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f000d38e-994f-4cea-9e11-a869ba529690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.161.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc644585-da09-497c-912f-7f4a65245597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.157.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064f6e2d-cf9e-4bc8-8d0f-86c86c51c495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.247.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bbffe84-ec48-4017-a472-62e6c4896be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.171.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e212fe-460a-4863-a983-2078e3766033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.61.108.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e76eb9-58bf-4a40-ad14-6a66550bd8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.175.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240cc1ea-6d3b-46df-a431-c731ffe163db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.188.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49044f10-d212-4eaf-8170-0768335be5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.223.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d927e547-7100-41e7-ad5f-eeccafe73124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.36.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a162c6-e73c-4f73-9ee3-49f83b6a9b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.90.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26de8401-6334-41c9-8a60-cdde63f93201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.7.219.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b2c1e8-cfd1-42cc-8995-076a3c7694a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.110.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd75060-cb66-47f0-9192-fb305e5d3557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.191.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6922cdba-ba96-40a6-a89e-bf94975d1afe", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.91.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a23d3f1-e5d4-451a-ba2e-a097b2b12e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.145.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89822c7-e0cc-4181-9dee-5197ebf1027f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.156.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3e9a69-df98-4e5e-8131-df9e87f923f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.169.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd4162a-98ee-4858-b3d6-f915b933aeac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.36.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0724ac52-b260-4aa6-93fd-a644045a17b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.15.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d62ea4d-c6a1-4600-abea-54599caeafa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.3.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2868856-5f19-4d19-84f8-624d51472ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.94.174.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95512aa-6413-445b-bf7b-548e9c8f55a0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.95.255.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41c18b7-6c51-4311-ba13-e4a2c5698768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.190.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205cfb9f-1913-40b4-96f9-3ee05eff2ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.254.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c46eb26-8948-49f2-a14c-ba53c65b85bd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.165.18.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8612b5fa-a989-42ba-803d-6dfc55efa6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52fe4b0d-fe00-42e7-a7f9-1b06ec5a8c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.188.63.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb2b07d-869d-46ee-97ee-3b298b382aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.208.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204931c6-25c6-4746-bb2d-ad46b7076eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.227.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204bda01-f0fe-439e-8d65-393d8e3aada9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.192.232.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1277b6-dee7-4fe2-9a39-b485ac549f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.200.133.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64d99bf-a43f-4d54-922a-709481721e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c544d707-757e-4823-b16e-3751c30faa9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fa67dc-1fe1-4f99-beec-08389b73f876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eaf9404-9bd7-4438-9e65-88c46307d364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375c5922-8226-42a9-bf1a-bd50c8f1458e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899fe0e3-5d42-4eb3-996a-d172044b54bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da9a40c-54a0-4387-a2f3-dd7a0fa91e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed79d66d-7e43-4e59-bbcf-5e584f87d37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2f8d09-25dc-4d05-9d47-cb12410e6d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e693a99-9617-4d6e-8924-1ef313837e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb9901f-6172-4539-a58e-19f0b9b62a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503f43e5-8c0b-4546-9a30-0c4e7be04b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db24c8b-06c4-46ad-a2a2-8096a4bfe7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef521a9-b9d0-46ee-b17e-26a3aa399577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.145']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ca3493-f538-434c-8b6e-93fd3e9d9332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0a2659-183e-4381-9c1d-e5d6cf4060ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67a1c19-39ca-446f-bcff-e95c01648a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e4e611-df83-4166-b258-9754972c0a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba07681-f864-4f5d-9fe8-b21ae6fd6f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ae0525-a1e1-4628-bd3a-d31abb6d86a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f33a84-e703-46cc-88d1-12b113f1861a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b22ccc5-0d17-49f3-8ba9-bd5c20ff9761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2fbae6-1337-48be-85f0-6f3e5986939a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589e41f1-8877-447a-8abe-ebbcb299a196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b36692-4927-4153-a51b-015e36f7e6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aab839d-7f81-40f7-9033-e9e1143022ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8811a07-5d1a-4c4f-b64a-a67ec06208b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f097e691-e98b-403f-9848-b45c396acb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b3b3b1-c49e-4892-9b38-97a322b794e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d01ef9-2da4-41b2-ad8c-aed0b41b406b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f35b961-0325-4702-ad8b-7b8f3dc6c313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c272b8-6a12-429a-9328-04fe2ce94ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07948ebc-0651-4862-a41e-26a6e9d9c929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9199d6-20f5-4eb5-ab60-09c9dd84edad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b582b3e-e021-4c59-8104-e344a9cc5db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd81044-9f1d-437a-a2ef-0eb057855a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708ce087-5d16-4a49-bc18-f26b2d010669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ff5e0b-534d-498f-ad61-87da624f4d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800191ad-2ac8-46ff-88e4-cb5323b83edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f9bdc2-a563-4520-9dbc-f7580c9db399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4d3bb4-459d-4ac5-aff6-df17fb1ba9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3fa5b8-07b8-499e-93ad-4104d1b50d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16915d3-acb6-4d63-aa1d-aab94cf17ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1c8ef1-5844-42eb-a18b-086ecfbca8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0576f28-1f74-42b2-913e-5e74204b6998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8571c7-bec0-404e-aff1-0807a07be817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889b5329-79aa-4260-813e-4d882f3bd414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6a1f36-29d7-4676-83eb-48cee36ddf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63d0e28-e749-4ab0-b6b1-a9a40c081269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042c0f69-2ca4-4a2d-8e32-25a1e23c204e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f569c0-a2db-4954-a035-322d8a8aa4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5f7db9-9d55-4859-be3f-58c23463220d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006ae895-d5b5-4ce0-b5eb-8268fb7dbeb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46662703-9ec9-4017-85e1-7cddc2f8dd53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79676fd2-f800-44a4-90bc-546bdd3f9f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d01d67-e98c-4e76-a9cb-c5e53507d243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c83e95-62e1-49a1-998e-7423742858d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bdb0553-1747-4842-83d6-2068639ee082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc8a6f4-12f5-4b50-a434-9df1d8a62415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e12400-7ec1-4ce0-a360-293fadf93ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77a70c6-64bf-4482-a638-c73e1f09b82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a578fb-b5c9-41ce-97f7-1cb4dcd94d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2810f22-1381-454a-a4a2-8b49a9ac0c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c77f430-5cb3-458e-97c8-3465cc17694b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58139309-1b0c-45b0-918e-16b39bbba904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b65470b-e077-4a2e-9a99-780b7e0ffc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95533bac-30e0-4a12-b761-e29c2c9b72b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6b4834-a962-472a-9f00-1ba30d5769b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c660eb4d-8feb-400a-96c8-1e8d549cf9e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163a5ace-3ff2-4a2e-aad8-abf1268a7119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe2d93a-bebe-4ff6-9cd3-664fe4c36355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc5277c-c424-42b4-8c0d-3f03be3fb00b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecba9e0-036f-4c82-8a24-5431c0fdcfda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88af8739-1eda-4121-9d18-e4426cf2405f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99cc541-d122-40f7-aad8-87ba6c67ffb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5363880-a224-4d6a-895e-5a0de694ad8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d32076-64a2-4403-9bf9-15fc3c8f35f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70456c31-937a-494a-88ad-0062c6f717c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d8d5f7-34a1-4f26-8f3b-f39385151b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ed0952-8678-4ba4-ba4c-5ea531dff21e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a160e0-5897-45b0-8e72-271ae4660ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f580faf-4ab5-4e5b-a23a-33c5f01d12b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fead75c7-77a3-4469-99a5-ff8d7e37f19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af39f5ee-278b-4f9c-909f-e1e40a5d2a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.46']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8530fa-78b9-4844-a0cd-c0af996efe78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4df160f-c0d3-4949-9d99-8cd0d4952c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8d52e9-8383-4caa-b9b6-3ea74bd65801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafbf1a3-e41d-4691-90ca-81bf2cfaf700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27129ea3-758d-4571-acd9-dcd73ae0b82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cd380c-7950-4c39-a6fc-3cdf0fc3f34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eed8660-2ebe-4ec3-8599-c2fface4cd73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d4a522-b5d2-403c-8dc5-70ff14e86a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.192.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be73ad89-dc9b-4647-b4e1-8614f367d378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.203.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0529e50a-8380-46ea-a291-ac9e43551bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.45.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c763da-2a0d-466d-b710-a9cfeda0de36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.48.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8297beed-03c9-425a-bb28-2117fd5d719d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.221.43.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd66106-c098-4b92-85b8-acc4ec2eef53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.34.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e21ebe-c8aa-4183-858a-56f2ac4c82f6", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.69.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb0ecd8-9c9d-41ca-ac1f-7f55543af170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.97.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a73796d-f1e1-4e83-af0b-7e1cc4b3447f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.222.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac6fcca-f661-4df8-b510-713ba88e38b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.94.53.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80279ee1-3faa-49ac-8380-e2c61b7a6e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4d1569-68e3-45d2-bd2f-e2dbdbb6408d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1f1c7c-95d8-46b2-a1fd-080ce4a11ad7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.155.132.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d665da-7def-4f81-845d-93d703682f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.250.220.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b447edd2-7d19-43a8-adb9-89ebecaf85c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.32.3.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9b7bf1-2942-4fc1-9153-21f8c8544e6d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.64.68.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f7b9a9-8c68-4aed-a216-ee468d193fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.71.184.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de17f412-377c-4a2a-a092-f2d1c990e9df", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.93.249.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314d93f6-7344-4694-83be-c96a8b94095c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.95.109.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a71e65-d02f-4789-bd05-68e14d237bfe", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.103.112.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535e9a83-2352-422d-b184-d1067458bd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.120.162.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f672e3-bef9-4e7e-9a03-4c06cb062a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.120.213.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d595662-0856-4fd0-8949-53cc547f6550", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.140.223.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7145621-782e-4890-8f8f-4869625ef210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.150.201.46']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7eb0ab-a944-4761-9176-e4603af29337", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.195.155.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bb3518-d830-409c-973a-91e0aac89659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.221.195.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6400af15-a44c-484b-ab74-8599c26998c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.247.211.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e298abdf-5105-4ed2-807b-0eacadf8bfc9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.52.188.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff0a8fe-9ab9-4d30-8ed3-df07178a4ea6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.54.214.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9851b49-ee48-4785-ac1a-6e1530353a53", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.57.235.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d00e2ec-d5dc-4ecb-ba39-afbec3435f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.72.47.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8297dad7-6678-4db6-807e-aa9b8542e70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.79.166.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7e5000-bfd5-4e99-bbba-9cc33808f6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.137.11.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33504a95-3816-45a9-ba36-9c78992c07f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.14.238.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf244fd9-6859-46fd-a1a3-46235035166d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.159.57.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63544f88-abc8-4b21-9870-86a2e7da91da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028775e1-9b64-459d-83ee-1462f9baa48b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.242.140.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d490ec9a-faf6-4c08-a489-6dfb0c94cb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.244.215.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e59300d-811a-4581-8f6b-5afe4592010b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.25.35.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18a07c6-96ec-4d61-83c9-4e04ecf5e0c4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.25.35.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3be91eb-eded-4b3c-8d09-8a408f70edf1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.253.183.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5f0b4a-3159-46ca-8eaf-ee2e2cfdfb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.43.208.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f1d079-fdce-4982-bb05-6c3df32cbbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.136.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3570be-0f09-4142-aa8f-cda72dd483af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.244.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78f627b-6497-4c21-80ce-1387515e1672", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.156.194.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c1a174-44f4-4e52-b634-f4af26e5532c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.191.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7138001-213a-45db-ab96-b624c573555d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.154.160.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257c3ed2-c32b-4420-a609-16a68c417106", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.184.121.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4c8c0d-b1ef-47cd-949d-de741d356495", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.223.226.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51edae83-36eb-41cf-bd7a-eabada16d836", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.223.71.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd010572-a799-4e87-ae1d-0a0f7855e811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.228.106.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d39ab7a-5577-4801-ac60-5ae2477dcfe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.112.68.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2076a0db-40b9-4d42-aa2f-5129243501c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.116.109.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e34127-d450-4e4a-98f2-93788ded0d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.41.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3f82df-e55c-4b94-8bf0-1a7187f2c857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71baa5b-e562-45c1-b0e7-28d043e37022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.127.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5718e7-1225-4111-8830-d8d939721f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb98b5c-95c0-4aee-b907-f37888c08565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148bb3df-b918-48c1-9ac8-6422b2914caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88e315c-67cd-417c-85eb-00e185933f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c695a8-f7c0-4515-b3b4-cf52f8f0628a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab9b1b9-8e55-4724-ae73-19137097bdd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ada0ba3-2b58-471b-8ea3-1cdf263972ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad2ef03-6764-4e15-8894-841c6f896a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb7e308-3e9f-4b9b-995d-5751927c53f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbc2fe2-c774-4752-8400-7ca3e0830804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee99cd6-a3b9-44c2-93dd-e401fc396a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268cdf7f-eeac-4244-bc49-26b440a0f77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70701b4f-5257-4559-ba34-ad1ba3b1c683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.136.112.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527fc823-c359-4310-95a8-c1bbd82db82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3796f1-0a1c-497b-b5d0-4d8bbceb1ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.117.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205966c1-ec9e-40c8-bf1c-29ecdd1b48e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61ebf2e-adf2-4db2-8716-da60c27ba960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac24009-cbc5-446f-a524-3c740d068751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.83.88.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb32d787-df32-4cf5-9bcc-aee9942dbf76", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.140.19.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1492ccd2-8575-4bc9-aba0-6790b24f4a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.224.35.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2c663c-7d25-4609-a25f-d7f4c80b6d6d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.250.98.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e471dd-3eaa-4202-8447-f2ef834a4fe8", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.33.55.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c75422-6718-4aec-bf90-be53c86054ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.63.62.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad05448-9993-4dd6-b507-6651abf606b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.65.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ae518a-7c56-4853-bfef-aaeed6b38f76", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.51.37.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c12e20-1e94-45e2-b810-7cca1a88e10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.81.216.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a110fb2-e9d9-416a-b72a-968acca031ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.96.17.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f07ff3c-3976-4127-994a-4f7a3892e68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.242.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7cce18a-80a4-4da3-8307-578970c433b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.72.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b23ad1-60e4-41c3-8e7c-219da9d5a27a", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.187.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ffbab6-23c4-4454-a4c6-6eccf429a916", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.220.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e62eea9-0d39-4189-948d-22ff44ad3ee7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.253.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bbfe83-91cb-4ded-98af-cfe33da1b0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7ebdd2-6741-44db-9c1d-e2adfcd218fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.23.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35dd6414-be60-48dd-a840-56781d9950fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.148.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c331b648-0366-424f-a4a9-77dfe275839e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.43.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b13638b-7ee1-4d67-9c42-8d792ff3a65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.145.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c46e5d-0df3-4630-bb3b-9d14ac2ccec4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.149.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0740e70b-381d-4380-8e76-dbd3b1ed0d7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.170.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047fa63f-0bac-4563-b9de-5aac7a23d127", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.175.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa64463a-65d6-4c65-ba31-d4ef289dd471", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.22.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e04f17e-d309-43b1-bfd1-dc78dab1e47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.67.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190df1f8-fa67-4fc0-8839-cbdd841d4e0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.143.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412a79f2-f3df-40ee-8377-219891d504df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.152.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a08d63-17e8-44ac-b66e-9d2be8e2d6bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7a79e5-4414-4d65-97c5-6dc005716166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44071a87-e746-4c89-928a-90fd3b38fb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.124.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5abf13-6b21-415c-8377-0ebc42d51f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbfecf5-2527-41c5-9c1d-5d6faeea8fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.198.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849845f4-9a5d-425c-bcad-08c9bcc2808c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.136.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4250fdfb-2770-43b0-9727-e89e611112ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.136.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2da8d6-cef1-4776-9bcd-0eee0814af8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.232.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc507895-0595-40c3-ace9-7e6709721353", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.132.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4377ef-84d3-4e20-b278-117f795a32a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a13fa08-45e1-4994-9f34-d6a435bb42de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256bcf17-a991-404d-9785-3c5ef9b6a776", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0411e21d-f6c3-48aa-9b94-458f7f00f8f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453589d8-5659-4ec7-bb74-145d32fdda36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.0.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac85c9f-e4c2-4085-870d-df7d0806f696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edacb159-a350-45e5-88be-5ea6859b67c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3c079e-bb59-4bd7-b49c-f212d8a4b9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467d6d5c-6adc-4d77-b5d6-628e28f65e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2769fd0f-ef8a-40a1-9d69-3aa0bf23e946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.193.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0cfa72-5a35-4baa-92ec-2bee565917a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.64.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29971b40-76dd-4572-a14f-6a18231278a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.251.177.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f995961a-94ff-407c-9560-671c629d6b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.163.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbf055a-5894-48d2-a948-bd12b7c05401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.18.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107e2f15-342a-4bf6-88e2-c7b19274a498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.7.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74584fe2-f610-445c-be5f-77ec0406ae51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.203.114.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594125d1-51bc-4aaa-bba3-4922dd243060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.204.28.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7a8cab-9e72-483d-8475-fb1005e1869d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.145.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb73cbf0-ee6c-4c8f-9bb7-d62ed6c5e7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.188.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f667847a-e510-4f16-adec-e1e56f49d4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.188.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f88788-5cd0-41b1-91bd-414309f146a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.225.140.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1529cc32-6535-4960-8c89-d32f44127790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.227.45.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399ae0cd-cda5-455a-a327-798b11a5c7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.255.56.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a4f8c6-1f96-4eb9-add4-b6303f4489b0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.113.226.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46701bd8-8fd1-476d-9cf6-59e9ce5de99e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.119.84.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564abe57-d1a9-419f-bfdc-cb534b9233ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.126.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98373bc0-9c57-4503-a123-8426d0a651d7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.216.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307fca00-1c92-4d35-9a1e-74f5f41de681", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.1.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243277a6-7573-4372-b30d-3b0b13a98e23", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.108.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d6cdab-5d80-4560-95e2-6e44ab09f225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.46.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f495f1-ecce-4f13-9ac0-bdec2fdf7950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354c8ba2-b496-4fdb-8a28-0b02e345467e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7d1695-8b91-48d1-ae29-91b587e76c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d4ba12-75f5-4815-8ccb-949d8f522aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39bc86cd-93bb-4357-8517-dbdaab0e7738", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.204.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cb216c-de82-438f-adfc-5ee1cd9f7d06", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.136.255.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ef23f2-fcc5-4926-9b83-9a86bc1ca8d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84155afa-a81f-4693-87ea-056f443dfdb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.145']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf7fd60-1a05-4e52-8bda-7f8ba0a9e501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b71318-724b-4190-9569-c61c26ad33a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0079421b-7efe-4ca4-ba25-3db2b34b3460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a928acc-3a47-4432-ab5a-db3fce326fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d750b75-a341-406d-85c9-27da486ac621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d758f9a-d88b-4ad0-a591-7e185ef664d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9174343b-aa4c-46ce-a776-8b20a68f963d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.198.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062d855f-4798-4df5-8f76-480373ad9aba", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.199.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3170d7a-39f8-484c-af49-9ee23585e244", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.98.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ac8d04-8a84-44aa-a9ff-1fb0005179ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.144.220.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d75b13-dc74-4f9d-99de-dd0884ba30a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.146.252.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702fd9b0-a014-4ae1-a2a3-0d5e6542e9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4997ee33-54cc-4c15-98ef-ef4d5fb9d6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c480c9-bdf2-4e2b-84d6-1a627b2b5f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b435fcef-76fa-4759-acfe-4af06d0801a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1798219b-9215-4d0a-8914-cafe972aa159", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feabc199-a59f-466b-baf9-5e06e0d7ec4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1363c4f-6861-47f6-9d34-abac67f113b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b83ae4a-0399-4378-9c05-4d9b8b542816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ab843a-2dc2-41ac-8656-968cedb55916", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03541651-de40-4e05-8817-c52d5414b7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbb8349-45f8-4d33-9991-934ea0eea568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8915d8-3690-44a2-ba15-c589b90e06fd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a52ed0d-54dd-4219-a8aa-88d7b5c767ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f65c44-a817-42f7-ac39-c23c692119d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e90b683-d125-426a-990d-76505ac256d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7acea5b-0756-4722-bbc3-a3c30ee908a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0b15ec-3063-45a7-92e6-70e667f57e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6bed45-14fe-4b00-99b4-4b8be0287e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b0ed68-ff65-42cc-ad2b-08b36ca997c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6304147f-c955-4079-ad00-9d2d0f63f7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef79e638-81b5-4bf8-9b9f-510923e35636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ff1ad5-da25-4a60-911b-0e7bf9f32950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a79874b-8e2e-4702-b6bd-e8bb3f87ff68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db42848d-19b2-4758-952e-94c9b941e555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8b9b85-8d4d-4876-a476-e492d4a44a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5dabe4-406b-4c6b-a356-360e5bfc8053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56be980-48cb-4d91-a0a2-03056ff23b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae4331a-0968-4474-95c6-2845ceb94c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c9e275-8f34-426e-afa9-f20b40cc1306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91ce041-bbf5-4d98-a291-d20fa501476f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab53d928-0dd9-4cfb-8fad-03458f7daa6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab41058-f6af-426e-b686-3eb624af7009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739a57a6-0b5b-4afc-964b-91f09f853bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38707d80-4ae9-4ccb-b34b-8c4e1b3d4ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ea0fc8-2e6c-41b8-bbf1-216babf40659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7e93e4-71d5-4a52-9b5a-4cc0d4cb2d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd4f1f8-0729-4408-9fe6-0e0da7b97d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.131.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564c65d1-b561-4120-ad15-e8478db7d826", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.31.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c26fcd-7acb-4cb2-ad3b-5422af6824b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff2172a-d7d8-40f0-8349-c5ce81ec2302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffbc490-769a-4620-bb0a-984d6330db5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2dbd0f-38e9-4b12-a04c-ed211d4ea638", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56fa4d6-b9cc-4a02-811a-e184941cb15c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.159.75.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade13f0f-19b1-471d-8be9-4e1390c84b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.160.98.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8a7891-042d-448a-9e20-e93284f253c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.164.245.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43fa457-9057-4d38-9254-77310a1dbf59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.170.206.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af4f6e0-c131-4a57-ad86-32e28189e419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.105.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200cb2b3-acb3-481f-bdea-842154f5cf9b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.127.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96178ad4-c7e2-4810-aa87-2c49adf7e1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.242.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c38a2f-3d62-4b57-b615-69c4209df4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eec5488-e20e-45c4-a0ba-523d49d72939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8afaa3-270a-40c5-bc11-9c324ff6221d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c19634b-7e5f-45b8-bd5d-f30946ab52a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccd67be-6e5e-4718-a1f4-6925353565ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c59f534-fee3-44d7-b5de-baed8a22d3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d01c045-b8b8-4486-b49d-4f094133ffc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78874424-07c9-41ca-81b6-a079dc1f82ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad46182-5d79-44ff-b9cc-d5c6196f452e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7017ac1e-205f-411c-a2b8-fcff427bb486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.94.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8052547-0a00-4915-97da-0c67b8a1cc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9aca2c-7bfc-4fb3-9b13-10d10171325c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1869077e-7795-4822-bada-d321a20ecd52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa975b1-cd04-4b8f-9a7a-6cb00eae4f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabe59f5-6bf0-4149-97f8-f292a89b6ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.240']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41a5b76-fc86-48c7-90b8-6ce48b38e78b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d0638e-4873-4877-94ff-e619cb08390b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e10d7e-b09e-4bf5-91d6-b82b20a3d886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34081c9-ec17-413c-ad67-71e8ab6da376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.240']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f043859-804f-416f-ae2f-a53c8c0b7093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21856623-3b51-4fb0-89ae-374d16b57250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8b8ec5-0b6d-4d51-a095-cbc9d7ab1338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48643433-12f2-491c-8323-0a11e96877f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c59b111-a6f2-422e-813d-319c50227a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd7ce8d-289f-41db-809c-b1b5f1b6c973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc86bd54-3859-4785-93f1-effdf95c1cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb04dd3-0b9b-43db-b5fc-1259c02d9fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.207.196.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbb40d4-a5af-4e27-b3e7-4f59f0de7b31", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.224.218.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431c5cca-2f33-4a33-bb0b-2e5bd1c07adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba2fe66-872b-4eec-8c9a-9db7390cf89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3aa09d3-8834-4c41-bd28-c7fa54ea5b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.237.106.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320f929f-e401-478d-b387-70d30fa0dd76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.240.157.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4efb16-6dd1-48b4-bd25-e6d2d67fc21c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.245.216.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c93b841-fed8-4d7b-a6f5-bfc6d0248b7d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.111.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3349e3-8767-4365-a745-a6585dd0c3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7595c6a1-7552-4ea2-b509-9913f8c6607f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.245.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b04ba2-49c9-48d0-bbe0-14cb20a4bd1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad670c19-b2a1-4302-aa2d-0bf81343b10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee60e4a-9dd5-4790-8682-11259bbf67fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb97f48-06ee-4418-8d25-fb228f1be100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d18bbf-91c8-41e7-98f1-3acfad746d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.13.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30167e03-1f9c-455d-b557-4e337f25dbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2ae888-71ec-4efd-aae2-48c74ba6a8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf80126-1f31-4f9d-9b96-d85b6da65722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca9998f-9ef3-4633-80d3-7e8d8fea40c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c6457e-a2f4-4ca6-abfb-4e810cb0f3bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71ff0ea-7fcb-4abc-a8c9-299b9dc7ce14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0aa79b-70f2-42fd-9883-5aebc89a6750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b976b4-e4a4-4571-85be-62107b7123d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c126515-f7d8-48f2-8941-ea7b3beaf385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e02d8be-1761-494e-a733-5a366e7ae04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3e7a1b-3035-4dd6-902e-6768874ec870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d0fd71-dde2-4b17-98fe-d97956ee6883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b302087-02d2-4fe9-a8f3-2f1e82433f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4345cb05-4f44-42b4-8015-dde5790d3ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fe3d6f-e7bb-4e82-be45-877bf429c3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947e4188-c646-4b54-9e39-61f0b1b18f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09edcd6a-6cc3-4a7c-a37b-cee72be35b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562931cc-661b-45e6-aad7-120159281124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315b681a-4fc4-4b14-bd94-2b2bbe3a4b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c436e625-bd72-42a9-bc70-f509601aeab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b324ea62-9438-4cb5-b17a-cce41e13df52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621ec3dd-ebe8-4951-ba50-b7775e3d8ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207f5ff5-e77e-470e-a63a-d5001e7c497f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c446ff-5e55-4d2f-997d-9d203f97b6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0411d216-4521-4421-9bc2-5dadcee6f87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd4fe49-3166-4c85-8b55-06fcd954c98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4c924e-d1b0-4758-905d-13500dbc6a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912ae4f4-73cc-4442-bbd1-1a3a91d81c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493e3186-e0e6-4aa5-990d-c1749bfa5be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b56f5ac-bf0c-4ac5-9f56-bdb948ccd839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc427497-57c7-4308-a602-78c97790aa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5b26f7-4ef7-4ef7-b415-3fafec72d540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.134.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3942a7-f0fa-4a8b-bb7b-97242b8da538", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.150.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c47f32-311e-49f9-b969-61ecb32a5af1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.150.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff733df-1955-45ba-ab54-774189c1913d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c8bec1-67e1-418d-9fad-5dce7e88fb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9b02f5-6f3b-4059-8e08-5a8459e56366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c23bbc-e5c2-4cd6-905b-3d40a0506410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a16ce64-4506-4912-8fa4-e82bd626813e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87429f5e-9b08-40d9-8577-e3001b09a4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7ee8f3-b325-48f8-b300-ee3d5842173b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.128.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1ef3fa-e49e-49d6-a371-02d23ca6cb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950a38f0-35bf-4d13-ac7e-b909053b295c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f8e2c3-b286-4462-818d-cd36c0b47e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ca0e51-ced0-4386-a75d-d8846f77adc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4cb1df-17b6-454c-80ac-5b9c80d15b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c0f548-1625-476e-85e0-41f6c8c8a847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75552e7d-8665-48c6-84db-6f19c4958692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c24c014-2a17-4ba6-8818-f872588b0fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e6a67f-deeb-48c3-912b-7a4e5a794185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc285555-63ef-456a-88a1-4b1a4133563c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e1dc14-75dd-4539-b140-38af360de1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7f6b32-164c-4c1f-8a24-b78bb9960256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd94648f-2312-458b-9c8e-d0f0c0f892a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1910b87-2fe2-4c79-b251-be2f8f27164a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21da07c-c0ab-4a72-9bcd-98f7e8bb74e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b04533-a2f9-4e17-bf80-976abda1446a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583061aa-575b-4a5b-9847-dfb8f7940928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47bbc3dc-6a81-44ff-a72a-652581e9e54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dbd9c6-ecbd-49a7-b82e-cd69bcbecc04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cc4dec-7b37-4d38-8cad-38f7107e9875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aab2fca-a619-460a-9778-026f421f4472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4fa92b-b634-4cfd-9f69-5ff5f140de5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b47faea-549b-4a6d-a8aa-8602dd472682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a680bea5-946d-4904-bf58-a2908f19f10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d104f4-ec0a-4a90-a0a9-d8f9d0e8c2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbb84f2-ed01-461c-9285-28b3a51701da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0092330a-a852-4467-b961-f9606ef7662b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a28528-adfe-4551-bfb2-858501f240cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a41afec-f534-4562-807a-616bd18885af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3413a007-06a7-409a-be3a-5a55a934b868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c5a359-8aa9-4929-99af-2aa8a724b0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d0bdf5-df18-4f31-bc23-0d9b0fe0dc36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bcf48fa-409a-4d6d-80d2-7783db6ac1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32252a4a-62fc-4f71-90b5-04f7f722f422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f194ab6c-7956-471a-bcf7-15ca5d5dd072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e2ae0d-45cf-4493-b9ee-6a7d2a4804c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2599ae-9420-4c20-90c9-f47b78901a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1853aa5-4d7c-4a52-81fd-9d160ab21289", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.84.227.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835cb745-123b-41c5-a162-9991d8fa432b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a6da40-800b-4ef0-a102-e00ace10f4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa74925-1a46-4ee4-8a1d-9461507d4f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95836bf-c821-4911-bb68-d77c42e40239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.94.31.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a16078f-8004-4a47-847f-cd71b3141472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.132.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af31a699-4165-431d-bb60-fbda67441b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.147.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67cacb2-b3e4-4c00-8ef9-cb2c4a398d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861aa570-c231-4d19-ab2e-7b9c2faff78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e73c7c5-5dcc-4170-a750-7dfec94dcc37", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.116.144.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e1f653-d170-4640-9325-16c6a4f7d378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1459ad-4806-4b9d-ad90-b5f0ddebfed4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.61.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3d767c-1cd1-4492-aa07-68c0e448b06a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf84574-602d-4fe0-8a6b-d05280048985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d3d4ce-270c-4a41-bf23-f983592c91e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d9bec7-be64-4c22-993e-a885f48da954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80c3fc7-d656-4dd4-951f-8683b74956fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb34de1-0f38-455b-a30b-edf09b22def0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.185.177.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c258ba43-da38-4b78-b4b7-3e3a32679518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13934951-0c73-4aa3-8b5b-339771cb9ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65e4efd-2c0f-446d-954f-f9ecd7e12d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99fb206-aa67-407c-8d6b-785eae2fde02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9c6c38-45cd-4d06-ae98-8dd684f8536a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c08194-fe75-44c9-8531-833c6f0ddbe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d14b10-2369-4822-ae9c-4e50ddd53de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe86166d-c901-4892-8290-783bdc443e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9d9121-71f1-43a6-acf3-078a36bff3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7724aa2a-0be1-440f-841d-a7af4d63cf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fb9e12-f911-4047-bf3f-0ceb1ad7ffae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588c61bf-ddd1-414a-a677-63db17796f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.30.165.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650f0b28-9a5c-4ea6-a6a0-6a712e1f90f5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.32.102.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86963bee-68db-4b5f-a44f-fa0126707de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.33.50.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37cf19d6-01ff-45c3-b6a2-613089d9ccd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.36.123.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb715f1-5eb1-49a5-a1fc-f322448644e2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.4.253.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abef793-8755-47ea-a97f-6c64262168df", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.42.92.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836ed2af-d8f5-46c1-acf0-69f5c2515607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.112.110.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571f6371-fc78-4162-9af3-2edbcf2bbc8c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4820601-97ce-490e-919c-64b21678f41e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bda80d-8b63-45a5-9b6b-9da840614471", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53edf4a7-51e5-4b18-8bcb-356a196b3085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.162.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36821fcc-349e-4906-b0af-79776dd8330c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.194.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a94fbfd-ba3e-4d2e-bfa0-7bb75bee35c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.124.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616c5cda-e90b-4065-aa4e-ad419b9be95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.187.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480075f5-5bc8-4d1e-928e-e6921d6d7fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9882e84-3ac7-49c0-a40f-0d8d5949e967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.130.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2891ab3f-616f-452d-bd7b-c87154057afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.131.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98959047-7ef7-41bd-b04b-9b5a9bd740bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.131.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb11a1b2-d49b-47c5-8329-07edff516c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6535fbac-21db-4f24-b0dd-f488c435bfd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.164']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c517d2b-6f5f-4cb2-8343-fb562db7d120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10b0cc8-3467-49a3-b5c2-d597dc666a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dae56f2-697f-452f-b558-fd943500ce6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.30.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c785f5-533b-40a8-88e9-cbc2b2184c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0d314d-331e-4417-8ec4-f7abc986f262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.96.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9c82f1-41bd-4ddd-9779-82fe4d35121b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.11.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed12328-4f52-4f1a-8cd7-b23be2e553e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8f983c-236b-4f58-b3fc-d13700d72a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b064c49e-7080-44a8-95bb-4939b36a58a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.130.240']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321414a0-636d-4a82-b0ea-41b3a11766f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.132.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f65575a-1b02-4a4b-a4f2-ad68970ae590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.137.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa32181-7203-47be-aa4a-ddaf364c36fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.140.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1e068d-fb9b-46ce-ad61-f1d6faa08977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.141.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54873a7-3f6b-4714-8d32-7bb683554cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.145.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c9a9c4-0560-4470-b56a-2927a43fc188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.152.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15ee66f-86fb-4d7e-bd52-6c366c93798c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ac939d-81d5-48b6-8a4b-8030ef51f723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.171.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adda078d-2632-47ad-9a2c-9661635aa0c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7112d8-b8c6-4e0d-99dc-9eb1ee39f78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.175.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7277a317-6fb5-4f23-9958-e2bfa4cf2146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.175.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bc4fe4-a1ed-423d-92c9-113c5f9a9855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.186.255']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337a67a3-95c8-4257-8e41-8ff68d1723f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.188.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e50bcd5-2382-4478-8c5c-0da2232a4f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.194.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654e4e02-badd-44a2-b122-2e74b9a7b98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52eee1e-547c-41ca-b2c2-a525b6a1c9ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.40.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56161c04-9615-4872-872f-dfe1e05a4c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.44.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c782a4-8eaa-4434-a5ea-49944ae11bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.47.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0872416c-acad-4706-9777-5c7c8cd4a1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c53ed2-37ea-4928-930e-a1b7d659b793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.59.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0926f48c-faa0-42b2-b3e3-60eb690cf913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.80.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f067414e-5d86-425b-90f6-0b25e63b7965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6483c8c5-66d0-4f89-8cd5-685b707daba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b43c36c-81cd-4697-bc1d-adc8bfa56a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6b0f5b-3420-4dcb-8bff-0b004e05864f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a226039d-70db-43cf-8d3d-31c09d234be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153bf706-fd89-4704-b408-5a36635dff30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa87119-fc75-4d6a-bc02-c89c4a6ca1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.107.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48401fb7-290c-4bbe-8424-1ae38911a55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.111.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b577d9-1c2b-4d6e-b4bd-63608ed90477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9091d138-9794-41da-acd8-8d322376f9dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df30473-4502-4293-9ff8-9beade3e22e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788da45a-119b-4d30-b881-983fc553668d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee9a84f-674b-4bfd-8246-c997d01fc6df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aeece78-9d87-49ee-913e-84b6f201cc1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37457696-262b-4cb9-9f9b-72a2913acd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac73904-dc12-4de6-b5f1-5757ea2a0ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.123.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87318a0e-1e7c-4f86-bd98-74adeec78c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e1ffb9-a4fd-4113-8df7-743578803327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.140.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10256c87-e243-466e-a326-5719b7530241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.172.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f743f7-23a1-4953-994a-bc7d5a214a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.174.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf78429-27cd-4c2e-8418-21ec7d4a0316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.189.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c319347b-826a-4275-b174-fe9dd96f5ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.20.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ee0be0-f766-49b6-974b-6c0289bfb9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acff01a8-ab86-46a3-9335-c7bfcdf44791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baacb116-1e9c-4449-9c56-9dcc691de398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cc7b89-313a-41c7-b8a4-fdc5de21eab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63db703-c7bf-445a-ba88-f3f281a7df9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb7c5ea-2c88-4a39-96dc-7947a8f5f3e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b73c57-f158-4dfd-88cb-8439c6e7e02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.38.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6da640-7447-4af8-b4cf-4cd7743e7b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37497d18-627e-4a49-a7aa-79b9296eac2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.44.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8b01ba-f110-467b-bb06-f5eb14fbfac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfad89eb-33a2-410a-b8a3-efb45c575111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.6.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bccc5b7e-227d-4b46-bb09-4def09a82971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.67.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f986995-c4d7-4ebf-9a37-accde99100d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad7e562-1474-480d-880d-03fc5c82c871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.70.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519f9a8a-3143-4002-b728-0214b84a7b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.72.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2ac1ee-10e5-4497-bb66-b3e48e7e59d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398201d6-5778-4270-a82a-872bf976373d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c7f21f-38c1-4d54-89f8-e19be6d67463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.75.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30369f81-a3a6-4b18-b4b6-8ba7859a54e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.83.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba9454d-35b0-48c4-991d-e705832da7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.86.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3fe342-d2c3-4254-8326-5049365be9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.88.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81970381-224c-49a2-8546-b6d4bee867a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.95.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8bd914-6dee-4c8c-a4a0-b86c68250422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.252.16.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab62b82d-a70c-4abb-86b9-147a0b53bc9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.218.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0a6216-1bda-4e26-849f-92e7cd35ce24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b914ea5a-57db-44d4-b77e-64407598e875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.122.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8cd69eb-921c-4102-9b7f-e79972e14120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.131.109']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fd4d0b-15b2-440c-93dd-9e1bd9d3606c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb83065-a04a-45fb-89bc-0836adf5efeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b31b8b0-ec0c-482a-9050-9f3624c1dc67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.149.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed6ff7e-d773-40e6-98e6-69299a2678e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.15.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5370e0f8-b3a3-4370-a71d-59a22285a284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db6d657-4e1e-44d3-b3e3-5ac621a7a304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.155.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51ba00a-f8d9-4298-bdd0-d818f79f0e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17cd77ea-3813-43fd-bac0-9dfb2127743b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.159.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000051bc-d6cd-4c1b-8ff1-b392a275d725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.169.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af29cc8a-df18-4081-8439-3d3b24ac8d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.171.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d2a3f3-bff0-441d-b6ee-6c636bcf230a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca04c26-19b7-4abf-a82e-78a598db3bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.176.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa29687-3475-47cf-96c0-3d35ca896753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aec390a-8fe2-467f-87b2-db0b5b2f34da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.178.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6ea242-1213-426c-87a3-b9a5449e23a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.179.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626ad271-71fc-40be-8a24-c05829b79690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea00295-d00d-49c2-83fc-a8f19e858feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.196.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b736adfb-ee1b-44c3-8f1d-319e859e992e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.207.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8510ce0-0c8a-4c2b-8de4-562ac532675d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.213.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ab3fe4-7d29-491b-8640-fc841e899a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.214.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a949b1-ac92-4fa8-8b3c-b2610b1a7002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.234.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2758e016-3cae-4ec2-ab30-e3f565fdab33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.238.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bf24bd-2dc8-4481-8db5-3ec9e11dd1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.239.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d693e48-754f-42ed-a093-dfcbfeaac405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.24.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798b510b-e8ef-47a1-9e23-520e6059fa1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.240.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531e4be8-a2d0-405b-baa8-af6983e8345b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.251.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27655ee4-fcc2-4f79-b905-42260da5756f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73a471e-dd4a-4f27-8734-6c793d89fda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.255.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0db0132-3716-4356-9a7c-bef7a3aafb31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.255.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777004aa-ea2a-4a84-a2ca-ebb32cabc047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337ad7f4-44b0-4a1e-a62b-24e8200a7e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.69.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52757723-569f-4e51-a5bd-06550c0c8a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3a717d-8c51-44a0-8ba0-c76a284a3e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.90.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51699d74-c095-4b83-81ce-d4208dbe2f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.92.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8452ca7f-c2ef-4cd9-b90d-3db120c3e675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.94.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5384c94b-724b-4336-b158-0c7ba735132d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.45.19.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0f7ec0-6f3d-4c98-abd5-bb5239711f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.33.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c339839b-f330-47f2-afb1-94de4269d53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.56.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05dfffe7-7a89-48ce-b13d-5f1b422b7528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.213.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96f5130-d416-414c-808e-d456cf82b6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7912f5-9933-43db-b4d8-1d7aec11335e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ebbdef-229c-4191-bbe0-54c61ba8af35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc022fd-275e-4423-93b8-c76fd0a7bcd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89176d5e-132a-4662-b519-35ba2c36de4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.224.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fa1b20-1ec1-4a08-b357-10e227796b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.227.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ce6413-91f0-46d5-957a-5621f138260d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bd9193-04b5-447c-b2c7-a2a1671448da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0611f25c-faed-4280-bdb5-44a17d61ec87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eeff69b-251b-44ac-ae95-d0d0a2f1d257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056d168c-f211-4b9b-b517-9c6abdddaa58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491d84c6-c5c0-47a5-9ea1-7ad25d4f3471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.107.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf23527-915a-4c58-bb5f-8309a15ef5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7a35a2-fb21-4543-b2a0-cd420dfa9060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8477a249-f3c1-40f8-9baf-9b68dcf80440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee37da2e-f9a4-4087-9570-f3b161e262ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b012770a-a6ce-4cdc-a99e-5b9f1c089281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.113.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2125db-de08-45b0-b9b0-ead244de0330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.115.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc82c41-cc93-4d5c-8ebd-7076ad507831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.116.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a186e9a-445b-42ae-84be-d60910a6edc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5833650f-3a1a-4dc1-b03c-3bd48c0f0934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68c45cf-d038-4983-b618-dfabb03ece23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2517c62e-3ab4-4b1a-96a0-0852a57e2a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf85520-e9c4-4dd4-97f4-c1a313364f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886f6ae7-1a82-41f5-a344-cc5c1866252f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7323cbb7-eaf6-45a7-bc12-6bc342cb42e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9740103-2b95-489b-8f4e-85fb31396b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479c6933-9e8b-4b22-8e5e-79e96e2fbc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96303ce6-8940-426f-a0db-384662659dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8143ed42-4852-4157-8e5e-31dfceb656ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f10c0e1-ed16-404f-bb1a-7cae36dc9adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.164']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede3f694-5655-434a-8ec1-8cbb65fd307d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3569e0f-8c06-4e48-a3f0-0fb3b56f528f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6cd451-6500-43d9-b65d-6ffd593641f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394c304e-b859-4e63-9d3d-f37fe163300d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16ce06f-5e81-4193-8967-4c7120e26e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.186.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414d4010-c045-47f1-9284-7aceba30a379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.201.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afc96a0-0551-497f-b39a-210152b99838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ded047-6260-493f-877f-d0e26118d7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8e0d72-dd35-43f9-840a-b748f571aa3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.58.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6916bce2-967c-404f-bd62-868545a6c252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.6.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79801597-6d9c-4b13-909a-7813d1c226cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.90.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9a91dd-e5ce-4510-96cd-09f33a33183e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.192.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c8d542-6743-4426-a681-fc24f7ad8f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.244.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1cc258-a24c-453d-8f22-607a4bbaff91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.251.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6596719-d0f3-49ce-918d-99d785c3d36a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.18.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325f31fe-3c80-45a3-9c6d-e6bd9ee3baba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.77.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b7f49f-4167-49eb-9dc6-f7b50867fe52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032f4ce1-56c8-4f82-b6ec-dc2d38992d49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.97.251.109']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ad6e98-0b8e-4c20-a427-927458b71973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.211.158.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5907b1d0-cda8-4717-965d-3af7f22e6723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.244.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da87b48-abbd-4daa-86b6-cc8babbd4b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.233.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffeceb8c-182f-4dc8-9523-63a5a7f930ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.84.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bf5e45-b239-4c15-a421-48a400b5d3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.207.184.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3107c42-930f-4551-85ea-6b5602eb133d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.235.136.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a3526c-761a-405a-bdf1-da2c85de541c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.178.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363cdf6d-d4dc-456b-b449-f7b8db516d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.183.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bed3af3-1d18-4e6e-8505-8b05345c40ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.245.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c85b2c-165f-4ee4-b23d-663a43d8e201", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.36.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8204f1-26ec-4348-ab49-33420431ccd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.64.169.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a03218e-8d23-4ab2-aa26-ccd3f26430a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b54248-c5ad-4f88-b1a7-5413fb4bfe8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.11.180.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe7e9ae-8081-4dea-a66a-4c72af014130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.129.117.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba1bbc7-db27-4fea-8d2c-f9763678db57", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.129.182.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1988827-2fe0-458a-8b2f-ff78b9e5b77c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.10.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4a4005-336f-435d-bcc2-9bbcc78dca72", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.211.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12f0e78-c8c8-418f-8c3a-61c2cb48118c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.209.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977298be-bb6f-4ae5-9e48-b417deb04ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34351e3-0827-4007-b050-0278528144a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b58291-d329-4de8-b50a-c4cff5151e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d013e713-8d9d-4cb8-ad56-ef1b78a9ebc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.194.189.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b648688-b8f7-4236-9811-dbaaa2ddbc96", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.196.154.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4019ff5f-2621-458d-867d-8975156a1a82", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.2.250.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd5112c-f9da-4fc4-9f63-9a06e0bd6c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.98.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31172c8-c12e-4ec5-8cfa-bd0cb83518ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.34.176.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d073a93f-13f9-4465-af3d-49c30d3869d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.44.170.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bcf12f-c5a9-459a-acb2-3e80c3cd09cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.56.77.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ce0900-50b8-42cb-9f43-f440e429e778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2898d4-ef11-4b00-9e09-522843ede10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.138.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ccf3d1-3ac0-4887-91be-3b8cb24d33ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.151.191.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eaaffc7-e11e-4134-8534-be77da314caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.16.43.171']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cffbf62-4b1f-4d45-9864-7632ab0fd12b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.3.85.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb81fb82-36dc-400f-b5b6-f6a03f454f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.62.181.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37acc015-59f8-40d4-85ad-0ab1769d9c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.41.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1279b19b-629e-4ebf-b3a7-a8d799b69af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3a119a-5bbd-4cbf-930e-467c46166778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1014773f-c69e-47b9-b717-cf89d2b45979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982ca80b-fd60-4063-945a-a093c20243a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.107.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400ce253-447e-4f92-956d-d3847f48cda3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.138.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e0844f-31b5-472e-b4ba-07a18fcde007", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.151.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033f8e46-cd7c-4358-a20d-b3d7b0c6b9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.190.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de94183f-d62a-4de5-b79c-7e6e3897d708", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.37.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266b4952-9d91-4745-876b-a7e5c22b22e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.91.105.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6d42fa-bd26-4b83-b776-794b98b3f498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.88.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee145e5-be51-40e8-8e96-98232d91d9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.90.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31118b3f-c7ee-490b-9017-30dc44cdf25c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.151.196.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1119c35d-74d1-418a-be35-d46caa4e2c90", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.196.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f4f116-133d-4de0-a85e-0916553fc25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76608c0a-3c2c-498c-ba37-4ce6d2426a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.88.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1154530e-614c-480a-b3a7-1a67b423dc51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.89.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebacad2-648d-45eb-ab66-eae78a2957f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588acaa7-8342-41c5-ae95-7faef483b112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.144.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1382e717-6534-4229-aca0-8c5fcfaa3555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.144.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc56e261-a9da-4d72-8249-51d6dfd1470c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ead97a3-ed86-45af-a026-59a9c38f4744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.81.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4e097d-96a2-41ec-afe2-43d7719bdca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c2a4cc-9702-445c-ae3d-a30d4800090f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.204.132.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac6945f-3bd3-4a09-b6c4-a6db83f06d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.207.196.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1034f9e6-bc04-49b2-a7d3-1b30982121a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.23.165.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690c2d97-4b35-4623-905c-fe542fa1a7c6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.27.249.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bb626f-8c1b-49ec-b81b-748a4e2813b4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.45.24.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64e1700-956d-4c0c-89f7-605f56805d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.73.212.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e17b75-bfc1-418b-b376-d63e0434b563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.195.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5618bfe-31cf-41ee-9336-01a5e53937e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.252.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ce9547-ecdd-47c7-9381-fee27fbcf8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.144.112.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b3c484-2f40-41fb-b9d1-d523bcd8f7cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.157.229.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313663f1-a680-4ea9-8b33-12e17d338892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.158.70.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc015234-219e-45e5-b8a3-71588d45a9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.40.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9145414-6499-4578-853f-d4f30a02174d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.165.219.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a25aad4-9c1e-450a-a432-2ee7c2d9d18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.166.203.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629ddf6d-e37a-46a9-82b2-3e01db5c158b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.234.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb400459-a60f-47b9-984a-35f091334c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.71.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ce0f47-09ac-4656-a0e9-602fa393bb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.133.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230d8010-b6b1-44e3-ac99-6d22d2ce1e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.175.83.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eea94242-a769-48f0-903a-9502a75db52e", "relationship_type": "indicates", "source_ref": "indicator--230d8010-b6b1-44e3-ac99-6d22d2ce1e4d", "target_ref": "vulnerability--3c0008c4-2f55-4e69-9930-95caf3c0f026", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efe24f25-7d50-4b5a-94ac-06525f5b47aa", "relationship_type": "indicates", "source_ref": "indicator--230d8010-b6b1-44e3-ac99-6d22d2ce1e4d", "target_ref": "vulnerability--60d89238-2ce2-4648-a0d6-a28ef3da185c", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b29456ae-1d92-48d4-8c29-f619c5c450fb", "relationship_type": "indicates", "source_ref": "indicator--230d8010-b6b1-44e3-ac99-6d22d2ce1e4d", "target_ref": "vulnerability--4bcc5cbd-c961-436d-92c1-96e5cf95900d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d3ad9d-157a-45ac-ba7f-eb8a9512e719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.204.71.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0182ea9a-a2b7-421e-88de-7e1bbf7f10dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.208.186.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97078f41-e7f6-4f1b-a6eb-0fa8c69a40e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.234.67.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f00483d-8d6d-4143-b456-32370b7e8212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.193.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1bc182-86a2-497c-8f19-9740085d6b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.36.99.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906ff810-a763-4e07-81ce-b1f17a60bd8b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.109.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53506c41-5417-4ce9-8af2-7ea23a387341", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.39.184.46']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81577a5c-154e-41e6-9dbd-2b9dae87775d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea408f1-3e17-4f90-8a0d-c3fab5b70c09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8853b1-968d-4165-bb62-4c9bdbfc5d3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d165db2-68e4-4d35-8257-a872cda2442f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680a0de5-bab7-42b1-9650-e0b233dd446a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0602c3-2af8-43d1-a2aa-d35b62d11cad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be15b74-ac84-4d37-a088-014475718cba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d84727-b500-4474-aaac-35950a661630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.221.146.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c828e368-5d15-4d7a-b37d-f4403622980c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.240.112.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a983e51f-d516-4d21-9f2e-d46858521aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.241.238.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76b9209-6410-41cf-86e0-19d0903e4e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.56.200.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d109d8a5-0080-4d41-abb7-a6297ecf7e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.56.204.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5c1cb3-6234-4dd7-bfca-1422bb681f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.97.217.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3a297c-875a-4e70-b613-b4b04ab74cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.103.119.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ca7dfb-02d8-4357-bf87-ca1cd4e9581f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.127.68.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6117746a-49f2-42c0-9082-05a5520abf4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.36.162.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e19af0-2e64-4c77-8d7f-b7d7baac1353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.50.28.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05d39ae-a48e-4c3d-8cf3-81ada16d2563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.60.100.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531a0a33-a53c-4b69-a991-78bc790aa07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.62.46.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714d2fb6-9453-41b8-aff1-20a1e794dfa9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.97.206.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d746a9-9130-4e67-9e12-bc565cbda5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.173.164.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55dca4d2-d9a7-4a65-98a6-a5d9fb59865c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.189.227.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec36f274-7117-4f65-88be-ba7dc60d8c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28dbbfe6-d027-4673-aac7-144460aeb560", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.199.224.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317fd3f1-3861-4838-96b6-de44bbb34139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.248.184.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59261c34-8a43-4352-b793-1b8c2c5ceb51", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.250.246.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea538ce-94b0-4efb-b0b9-6c736a2a3891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.255.233.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1daab4c3-7bd9-4615-98b3-3c5b1b2ec392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.26.3.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba98a776-a53a-4044-b79d-8483bde3829b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.153.231.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15603f9a-c8e0-4d96-89cd-2c5cd70aa2df", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.169.106.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb0a6d9-3c19-4c41-833c-86df358be9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.222.211.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba869f22-b8db-4de9-9fe7-0914f84371fa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.76.112.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefdb625-8ef4-498b-a733-a1fb5499ddd0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.132.18.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9dd6d90-dca5-455b-9da9-3b1e5bb5d03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.60.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773a71c7-40b1-4270-b1f8-dac93ba35067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ac0af9-21e0-454c-8b4b-b87dbb364f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ce94e6-ae62-4ce8-b395-6f2c14528cf1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.219.135.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffdf500-4854-4293-b877-389988309c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.220.123.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a824e34-8b4c-4934-a9ed-4242355749f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.249.157.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737493d8-2f1c-431f-b527-45911c60d539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b111d4-552a-471c-86a0-74458530e61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6dfde5-62bc-4f63-895b-7eb3fe5ae550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.204.50.240']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d251b1-c469-4ac5-b403-78f55073c525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.74.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7e7c59-e880-4865-a8c3-230d4d6773ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.86.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7493e170-6946-4efa-a093-e782cbd86fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.109.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755a30f0-8423-4b81-9fb4-9970a1ea0ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.150.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fff74a-66eb-4b93-a0ee-b67a1eeb61ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.160.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6a4f19-26c9-48d8-8dc8-41a752c9573a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.41.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bc97c7-a6cf-48cf-96ed-b64475c3efe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.90.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41680ca-91c0-418e-ae09-1b96ecb2930e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.161.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfda2bb-af93-49f5-8276-12df7d7254cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.214.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b47da7e-4100-4967-be92-6c499365b127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.217.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81fd3028-fa9f-4f56-9320-b80abbd81441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d92092-6356-4129-b726-9cfebe26785d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0da979-c0a4-464c-9b85-e13032b8156c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576da040-21b9-4156-b5be-2870fabf95e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09e6071-357e-40b7-9460-8206042ccbd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bc8eaf-41df-49fe-a1bb-21bda3aab6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9b0489-3206-49b2-bfbc-09cb6081659d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42cacfa-d9c6-4338-9626-400028f64b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d2a292-cf21-4957-854f-ace79e47ff1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea18ecfa-b760-4862-a1a7-3a672173f39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc145b5b-ee9c-431d-9df3-9c2e8e42bd7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703d0b37-a7d6-4a96-b1f6-ecb6f3021a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85082f0c-3a60-47f1-9354-6b0d32f9ac86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bf0b0c-90b6-4a3c-9ec0-744770a39141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df4f840-82c5-487b-8d88-c1c8a298e7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830cae9d-3794-4f1d-adf6-cf6ba0cfb1c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f867b17-e7c6-4363-9030-f1c89634d1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3125e8-ccba-4a20-afc9-5af1600dea2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24038d1-c1ac-404f-90aa-4fc26cdf2e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b96927-c59e-4e37-8190-4f807d601be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4f6d83-00b6-47d1-9fb1-27c96f00a49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06801ab5-7216-40f2-82a2-74dec6631e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df86aa1a-7289-4d8f-a548-d07c901f279d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f550309c-ed93-4fba-a125-14fedf46adea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d44c869-03d5-4d2e-82f8-f7c8dae38640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe25461-8653-4a6c-b5e8-4e8825ea6682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499b52cd-4329-4e4a-b652-242eb665e5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769db944-9145-4e11-9732-a135062bc09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67cc62c-2b2e-4dfe-96b5-42a2544e652b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bff4de-5877-4ef7-ba65-f4359cdc554d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ca07a2-1506-4e63-b949-633253dd45ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2064a3c0-534f-4e1b-bafb-c3310474e093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e137d0-b243-4688-8231-5d9affe34b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5b6b18-a228-4312-8416-9b0390895c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5d4e08-2d58-432d-bcdf-34fba5c4663e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fe82c7-fd1e-499d-a2b6-89b9aed720c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1f6b02-31b3-4027-a59a-29267ce15811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be184ed9-a7e5-41b7-8dfa-cabe1f14e605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c477f104-42c3-4a3b-8345-d85e0d8f815c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97169a5d-d237-4a98-b41b-acd7a1fa8e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b129a1bc-5402-4335-a356-4205fbe97f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d9b7ae-c744-4d69-bf90-299e52b07e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bafe2f0-f45a-4304-b97d-b96fed573b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e13b6b-50f1-4e1c-ad39-19b005415469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f09ad2-16c3-445e-b6f9-d770439973f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e624715a-aedb-45a0-b411-7a64206e257f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1082b9e8-0cde-481f-bc02-3504ecc7a39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29029e11-80ad-4b54-a5d6-5cb2e51a16e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1dda7f-c879-4184-907c-ecaf1ce4fd04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc477ba-96a5-46f1-bd9d-5aa64ee4cb9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22c17d3-894c-48fd-b112-323b72b566cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6123e78-2331-4a71-86c5-34a28167779d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dcfef93-04a3-40bb-859e-d934df5984e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab310ee-d182-4aeb-9354-b48a16c89e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f852359c-7227-4e96-9329-dd3bfb027493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94c5234-186c-458d-9862-2e7202de9b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8c9e7c-a838-4d41-be7c-e8a0f433de8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b650e7d7-597f-4699-9ab3-04783fbadb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada6316e-39f3-40c0-9e9c-b2becd59ee31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89901ffd-f05a-4514-a6bb-c95887a0c57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa18284-3dd6-4335-851b-6fe5ed1f5e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4471986-d011-41fc-9e90-aad5c843e720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05b2572-2286-47bb-a7fc-b96ffcb8dfd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d3fd02-3b4b-4ae5-9c98-a0456fd3848c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d40d83-8500-4521-8fcb-c3a50e5236c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426a28ad-79ee-4b90-ac02-f8d9fab5a086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee9faa8-6bab-4b40-ba94-3864056e6db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55cf12c-0f2f-4d70-937c-6642dbf27e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad984f8-bc81-4a4c-846f-1237635c40f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8269c8c3-02f5-47b9-b3bb-f6358133c357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87aba3f2-ee9b-4b4e-9e9d-13048a3daa9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5069520-8af5-42d1-aa62-045084e5ecc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16543db1-ee92-43ed-85b1-5c949d2cc0f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d1b99b-44e0-4aeb-856e-b1f6f11b9702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c0fa36-6e96-440c-a820-e654076559bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028e6fc1-7f09-440b-a13d-dc083f6d02af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a2ee08-6696-4537-9d93-60b5fe095cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9517ec0-5d9e-42fb-94d1-8822ed6fca96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fea27b0-ae5e-4e13-8b78-524f4c76461a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a11831f-0883-4f04-92ad-873619250059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c589f69d-2bee-424a-990b-991d14c455eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1787e9f-4265-4e2d-8b9a-a548a8ddfcb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6897da5-a45c-47dd-b1c7-80d3e115ea09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2d105f-d74d-4d99-b8d5-0792482aad75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79404650-2e08-4406-958f-4f64087b118f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2becb7-c63b-48cd-b669-2bd97a14e993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3708696-9941-40b9-aea9-8cbf79eb9bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb1d0e5-0f93-446d-b216-9fa975801005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43352ffe-4f28-4b60-b6e8-2da443850678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f07124-4c49-4e2f-bd73-c76cbd136899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978df734-f670-4f6e-8fb3-a7565a3e1d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186b3857-dfc7-48c2-9f36-b4226560e6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.145']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a18661a-befc-4867-a3b7-ab734a245ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30aff6aa-b4b0-4147-bccc-996893d7649e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303b7084-948b-41c5-b5a7-9f4c70163af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d0b4ed-70d5-45b6-8bb1-d9c23d929d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f46225a-fab2-4ffc-9c04-91bc42badf9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2b2397-5be0-4c55-893e-9add0f96bc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.180']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aed43e1-49ec-4190-83cc-eaf27b6298a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037fc5b7-92af-4556-b9c6-544501e061ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156ba45e-1dda-4839-9614-077787068cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255c7b4b-04b0-4ffb-acb5-24d1307a73b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50716375-3a9c-4e45-a47e-877688dde486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f59bd1-c7fa-4f64-b781-b4160bc55caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfb274d-f9f3-48bd-be67-4bbc48cfa9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e24ed5-a36e-4891-8b9d-1258a26fb6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef708dfb-ad97-4286-9ee2-83b46db304d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a1f478-8cf7-45cf-9ba1-f3706e076d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85b630c-7d80-4bd2-b0c6-91e906cac595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2212acbe-e507-4028-9e23-bff16c95188f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583e61d3-0c87-4582-a829-a143d6443aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4329b5e2-7190-4d1a-95b4-f21f52b8c769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c486b3-e042-46ca-bd7d-8739f318405b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc4564a-4f0f-460c-97f6-b707ca5c921d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02373c0b-be8a-40ac-a24a-4a147252cf95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0860ebf4-bcb6-4258-8d0c-ff5d268dc708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fce5afe-ea88-4de6-862b-6f71bb8a264e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb41b221-b507-4f07-9554-c15c3d494ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b990a08-9ad3-4609-9d85-f89fdeedb712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a02868-d8cb-4153-b687-8e1ed1175154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ca012e-866f-48da-9e49-533835b46871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd80076-55cb-4cb6-b7dd-6cf880fd7aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5998178f-3239-443c-8d84-d10938262876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7fefa0-b63a-4e48-821e-a2230d88a529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64cd7ea-96ef-4b3b-bb9f-20d73ac68c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1025107-ab5f-421a-a2a7-9d45beb18e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a3a258-cb37-492a-a69b-1fd7886ba2f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921b6b16-6170-46ff-a1a4-992859bf3ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7d409b-81a3-41a7-8f84-3eafc2ab3f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb9c91d-b977-4f91-8f87-a35a36ffce0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b24ea2-58f7-4160-af5e-eadcc531a1c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb7b416-9f07-4921-95bf-a1058d52f978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2e9ad4-ed11-45af-a6ca-9c25338aef58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb61a5e-86c4-4a9d-bf20-719828d0a151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7441caf0-33d5-4b65-bdd6-c8d1505c3098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f53b65e-a4b6-4cd9-939c-172b367f66dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99088f40-5937-4144-9da6-f58dce18d52e", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8dd6b8b-b231-4b8a-ab0f-17bbb7f5e82d", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f0d657-466b-45d9-a304-9e4a50e91583", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efcfcf01-7707-4759-8982-90272365ccd4", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a130e3-29df-4c6b-a3b9-28105128f135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02ea2ff-2445-4114-85ba-579939e8dfd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1771fc0-a162-4f9a-8452-bc8a39bffa5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61dc9950-7104-4843-a5fd-e1f0e6a2fad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf63ed4-f9c1-4caf-a9b0-0056269a93ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e5ab9a-fbf3-475d-9510-b7ae167d2794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd89ba52-2fe6-45c2-8768-9a757ad49323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a4c094-290c-4bc0-8a75-011bcfda55c2", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457aaf3a-1497-4a27-aec4-ff4a5d61c911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a425bd0b-6199-43b5-9d63-5af9a3ef8a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d668ac5-8435-497b-8dec-2027facce167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af83689f-6888-48d3-9c33-2bed4be3d82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4e3c32-3858-4b6b-b2e9-811838500d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5b2f31-8031-4129-95d9-cf459c92f207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df53e3d1-e995-4237-a6a0-806c2e9027c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc357d44-a1f9-442a-9084-e6dbc1b18983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cb5d2d-1074-4cac-b8b7-07f7b2352839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fe922c-6331-4ebf-a99d-a2f459a19c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31cca453-750b-4b86-aaae-a6fe3b0af140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8470c482-b006-492b-952e-58e980ff149f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095965a0-2cae-447a-b67a-e88e2f459930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92dc524-fe63-4089-bdc0-ab12c21e8c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b41abe-60b1-4031-8d34-1fbfd0b85499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f1b980-6b34-450f-9495-96ae5100db1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3727c0-7d11-407f-ae17-8cab189062ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3622741e-a43d-497e-933c-7c57b7c9b2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0401050-4b00-4536-bf9d-3b120d3ab585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc3078f-15d3-4404-84bb-4a19a309251f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e98f84-27b9-470c-bd9a-a6885e8a1947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72154a6-d308-4c89-a864-e1792226bb9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6830948c-0e0c-4c4f-8672-5454a12e3d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55cb2d3-13f4-4699-9780-8657d9288d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1f1f82-0c93-44b4-bc85-57800f431e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40cf5b99-9b40-47ae-9dd5-34d884c8d22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f59baaa-905b-49c5-b632-df610faeeeba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85170250-48bc-4581-9c57-2d0be6b3d25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7209ff5f-e24c-4ecc-9832-61c0f738fb10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3f63cf-d770-419f-af74-843ae37cf621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbdcfa90-9f15-42d3-bf52-af44c1a8d499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e5878e-911b-4877-8757-fb426c5c05df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbd0636-63cc-470e-9843-bfdf92cff5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681e39fe-c7f6-40df-88fd-d449c83c3955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1404d15-8488-4dae-9ad1-a2c59b58762a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db51e712-5034-4f1e-b19c-3c4a51befbba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4a058f-2ad9-4ae2-b9d1-d77356033a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160e8e39-239e-477d-a52d-6796034494ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7113c1e0-2baa-4b00-baab-09dfd6b6b55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2728837-4721-495c-9b40-a2f097d9a6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791feb42-b189-42d1-9d31-f68b7154b2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03039c0-775b-4755-87be-9a6d9011aa45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e82cfc9-0aed-42bc-8c6d-a540b42da72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.193']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2f81fc-6084-4a90-aa7e-31c72c8a6536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7a5661-2708-4271-b9e9-c3560014e11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d3f935-ea2d-4247-b65c-60e2cc7094c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff60aecc-2a16-4ab8-93b6-2c93d8efffbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190f2734-4c5a-4458-b703-1d0a4ff30ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cdc4f34-9812-49f4-aa40-d3b939e5ecf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce445456-c0a6-49c3-87a9-a0c37836699d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e808a68f-e465-46bb-b0a6-1bae1a0d6587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b627b91-b14f-4036-9830-263751354819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7d8f60-8862-4451-b2ec-9ac1513cecfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e3c7b3-38b5-4d88-93be-c28ae0f62e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a794fa-14b5-4c40-88ab-53a0a09cb5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22895f9-51d9-45dc-af29-5454ab81e5ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e671d74-4fcd-4b46-ae96-bc3afd4582a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a731dea-ec1b-4641-800a-78160d2b649e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfc32d2-ef64-4b69-b08b-83fb1efa4164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337be51a-83b4-4676-be87-d6d42a422d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c121eb14-9d67-4f8b-ba7e-d27974c76b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31b1159-99c2-4294-bb22-95a97011bdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4eb73a-34a1-4bbd-b908-ddfc5ba25dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea4d66a-a514-4bf2-abf7-f61cdae3d6d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2480c565-11a3-48f9-9ca6-074527b2c3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec82be44-5be3-4b72-bd1b-c5a94cc662e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871131cb-9d8c-4592-9b80-14697d33d08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998aebce-759f-4fb5-a529-151a57cf43fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49b4950-3f56-4504-bb5b-39f8b6feb8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acf117e-236d-4f38-bce5-c68bc67a6ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05498d01-bcaa-488e-a8cf-5b9c58be9c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8394bdb1-49c1-45ea-b819-17443b4f0d74", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1360f49f-b194-4daf-bf3d-5510631a554a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ab0648-a6c3-4cc9-b5f5-bfb42de764c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9cc0f8-c13c-4f62-86c6-63736a875eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c01195-56f7-4de8-8053-9c24a0cac79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fa99ab-1328-45a4-9903-4a0469718089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef405ab-b62d-4a93-a380-ce93a2c54004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2f416c-a702-4702-a70d-e69b7fb21991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d7ad9a-aebd-4a73-87c9-8ac951e2e016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2afa32-0200-477a-9cd1-175be498312b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf68a8d-eb74-4871-8314-a47c6599afcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ed93c1-4396-4fd3-bf31-609c8118ac18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1896036b-d2a4-40a5-ae8a-378bc5739d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2781a016-01fd-44c6-9623-773a7a01e594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178fcbf5-159c-4c28-866e-abf89091da6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3635892e-57ab-4824-a9e7-2c6a3fa48b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec7043a-f3ec-4283-8621-cbede5d0e391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f696e265-f5ab-41aa-95d7-56a72cfc0305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298a3bc1-53a4-4123-921d-a62c893ab9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36421c48-48cc-474c-8c1e-63f2043a0de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ae680b-509d-4252-8c62-306ac86c1f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe692d88-fe14-489d-9385-98077b56b25d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5338b1f1-418c-43ca-aa56-c7b6c95947aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa791c4-c86d-461f-97ab-064083efb75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbf3aca-e07a-4c79-9c6a-fe3182815aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b16a0e2-c569-4916-a755-2a793e8ab754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884288e3-b2c0-4fd1-ac5b-e8125ff3be76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d974a938-164a-42ab-84b9-d2028e76c843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e16e5dc-b434-42ae-954d-96920a467cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fba0af-9fee-4ad1-96f4-68f93f590588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d178df2b-8b89-4010-9a34-3a9fee436cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9438539-03a2-4f37-a6b3-e0e3c596294e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f450e5e1-43c0-435a-bfc2-cc97e3c99604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c69a68-0594-442a-afe7-cddfe953cdda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b958f5-885e-408d-9883-b30f0ff29e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b53522-a336-4ceb-92e2-2dfb0209630f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ef1beb-948e-495f-a82f-3f7ef9ae48a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e353a87-6d89-4a38-baf4-e024a6e22c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07232729-05ae-44e8-9212-a9b37620855a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84bfd043-2e18-4387-bde5-e813639ff3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abd9b22-73d5-4d9c-b084-578d322f11fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a628d9ad-f3d7-4d05-8316-1734f428eb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9a75e2-c2bc-4b9e-9d9c-41792b4a9383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba52b5d3-3343-432f-90dd-7001368862fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86074574-bfb9-4d18-aef3-c22b7ab78f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db40114c-94ad-417a-8339-e7900be20e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95169f16-f2ca-40ca-aa6d-7f0d0f40981a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd2f637-0e1c-4c0c-a75c-f646b3fbe849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184fddde-d4f0-4eba-884c-8af37c985773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f8c1dd-72c9-4fc1-ada2-aba5d7264f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7c692e-6fd1-4e25-b931-528728d9f80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.109']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbaa7261-6ad5-4206-9ec8-3614d7eec759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8a8afa-930a-47f4-9d90-1649a91fbe1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70b9ee1-3f02-4a83-ace3-dfb4c196a19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b4af58-90ba-4f2a-a446-97e60814aa42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311e2380-944c-4ab6-9297-5c24cf8b7e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a3aacf-7f33-45ea-9362-b0b37438e75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d203e99-cfef-44da-b53b-5dfa418cb5a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07fb89e-5948-4836-9cf4-2c7dd5524bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2bc79ee-81a2-47f1-856a-7bb8ef1fe76a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43832cec-f77f-4c99-9359-1e4cd7e6d417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28f898b-ac61-443c-9d22-4df49847c1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bb8d3b-3dc5-46b4-ba4f-ef58de0f5bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dffb439e-f89f-46c0-a43f-aa3a6c7a44d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9544473d-6e30-4e2c-93db-a217eeb7ce6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7282687-6781-43ec-a4ff-0eead0290bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539209af-1a5b-48de-9e05-7871330a784a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43beec70-0a4c-481e-a142-0395c40bbe9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23ea316-a851-45cd-86b4-8276c6571fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fad9bc-5e0d-4690-8ea8-bee4b2c62839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc0cf59-2c34-4cbe-bb9b-e1fe63d62f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc3cb96-aadd-4fb0-a565-902d5549b4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f9dcd5-a232-48b9-8fc8-6a86e03ee8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6da88a-0882-454f-af9f-0eebaa279cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeccf6ec-eb55-4b7f-9921-8203f433f181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a19eb2a-5b5d-4039-928e-929ee94d76bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8634004-767a-4acc-8945-3f053ccbffad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f8ef8f-7c99-4a35-ac8b-f460c85453a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dc5879-c0aa-4cd9-8b7f-4523b960180c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f435d8-48fc-4084-a7f9-dcff22e79308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52db1bd-fe17-4bf8-a8c5-3f86ac403ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459fa3c8-904c-485a-892e-fbfe6e321577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965df0cc-eb0e-4e47-89f2-935319a95b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8e557b-1e2b-4023-a4a5-bc2f2ebcc6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c27ce40-07d9-4e21-a716-8fe0ec039809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59a4df4-35eb-494b-8f1a-c63fac825fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9f873b-3f8c-4aa1-89bd-283dde11a5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fd98d6-bc9e-4f23-b6d2-bf0668cd38c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ac2781-3258-438d-932c-d4e56748e0f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c152b12-5a78-4f30-9917-953975f3507b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b47457f-d8ed-4df7-8ea8-58deb647ff79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd94043-177f-4650-84de-9bb000bb1b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18b6cc8-2f26-4ee9-9bfa-d1fba661fe92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974b6399-9777-41f1-a23d-3358de0386ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3aef1d-ce70-4aea-a600-b9af47b5e0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab988f3-0145-420d-aafe-55f7f9b96eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebfdf737-ec59-4450-b161-06e7ba1ed951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e26565-8694-4af0-ae03-99f70823c7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1474a23-66db-480e-bc94-3f73006db76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a935c67-6e00-4e18-8ed2-3defaeb2471b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cde8b76-6f8d-4156-9681-af443f11889b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd41916c-9721-4be6-a84e-e2b241d5bed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e85c658-762a-4ee8-a5d8-87b2fb9f25b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb70c2e-f490-46c8-81f0-307be3bd2399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1e75d6-91be-40fc-b6d2-4de5f7862e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2261330-d677-4fe2-a86d-6308e85c3a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658cd1b6-947a-4885-bb24-25a188d34600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ce6e38-03d6-46e2-b862-137ed546eb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a84a0b8-9321-4f47-8afc-54ceac1643d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cee6522-7f11-4225-9f16-1370bfe7d2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f745dd4-f4ad-4fb2-80ea-41de72f0cb40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4262a16-5eb0-48e0-83b1-8cbf791cfdda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c54c9bd-5f61-4b7c-bae7-5917c690720b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89569e1-45a5-45c5-bc0c-78dde67b078b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1647d6-af79-4f40-994b-09e058621838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c500501d-7677-451f-a8db-2a772b05cbfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503e99e9-cab2-4613-a774-50b301980f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11823e0e-e1bc-4ee2-a823-26c80f1989d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9be558-7c83-48b3-8108-caac9eee4c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad48a525-b1ea-4d67-9cd3-456b2f21139a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d92b2b-51bd-4bcb-b131-fc80b2d6abbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c36203-334c-42d6-9c78-ba652a5359ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a89f93-1df8-445b-95b8-65730024800e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991eff25-7989-4d9b-ba73-02f224f585e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7868ac-dd57-42dc-ac38-87091fc0fd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2bfcfa-f981-4095-919e-1744ae3c8c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe9601a-0d8e-43ed-a47e-a944c147c655", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6204f165-efcc-4fc1-a429-7611e8a0e026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cff42b0-87e4-4da1-ba14-1d7f58cad3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8121e5ca-d303-4fc1-a679-3b0708492e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942948b8-548b-456c-9b8e-1db7bdaa54ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1b0f39-00bc-494a-a4ad-19820cbf2939", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2c1cf9-d8dd-41d3-8660-a5297dd536eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbb3377-92c8-4383-8a65-334531678763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bbdde1-eb7d-4006-b5c5-e308dc1202a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf5bdd0-cc01-4b18-846d-a284c0cd08cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f17f558-4758-4f6c-b291-754f8101aa07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0206afb8-0c5d-4fe1-8d01-26b821854b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8abc673-30fe-4c4c-adcb-452b50eee292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115a135b-c74d-4062-b5f5-89cdfce65ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f01611-c36a-4067-b260-7589f707381f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd2c712-a05e-42f9-ac99-4b15d11d7fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910cce64-d009-401c-87a5-d9d27f1119af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cccf2e-6c81-440c-bbe1-a915eba2f291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18842854-fc8d-41f3-a5d2-afd84717091b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1512090d-9139-44e1-ad40-9ad6c5b03613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477f6380-759d-4fa3-98d5-194093afa7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a499a12a-278c-4482-853e-5a875a88bb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.171']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42b8d50-a429-469d-8785-60649d7a7ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc19b70-0ca3-443d-8b03-ecf399c51731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.177']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8e4398-6de3-4774-9b57-221c3bd5fe51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.179']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1beda6d2-e8e7-401f-bed1-7658959f3628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.181']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26eba6c8-bb69-4440-9c30-e83f81f6f1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608ed390-379e-4da2-9f20-113bfbbaf7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b2f54d-8ead-4efd-9014-73b8fe89778b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33b34fc-3118-418c-9ec7-c8c6e1bf261e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b772899a-c493-4676-9260-973818116a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baad6035-add5-4c23-8654-49f0169ee0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.193']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ccfeba1-84dc-41aa-9ccc-72fe6f94de5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fffbe57-dabb-433a-b83e-ea277aef6a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1315c2-4371-4761-b9ad-7f9367f29e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113ea91a-0800-4ab5-bd6d-6f3afdf2adb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b993576-7fad-40ef-bedf-ea55b2d5699a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554f66e9-a612-4fa9-ae8c-826a4193056e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b652de25-cbc5-4934-bd22-cdd24e1baebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db3e0b5-bfa4-457b-840b-d95683d45cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c03a1b7-ea41-4ba1-9a36-1f49c9798975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd08a540-5173-4235-b2d0-a2f55ad1ef11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b48ab0c-afc6-4ad5-a97f-a2c60b22ad01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974c9fae-0301-41a7-a3fe-5f3d4326e287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40abc32-20b8-4d61-903e-8e46428a8b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48575558-0ad2-41e4-813a-5cc3947cbea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fb1981-8ae8-4402-8e61-877072ad7ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2663df-ef7c-48e3-9977-c5a087a77e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23f0416-ac21-451c-b2ba-b726d1e83f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf74c33-6ae9-4154-8be7-4a4ea34a8b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddb1dd5-c23a-4f03-9b77-a889dfd0433e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ca4b37-f430-49ec-a0e1-061793370cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e79213c-63a0-4aa5-9525-77afe7374c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13de987-6b9f-431e-b2b8-4bd88fb61501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e2863c-437a-45bf-a1d4-13c32e86cb2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f40797-da55-4920-a1b5-a41394c0f360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f28a8d-3a3a-4b31-83e5-a5cf79adda4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940d4f26-98a2-4c03-95ef-1c8561fbac7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3323dd2d-a66f-47b1-9386-73af33202ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474bbaea-e7d4-486b-b510-41b7040fc7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57483e4e-98e7-43a2-86d4-7841b9c9e44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35798a03-2d57-4b31-9ee1-bbe30bc8db9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06df89e4-c5b2-4f89-9790-bfbd98ddc4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba2295e-c329-4c77-baf7-50dc5f7e3173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b270b1f3-f4bf-413f-a8cd-5ab709669b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7786d643-aba6-4ac1-9465-e337579b3b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbca0e21-6a29-4408-be95-79229a88832e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1954c33d-9628-4b98-8211-2f516cc7be54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e9b554-6a42-4f1a-80ec-4b84ef9a8c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d38d67b-7372-4712-a9a4-a10d93b1737f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d50363c-abba-476c-b98a-a9cc5849bcb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58360f4-bbd2-42a6-a8ca-775fe65e09b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04ae7a8-71e7-494f-9f9c-cf72a690db85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c4b7e7-5d48-4373-9cb2-8fd805c3058d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbefc97-5414-4c9d-98de-08b3ed054fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aae84ea-e0b3-46ef-87d6-05e93f5ee739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285a9483-84f4-40f9-ba37-8d1eae2e8192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33a3953-2a29-4b23-bbc9-826f17c108c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b544c1-4123-43c1-b93c-f13a87f09be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba40a8cd-e6e3-4d21-ba13-31afb9e8a0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.101']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da84ec9a-4cc5-4fc7-bfa4-59a9a0840c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e897c00a-e461-4d06-be5d-be9411b20b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52db49e5-36ab-44a6-83c4-ee38866e5d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428345f7-c04f-4b8c-b6df-ce08ca17a423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a26808-91a6-4ec5-89a4-7799d8c246ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04bb6f4-bed7-429e-aa89-f7306912d5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798fc52e-81bd-49f3-9ffe-4bc89a97bb0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592cafc8-40b2-4ad9-95cb-dea6914c9259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1085709a-6a00-4b73-9259-d77ea243e45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe193d0-db9f-4cc5-b317-b8b6f8ee93c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd3d518-a073-4f13-9168-f16b5e401c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d091ba43-04d3-41bb-8221-cb985928acc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8c12c0-fc29-4e02-bb14-0512426d093a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc453b4-8bba-4901-9d13-e9c9efcb152d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3318ffeb-39c7-4efe-9c64-c56609dac99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51caa922-e01e-44c4-8dcd-485cea3b1580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72146ec1-ca17-4d3d-8390-50c2c26e2f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce71498-ba31-431c-b0c6-629b10fdfcbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bc2695-1688-41de-a223-f6d2f7eb7ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4b67d7-8c9c-4cb2-887d-98415ca0a7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09818eaa-e5cb-4d75-8c96-7e2992c12508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9d8925-d707-4403-a53a-1e737703409a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae172013-e8a8-410e-a18b-a0b4db91a42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1715652e-d575-4ca7-bf64-e32b0159c8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a257f31-6cb4-47fd-8503-2feb7e013a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a514850f-587f-443a-9346-e7e746f0ca4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41265750-007c-4658-9452-dd612010c6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d52071d-786d-42e4-9522-bc82fe09d73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed15112b-7831-4260-9e89-a1a7310f646a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9f9bee-7ff1-43d6-8203-76e70bf7f5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438d7d56-4c9e-4ab1-9153-4459d36c3a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91228398-8f41-4347-a2a7-80b6a80cd5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d1f647-b4e9-4b80-9177-1658a11baf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e21da1a-c66a-4284-b92b-8abc7b488fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543472f1-cf42-47bd-8d61-940cbf0a0bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89685db-844b-428b-a650-506f0379e786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff33e47c-b060-4d47-9836-91503b0d7425", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c686a266-d2ba-46ad-a77b-fe81fc38ba80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.57']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2401bcf9-ae51-438e-8954-bf3088a6cd9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e2c8dd-fcab-47ea-9bd9-2b325595e5db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633b8272-14c0-4435-9c6b-051e2c5ee1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8bf89d0-5d17-43bd-8a93-7f3bddbe691a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d05a7a-7fbc-4a65-9713-51bc6d7e3903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a845cd-625f-4791-8469-20d6e933cd35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334bd739-f83f-4065-9b4c-ef7dac77883f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88830fa-0726-4003-b1f0-cd2205490e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c38b73-d793-4d56-99cb-6f3b9497b247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927f18a4-bb69-43a6-9910-a9e6f42cd11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f1b880-2270-4b0d-aae8-1c9a47c0dada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7184677c-b065-46a6-b017-29e5ee1d6e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fb3983-ba67-46ef-a1f1-a96d44fa76b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b36c868-2849-4954-b438-ef1295d350ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ae8f5c-84a9-47dd-81d0-bb3a3f80a97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3998ca8-25fa-48d2-82ca-4a6acfa13a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced2fe78-4eb9-4c30-b8a9-b8220fa77609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6765969b-d383-45ad-aec2-5044fe06b300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a18c32-9119-4930-b11f-41abfde2fb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800cfe8c-01dd-4cb6-8105-1697f52257bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ed6929-0a0a-4f0a-ac56-b199ec8c76f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b5f8b0-64c5-4df7-9556-eac9694381d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343324be-fdce-474c-a4d9-7afcdb11f49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43e3d58-d9e3-479e-8ac4-ae7d3e9891c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1794758d-93f0-4220-9544-b5c09a6cf2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5829921-7f52-41ea-bb9d-92f3a0976b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d345b5a3-6b1a-4663-bd1f-1a83a703aab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f5ae8a-061e-44e8-a085-88388e06955e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1f6e63-c269-4e90-bb57-522bb305a3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f7760f-54cc-40af-9eeb-8b788c041ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281529f2-3257-4466-90bb-63073010f441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89792a47-8228-4d04-ad47-9f78caa4e65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74df4237-b55f-40c0-aca7-f1280ca393a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858e586a-691a-46f0-b65b-da745bc85fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02163162-1ab6-4b4f-af93-4f36250130fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c971e1-2f79-4ae4-8f5f-44364ea6fe45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871dbdf9-038a-4ee0-b456-65547ddbfe4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.154.110.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb377238-6b0d-4feb-85c9-64961e3f588b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6204eaf8-0b28-42a7-9e76-f4e5253b9be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b8ad0a-383a-4bc3-b38d-2dd9b40d24a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8fc104-2acd-402b-beba-ea6ecb752397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5160c292-3ad3-4a51-a3df-769f81d89ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e860773-03c0-4ee1-bf14-bc10cfa408df", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a13cdd-6fd7-4905-b976-5ab12b688535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc121fa5-c590-4edd-9b3d-6b7a69279617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.219.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120758a8-ce5f-4b48-85b0-ab7c36d668f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.240']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa1db6b-d41c-40d0-bf2d-c162c2ab2db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2f360e-1cd4-4628-b7d6-45e44b6f8086", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.73.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a3f8ce-6727-414c-ad15-d276054b19f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.73.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0acc8879-27e9-4585-9afe-ff47b10bf399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.147.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4461d881-e69c-485e-92b9-1a9b67f33730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.165.183']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb45c4f-7f1d-4624-9c22-67bc8d3a0651", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.172.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3c75ef-5127-41ff-9c1b-d8fa3fc400db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.80.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd23cafb-d0a1-454e-8d6f-3b12c842295a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.52.95.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e30b98-3fe8-4363-9d48-44e67aef268c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.166.197.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee01a2f-e831-4f7e-9ced-87e3d7478852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.166.199.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fc7304-1110-47c5-8b05-6b132706fe69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.178.167.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444115d4-a115-4d7b-baf7-08e02561aff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.167.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25497cc-d023-4e76-b72a-d8b4004ba211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.17.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9cfe90-dd68-4893-8356-96a0b18e1f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.177.165']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1457ff-7ae2-49cd-aa5a-d21e0cc1c6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.25.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db9145d-9971-4705-ae5a-03ceda3a0d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.29.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7ad939-6b97-440b-9850-60b8f6febc25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.54.229.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da44b069-2112-4c82-bc35-7ed7cc9bf5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0245dcdc-555e-43c1-888e-7737f3735a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0c9bb3-bbce-436f-9a7e-81f67ee28b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3f6ad4-9c08-4faf-9d6a-797ff0a8704a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67c0573-eb1f-4657-b568-1438551da713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3171508-3708-4c51-8533-974021c82da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e14de1-44c7-4279-9966-8f77837c05cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d0c175-7f71-48c4-8c3b-0ec52209d8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.182']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92e8751-822f-44ee-8a81-1d6f502f71fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92e187d-7155-4be9-9204-eb3a4070d77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4d294f-922e-45eb-82f8-b58d00c0cbdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1895af48-fa2e-4237-9901-97589311b852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dc3d95-7c82-4288-9347-e3abda502f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0af927-dc08-41b3-89c5-8fa94cdadf33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b871571c-89d0-4beb-971f-ef3790551612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387b50dc-22b1-4291-b1c3-ae63403cd056", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3716339-e528-45b0-91c1-20ab222452e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79404d2-21e5-4de6-bc32-1142a909aa14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0de2c6e-247d-4962-beb3-f41ce3bb394e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d327a5-2e16-4278-ae9c-2dade3262745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5f7b8e-8002-4516-affe-01af5dad244b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633c54d4-dcbb-4c85-b313-6bcabf4ba450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a530a684-2586-488d-b299-31c2ea3665ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f6c957-3623-4de5-9357-d8ba453c04f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad9e28d-c82e-47a0-b9ef-8ae1b81dbc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606ec49d-46e2-4210-8012-f398f80db974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f1fe60-2eb5-450b-8509-28693679e211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d95ec5-0ae0-419e-8a78-fc37610675d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c34b1a-5e1e-4342-87dc-df8bbae91d53", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.20.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56fdd101-8ae7-4e80-8abb-bc6b25c06951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.87.221.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d1a492-370a-4d9f-a52a-7e3c726ba242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.24.224.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9406581e-5189-46ff-9d4e-e4a14e6fda31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3c0aed-9737-468b-be76-6f700bb58ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd52a5f7-5741-484f-91bd-1ee818a473cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e120ad65-1dbf-45be-86b7-190cc9c7d004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e4d64b-9f4d-48f5-ab3e-1177c456b064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba4c93b-d029-44dd-af27-74e09c94a356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bae19c7-3302-4de3-b7eb-e3ebbc111e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad52b8f-b1dc-4676-8cd2-3618265739ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa17da3-831b-443b-a77c-732c5e313dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba7b117-38ce-45dc-bfd2-f9f8782b5b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140ad19d-0ec3-4345-a4b9-ca1560c0fd0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86df9986-537c-4f04-b43e-1bebf7c397d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8666bd-c583-43bd-b06c-9b9a9b95cf5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208ad118-984b-477f-a392-37ded196ad10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2c3d99-a528-4da2-a7af-60554c0c06a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43dc263-0b73-43b8-b441-c93b385e1e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.167.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924da547-7349-4638-b574-9d70d3f439d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb20254e-c036-4afc-a189-0f263d325d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d796433-32f8-4a4f-99ee-bd99724c04dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd722be8-06a8-404d-aefd-4b7781256357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6869b5-fad4-4b00-a6b5-04857f1676b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db89d67-7635-4f5f-a447-8201e455f931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc3d1b9-79ae-44b6-8cb3-37b4af2e2699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334a56f2-13c3-4522-ba16-6cd0f4550183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3d0cf3-eefe-4d89-9a0b-090a59b89fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780fec80-493f-4f93-912a-57714a5b9acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2499b8e-1c30-4a9b-9099-05dda421aab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81515590-4585-407a-89ac-38f3ed31a0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.90.30.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f175528d-ea2f-4b06-9a9d-aaf1bae258bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.190.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49925887-0a2d-443b-87b7-e0a89eb17e68", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.146.33.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa0391e-ec50-4e09-8b78-22fcee97387d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.43.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b9f761-f7e8-49ec-a687-4212d58fb166", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.48.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d029ac6-9bef-488f-8aa0-aa61c0a87758", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.32.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9805cb54-7d62-40b3-a1d8-ed88127f747b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.212.14.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fa13c8-af05-4b9a-9210-dad772527a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.1.26.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757b77e1-b663-4980-bf39-7eb8c46182a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c350bfe3-b1c4-4647-a904-3259a3a08437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df924cbc-198e-44b8-bc2a-5d0ace2f1c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.139.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2849fcbb-514c-43c4-b295-be91697b3ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.184.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c83ea2-2bfb-420a-80fa-8bf5fc661454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.248.36.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b1ea71-2c45-4b9e-b91a-79ef201df3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4e869d-a4f1-4602-a69c-198ea89e5243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7649b6-88fc-4c4c-b263-56e6090338a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.227.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb9887a-a3dd-4551-a12e-1975e53e265f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.230.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c56432-95cc-4e31-b9a0-a02255a36c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986bffdd-b91d-40de-8f23-7563d587a57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a861b9e-95fc-4dbe-a2bd-f1b4d8497e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0358ca-4724-4f87-b5b6-5585510e93ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7800c1c7-d8e0-4bbc-9b94-fbcd2d0a3569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2712e012-9fa9-49b0-b7f3-5bce8f528335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ca4749-cad5-4dcf-83d5-9f3e328ab158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69912b5-a59e-4282-91f0-fdb57e7bc1ca", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37954d19-a6bd-42b8-8098-a16a801f7d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca256a7-6778-4a37-bf3a-40f1bafecdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafbc915-e59e-4bf0-8c38-db67e567a7b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1702d4f-2e68-4778-878f-c2c1c9516e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94dbda9-c895-4217-a638-333b3b3194f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407101ec-99cb-48d4-afd7-cc0fe6a36030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d570d40f-9350-4385-b706-12cf13d213be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c361a078-632a-43f1-9325-943f093a5b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e998a43-583f-4d29-9085-b6d8a55924a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.46']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aecdcf9e-d291-4784-8c46-936f00d25d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8b7ca4-3323-4a58-9d50-8db5b5d45d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505c21c1-4395-41f0-a74d-b3ae5b8c751f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38571054-8df8-4887-a8ee-6714547d363b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c3490a-bf12-4111-b6f6-de35982ca7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85727cb9-75ab-4724-b4ef-9659c05470cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2152c6fc-aea2-40e9-bc74-1f04e05c3d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfe5e0f-3651-4ef9-ad09-66a7bacb8073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.94.30.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c21caf-4147-43d9-87eb-c1266bfac051", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.222.150.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a95f50c-164c-434d-b5ea-e0c05de9e3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.235.20.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451248d7-d6d3-4a58-9af4-ea88d79913a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1eaf63c-0c30-4e6a-819a-60797e2bbddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ec92d0-5788-4d12-972a-24a36388dbb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba1d9ca-abe2-4d69-8fc6-6cdd16c88e46", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4b1886-3096-4e48-a243-a0447907f5a9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.245.158.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75551ac-dbfd-4224-be29-484792673ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.245.6.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04a9304-5a39-4b66-af01-6e19e669d8c9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.35.25.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c955e8-92f3-4bd4-bd28-b059ec7580d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33bc810d-0b6b-46ce-a3b0-97c107c6a356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a0e4f8-7dee-4be5-b74b-8a8d9a568f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9163a292-8e7d-4155-aef3-5285ed3b3876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c404039b-ed70-41ee-a9ce-85c3f2978cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d58bab-8acb-44d4-bb43-429dd0162c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76934e55-b928-4de0-8662-3ef1378cbc97", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d43188d-5dd8-4ba0-9e15-0aa86825d3c0", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc97b9b5-86a2-4f6b-bf60-1ae5b0f2a059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac11f3d3-e9bb-4846-aded-e3f941ae23b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c99475-7adc-4995-a090-bceb5702169a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76aefdb2-acd3-4287-b096-b4d35369d388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbb1548-e7b8-435d-a164-fca86cf5aeee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ad9cb7-9259-4166-bf76-87363842405a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce304d0-1990-489b-83d5-5906d182f001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e46a9b9-adec-4b66-b738-de0060967ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28b111c-55b6-4f4e-80c6-4107a4d17982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d720a9-fdd1-4ef8-a7e0-6a7632c2c746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef4e2ec-6554-46f2-b346-56a68238db5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f2f104-085b-491f-9f3c-070363d0816f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d5e9d9-0f08-489c-a4ec-2eecdea57fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33918211-62fd-4ff6-a57a-4c014e1da7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d3d285-b144-4e42-bb6d-770816aac88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed91b606-64c0-4113-888f-128bd4be2148", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.130.145.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c571db6b-ddff-4d2c-a0ce-ee2521f84e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.157.51.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae8124c-7ebc-45d8-859e-58702da553e0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.186.160.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d84fb3a-36c2-450b-b8a0-b3d9b02f388f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.186.185.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd5bb2c-c10a-4c6a-a01d-b57ab3880deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.32.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0836b4f5-bd2d-4149-a33b-b7668abfbb2e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.33.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01900777-c9ae-484f-8a73-89b3f5e5bd20", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.42.171']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2196b008-2c2c-4f93-8133-939d8a185482", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.213.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd7478e-41cc-4a11-8cea-17bcf898c56f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.27.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c068e1f1-b5df-48f9-b983-1c5a9a1258ba", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.4.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58e76ea-f2ab-4108-be33-95e31fd9b1c5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.189.107.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d85fd8e-8ff3-4308-8fb6-d000b18bc193", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.189.126.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40bba76-76dc-4546-963d-596fb5d42404", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.189.176.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9c2fde-9950-4e6c-807f-6f6160d36d8e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.189.59.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad741a5-cb63-49b3-825b-95ce4255e706", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.189.85.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef43cb92-ff8e-430d-8223-a1d4e150430e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.38.30.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7c9feb-ed4e-41a0-8e75-5874b063113f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f784d49-ae9c-4128-9739-a7d38420730d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a52adf-fa65-4980-a605-20cb06599424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87fc628-a74c-4e9c-9506-f72aa42b0ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d2a8a5-542f-486c-9e1b-6c3c08fabac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09480b2-caed-41b5-a216-e0a0fe4aac6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73cc6a37-bfc1-4766-bd4a-684b1d3b96b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1319d7e-76c5-4d11-baec-d3ba2f65bdc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40d3b67-147f-48cd-ad84-4845d5117fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c6ba80-2394-469f-8bf8-5f66ee079301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd39a26a-adf8-438f-95c7-40b8bdc766a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0e0e8a-cc66-4fe0-a9b4-47cde94fc4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0884995b-2a74-4157-aa35-1130649c588f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.126.120.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6accac8-39d0-490b-8f99-d366db0527a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.134.202.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a338a81-780c-4ef9-b276-27a28df66e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.62.207.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecec4bed-322d-492a-b8e6-bf83e337d63b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.124.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86747af4-d31f-4d9f-9911-0f6f5c11dc8f", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.159.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216f7285-3d5c-4ac7-88ff-b3d054c6ceff", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.136.189.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134b52da-07f8-4ef5-9567-6041030f1279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0697d247-b451-41c0-b3c9-524cd3dbe045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.109.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a8242b-203b-4bd7-8352-aa78764d5c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.115.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2c53bc-ab47-40ae-a4cc-a142663ba38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.116.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd7eec5-769c-4694-a592-deea76a06c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.208.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4815364c-0d08-4e6f-85db-0efa07de56fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.210.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506aac5c-442b-4717-8e65-072765e436b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.229.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a568561-6672-4455-b56e-f6b5b175f844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.77.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199955d7-e64f-4890-a764-9e5b36926531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.77.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9aefb7e-e31c-4b64-94e8-c6163fee7d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.80.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022cbba7-4430-478e-8b1b-88b722e09934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.242.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8386378-164d-4677-b4ea-5054507ae281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08bb294-dd79-45d4-adb7-22540343881d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.144.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247ce0dd-3017-4fc3-b93d-04a34cd5b1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.149.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a617d91-eb8a-459f-90fc-cd671ba676aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.166.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3a2a18-7eb0-46db-9ff8-657b17f6fc8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.17.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5d3d9e-b34b-40de-989f-9d797023203e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.174.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d018f5c-06b8-432b-898f-abb20f20b565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61767ba-aa37-4836-8e4b-78ff6f4083ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9269b65-6e3c-4a68-8af7-36f25436dafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d271c2ed-af61-47f2-87af-3981cf5bfe36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1281ba2d-ae13-4b49-9339-ee1035302464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa09a374-5296-48cc-abec-3949e8e669bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265b892b-1dc6-4907-b621-ab9c292bec90", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.100.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e42261-9836-4764-bd6c-9ded248629c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d47fbdb-7004-46a6-8464-bb382853e47d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.145']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263d687f-5336-4503-8b8d-68eb6565a564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44bbabd1-0f84-4099-ba33-e2d326795364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629756fb-270f-4ba7-873e-de49465435b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95386ea9-e84e-46fc-9fb2-7e3453181173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d761193d-96fd-478e-b304-2a975f3921d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b239d23-b783-4f09-8363-2ba589e46320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc4802f-858e-424b-a436-e117b0f41189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c76957-d42d-470b-bcad-ef40976209cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.18.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b1599b-a724-41e5-a50b-6fd8244e375f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1cbb48-7f95-4bbc-aac3-8c996fef904a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db273a3-7343-4bcc-9eea-a81b81432b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e64854-05ae-43f2-b0c3-8aaf43cab986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9dc985-ed68-4aec-aa95-c623284ea0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251fc9ff-05a6-4543-93fa-9824460bcef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282cdbdb-959d-4f34-a682-cb1f5c63e347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981f8709-8671-460f-8d96-95a31055d0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.42.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3889772d-0841-4f1d-a174-e2e927b3df56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.102']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5de54d-d882-40f5-81e8-ba08eac07ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df587e7-8357-41fc-8333-83fc9147869d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ed4277-0862-4248-9d7e-3184e45c0107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e02e4c6-4b25-4079-923d-8d3ec527c146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7672e8b3-8564-452b-b3d0-3a7e84d302f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80cc8acf-08dd-41cd-9ae0-8d6c090305f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fc17b7-4ae6-43f9-8957-0e8a8b4caafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006d6757-2134-4af8-bdb5-119dbf694934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47808f36-f528-40e0-83f1-450f283f3107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06675cc-7521-48f8-83c6-3b4bd9f305f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b0e086-bb35-4126-8684-f56cf2f0c737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542eefc8-2e36-4fbc-aa32-f56b09752bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346b6b8c-168a-41fb-9d8c-0f50a9bf87d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656d88fc-1ef2-4c8b-8d3e-d3315159f017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dae4363-a1f8-4528-ab73-27530432f4b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e2a970-0650-4636-a90e-749cb9b6aaf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.93.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8805d590-435a-49ab-9102-a8991f38fe08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.238.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec142e96-247d-4bbc-9916-0a9ef5fa1270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.183.28.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ece971e-c3c3-4232-93bf-7d8263ec039a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.242.124.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f535be5-f326-4230-b79e-8e4e278a9ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec2e5ec-fc06-46d0-9f2d-56cb286c8ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee005d8c-3521-4a96-9f69-4e8726d05ea1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.65.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b405b0f1-0fa8-4c87-b4a3-abc9132326e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729b4530-f12c-436d-8351-dfbc3801e46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3264df-806f-4f03-b6a0-60fa66097429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffad952-0b4e-4b3a-93fe-d3ccbf1df590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6d31f9-11e0-4216-8317-13e4de82b430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1664a2c-f1b7-4949-97cf-e9793e6b05a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b13d7d-9378-4b2f-aa3d-a5ed7f574d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76c4328-80c6-4504-a4cb-51f08211e74d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f152107-03d1-49f6-9d1c-160ba5775f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.93.117.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89d084a-f5f0-44ad-b3c4-0f291180c168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c61aff2-c31c-4256-ba7f-c4ce6fe3a6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.55']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc52169-f711-4e17-abcc-a5cb399caff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ceedf24-b8f1-4f6d-8fb5-bb331002d8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa11ed6-a6fb-4a18-b646-79b4045ae1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27493ee-6460-4154-b9c5-5e300bcb2541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8f3348-c5fa-4539-a404-3346c64b2d57", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.10.14.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c45d00b-6e97-40e2-9488-267ff604e159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.10.3.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4703c277-34dc-4900-945a-4f37d7f6e97e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.136.223.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff47f9e-c5c9-4d41-86e2-5899473a0fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.157.3.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34a3a60-4590-4111-a587-652acd32e114", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.213.143.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e36587-61fa-47b8-ade6-a08b56068236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.213.155.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38f8674-8057-4bca-8a7a-1ce0da0fa693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.41.177.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5691a76-525c-4173-9171-2802c5071612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.121.141.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965b5876-d63e-47b9-8e71-7559b20ab095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.84.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a84ff6-fae1-4eaf-b187-723f3c0738c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.180.146.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe57ca7f-669d-4e65-882b-786135b7ce47", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.208.125.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526d750f-9e02-43fd-befb-6c56e420b047", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.67.197.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfe4684-2f5c-4fe8-97e9-cc494580a6d4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.111.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2306b97-e876-4706-a3a7-a8792b1e2a07", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.150.212.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5482c335-1e72-4fe1-a814-d12636ae00d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.245.50.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b683fc3-dc93-439e-90e6-5f0876aa41fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.36.138.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5288a659-a77d-43a3-bd8f-0da6a9417e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.97.78.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a8d9c59-cbb2-4eff-83cc-d5b5e2b7c794", "relationship_type": "indicates", "source_ref": "indicator--5288a659-a77d-43a3-bd8f-0da6a9417e93", "target_ref": "vulnerability--94e105c4-21ac-4da2-8708-f98b6fd14014", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b217fb8-1e49-49e0-a21c-faddb44b9586", "relationship_type": "indicates", "source_ref": "indicator--5288a659-a77d-43a3-bd8f-0da6a9417e93", "target_ref": "vulnerability--661a1fc8-ba83-4ba4-b721-f04a6d928639", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30b93831-1668-4914-8e1b-d12d21a8b603", "relationship_type": "indicates", "source_ref": "indicator--5288a659-a77d-43a3-bd8f-0da6a9417e93", "target_ref": "vulnerability--1260f962-2d21-4bfc-8116-57f1f3b0d401", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484f10f6-ab10-4603-a13c-13767ea37add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.139.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172cc92e-7495-4cef-ab85-0470f52b39d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.181.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07bc6e87-8365-4372-8c5d-0c5a2607c8c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.32.110.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb0e9c5-4d4e-4dc1-ba5d-458bafd5346e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.73.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367a1ad5-24db-4ad1-83ee-a90ed5bd3f79", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.105.129.171']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7f92b8-9815-483f-89cd-cec4c4ce92f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5ce132-fdfc-4222-9d69-baee5936d4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf5f38a-31ee-405b-b1e3-c160b1ceecfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0fbafd-5ff0-4366-a958-ec1c8a644e6d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.159.216.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd47ab8-8b9f-465a-aea5-69477adcfa2a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.159.216.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ad21d9-748a-496b-9208-d6dd99bf40e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb81598c-7502-41ca-bfe8-7bf45d8ea166", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fca922-0eb5-47ab-ad99-9c5ee21249ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3273ae7-d5a3-4d8e-80b7-cb7304c710f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c1a819-03b9-4cf8-849b-0fe35b288d1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30806b04-e03e-4c03-bf38-d2276b6249ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8541459d-2e55-4de9-aeda-9d39e8f727fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4fa5b9-ab55-44b1-b945-ec8e44df0101", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7453ed2-b28c-488e-895b-10c65dcbac81", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4cf78c-7d04-4ebb-88bb-96caf3f504e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555dc88b-88ea-4cb5-93ee-e529fd5607ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d1e78d-e4c4-4de4-b32c-d12197219aa9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01dda914-8ce2-43ce-9815-41061d29f15b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db50c19b-ea6c-48e7-8133-39b6b3cd9fcd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c19359-022a-4ef1-b309-7bbf564f8fd0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9319c108-81ea-4a81-9d7d-d88457db0356", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c273286-60dc-4eaa-b413-1905ff54e6a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1522e9b2-15da-4a22-99f4-bcfad590fcd5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b7ae8e-ab5e-4be4-b76e-ff54f2af9525", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee3417d-bff7-4382-9f02-d0e28eb542b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c614f5f-7be5-4f85-ad0d-714893dca94e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78f9cbe-244e-4973-ab7e-ef43ac4a8fa2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1ab5fb-4c41-4904-aab8-60f605d665ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d78a007-79c5-452d-ade1-fd528ecfe9e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1ea1e2-6fa4-4cd3-b60c-06d3e6730954", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f4d035-8430-4f2c-bca9-83c67feaee2f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1dcf929-569c-43b7-a536-1df5a6278703", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92133383-571a-49f4-9f9d-92cb80f3748f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a838f33-0d2a-439d-a11b-498d333acd1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd2a22a-3eb0-4c35-9914-42bf0d3e618c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef068a61-ecef-4f73-96fc-23018b036662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5a4ed4-1189-4124-8add-e529f75ad3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74601e47-57a7-400f-9896-93567a52d7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a4695d-ad86-49c2-bd0f-cdcdd7e1b86b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3f304a-750f-4843-8c02-914ceda3ff87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ec51fe-cc4a-4e28-9630-ead798a0aff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6bc57b-1002-491d-b4a5-cdd55af5e9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8f2e74-beb5-4f58-831b-a63c7e7e63ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de8d8db-eeed-4285-9aee-5c8fad7db3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bf6ba1-7bb0-497c-8cee-6de8a0e86900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012c9632-fe40-4f4f-b799-52675020e1df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bef5d37-771b-4f08-96f4-72aed42273fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b5df23-5587-4b4b-b32f-d9f9247fa9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608b356c-5696-47fc-b89e-7e9828061ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bdbe6a9-2799-40c4-95ee-7fece92d6413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522df16a-4839-437e-a104-586aed515330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7ea488-b3a3-4a52-bdf7-3e3600c4bff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7628a29-ec1e-4d64-b51d-dc9325ad60e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee9c3ae-47b3-41b7-80e3-60fd579d3b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149555b4-c367-41c4-8252-bda9ca7a69e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3570b5-e3c6-4f21-b6e3-7f7235ad11e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed88a541-d5c7-434a-90d5-d3117091a271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2dcaa3-1aa3-4841-8b2d-5ebffb7343c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77840efa-9f66-4699-9031-fa697479dec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3309e3-06f6-4a78-854f-b3b2a7d62edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b45c365-4477-4761-b1da-f0d4986578e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126babe3-adf4-4937-88e9-3c89da0bcb6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc1bfe9-47e1-4614-bfb0-273417d773bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c3c7f7-49c6-4e5e-95d1-e0fedb3982db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affc519e-4363-480f-b2d2-3e6137c1b1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0441a070-1ecc-4465-979f-2b951957f14e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a6365e-0fe6-49d1-8285-4355a779ffd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14214b2-957e-4bf2-bc15-d00d50ba6331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e06e6ca-27d4-495e-8634-acd34b516f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813a2e3c-02a5-4bd5-82db-2f3f4a775606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8728d8-c309-47d9-8e7b-cc942f8c07ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4bdef5-95b5-4894-a659-cf3574780563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57d3f57-1a45-40a6-858a-bb9d21169e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6fb5f6-1c6f-44df-b5a6-12be0a3f5c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295e573d-5b18-4266-a9bc-99ed7f40639b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9127dc-4dc6-40ca-966a-2e57738ee2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111e640f-7b89-42b6-8b79-22bbcd5f112f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a36159-99a8-42f6-98aa-d3f4b4198309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfe3cc5-efb1-4d69-9ce5-d8bfbe5c9941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1ae4b9-acb4-45de-bf43-f0d64993defa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeff2056-1c1e-4906-a61d-c35f0c42c5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f67d63-1d1a-456c-918b-9cebf2af5d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46388e5-877f-46dc-8925-1c802fc7e7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff8774f-aaec-4184-82a0-4a0de6eef7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cb1584-d1a9-4ccd-b6e8-8cd6e29a4826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512267b0-e0ac-43fe-9a42-b92a908dce6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8b6af2-d26e-4fbc-9142-f19722b9fa03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a9bd02-e6be-4019-afd9-5a891d07b025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.27']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d322e3-1f1e-485d-9f32-3740cc8b2def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc54e36a-4363-4271-9d51-b82f3c70a079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6486c66-2a2e-4a05-9c87-6891ecd4badd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79940c69-ae18-4077-b7b2-927b7fd3b935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e53c96-8e85-4498-920e-9ed26df1fb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c64b213-a338-482a-8551-6fb7f0758730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2bdc83-cac0-4fce-a71f-4f4479991d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b335a059-aaae-464b-b715-1509afefea3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f110b3da-d6b9-4641-95f1-ec0ea4448ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e217e47-1e5c-483f-b99c-df4fd16b1686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cdc73d-8c08-4923-86d3-a7af56e73e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570fe2f3-5c46-4039-9883-fea062920573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d846dfa6-4ae5-4688-9f84-285013fa9d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0b79f4-9223-468a-9fdf-b540c889ade2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969841bf-5c86-4d5e-8498-ae3cd4cd77fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffedb64d-2314-46d8-bb83-518fc8184b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5efb67-c711-4df0-adc6-679bae8d56cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb16d49-7da9-4657-85ed-d51be65a5cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c972c01-0936-49f9-b8ef-e1976ebaefb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd2d6c9-f405-4514-8251-619b25b5b66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851e6c73-892a-4ad3-8511-7a22eaf704f6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.225.237.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fc1179-8a1a-4bc6-b3b6-3bf4ac0ceed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.147.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dda592f-c5b5-4466-851d-bce6cc7163ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330c5694-2374-4b33-b781-7d25d27f54ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.90.246.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b5abf6-1bba-42b5-b718-5f6f28af4eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.95.179.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0764385d-9ef5-48fa-abe8-2cdd7127c939", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.97.184.61']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da87befa-ea08-4ade-949e-45b9eb6e09ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe74d77-d686-4178-877a-ed550effe7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e319d8-90a6-4ce1-98c8-3594ae95d89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889e3c35-7d8f-4865-a01c-ef6d4115d63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb817212-19b7-43ea-9841-c095f819fd9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5885b802-3800-44f9-bd54-27fa0d390413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e30d5d1-a913-4cda-bd2b-d07be67637df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407a6425-6501-460f-b487-abdfa8d0b269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.79.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e600c0-cc13-4ed2-ad61-e122ddda936c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.163']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857b1ca8-0b18-4f93-a701-49865d6e1597", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d827a124-c976-464b-8000-1af6ad7a3775", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893242db-97df-4a61-8135-8e2fd942db45", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.246.54.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accbaead-968e-4502-980a-eac40e710c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.249.128.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd6b79e-3869-4c9d-affa-ef68549e3cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.205.172.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb617c8b-9d53-4827-b794-191ebc387660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.206.10.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58f26ca-275e-4fb0-b3ee-bfb6e52b321b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935e087a-23e0-497a-91cd-a41e494dd5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01e204b-96bf-42d9-9365-9089c0849c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d1e769-7373-4643-b82c-76bf3263fe4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db664695-5460-4805-ad46-865ba4c73a29", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.225.216.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7c5e34-03d3-44a3-8c23-f2b9326edc67", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.247.164.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541490f7-4321-4647-9e45-beec9d72f522", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.247.215.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ae30b5-d4a4-4a7d-9fd2-f3eeac7f061f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.247.216.47']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b2bc59-b1cc-4868-bc86-ea9b52ae7888", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.247.55.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accd079e-0b75-4c15-a790-c5ad576dda87", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.248.12.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99eab437-b5ad-4bf8-9cbd-bdb00a50169c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.248.184.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd8e919-2150-4f14-aa28-6ba8874b2e15", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.250.203.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89637a4e-61e0-479a-aff8-8634957afacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39395463-f8cc-419d-84dd-7a96210f54c5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.189.182.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4a007c-8730-4f01-9ee0-78f517fff970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.203.248.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d703be-5bac-406f-bec2-40b2e1ca8f37", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.219.32.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72a26b1-2b62-4ec7-b5f0-f68c1c06038a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1ba4c5-6d83-4fba-bc88-7bbc6abe54e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4f13ab-51c8-4dfa-b086-e35a62b4217f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c50dbed-4eb9-417d-99a1-a69127439e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efef18c-1468-4ae4-b0fb-c7396b299143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86551668-87ba-4297-b6b1-7ad1dc776d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f927259-da3e-4064-8c47-e70c74dac246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189e2690-b9be-408c-abf9-12249b570b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.250.166.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2769194-df5d-44aa-a2c8-a55f6bd7482f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.6.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e68c41-7215-4174-baad-35865fc9f796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.86.225.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2de3d73-8029-47cb-91b5-782e82fc0f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b26a74-f38f-467f-b7c7-3134dadaaf26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.229.186.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960c9d09-ec1d-4a4b-a80c-432f60f48613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.109.113.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea05163-182c-40f9-a882-fe1e9dbb48e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.123.150.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ef18b8-6b3e-4b96-a1b3-23e6ff071cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.124.130.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84250ee9-32b2-4752-9236-78c5bb03d312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.134.137.100']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0a38f2-3077-4baa-ab0a-22cb2a1b9915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efea248a-534b-4d6d-9fcb-09b174f852d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97fb558d-bfc0-4c8e-99e9-41131c490879", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.173.63']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fec461a-46d9-4535-a290-a3b929dd2826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52561b2-09ee-481a-a277-7c6e7fd95324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244df089-af3a-4aa1-82e0-ab7794e99f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f767ce28-0b8c-41a5-9a80-a33be178b213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151694cc-0b17-45dc-9766-c42f6eb6e709", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.193.232.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bced32af-83cb-440c-a74f-5de984c5b50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f081200-776e-4ef6-8c86-63c841c576fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870166d9-f11d-4ee4-86fc-41e9592f86a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd758fce-3434-4726-b406-0080847db280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3d3d1c-37c7-4195-b9f9-633156faeab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c5675a-0322-45d0-b45e-c5221a1ab7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d0d025-7e17-4f76-a584-3eaee5d17390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39ad940-bedf-4d6f-bbf9-c2e083ee961f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5044098a-4615-4c30-9436-421951571506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31cd8b9-8a27-4534-a84e-7c2cd1a13bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02caa72-c67d-4ebb-a597-3b8394671f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da616d8f-6896-4d98-b219-6b299fbb94ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642de111-5df7-4c90-acee-75ba3dd9d744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88429a56-fb2c-4da6-99a1-9a3a5255be2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6602d785-fcff-40f0-b2b3-25a0d534196b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dd55d1-c122-4afb-8a8d-14345c9b1199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f342c4-c36d-4c7c-bc73-f6a329767b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c40a45-33db-4fa1-bef9-3cc50044835b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e42143-13a6-4622-8914-48791e98013d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8461173c-13e9-4bcc-9cd4-7517da56bbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44194edb-d924-43ed-82a9-d3c0b4b380d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d126fb37-d76d-4f09-8def-e3ac26a3c39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.193']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f267a11-4974-42e9-bef7-dda563e580d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99728887-a90d-414b-8f51-8d43cc9b2be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.195']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfc3b7c-d8a8-4d2e-9119-646a290ea075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2ccff5-9e39-45c1-859f-194e59966130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.197']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0ecf27-ae01-4c9a-abea-d0000f9ab9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.198']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84245c4-a8e4-41e3-8731-178ad8512995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.199']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f903439-b08e-48a2-aba2-9e6b5138b902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5bbb2a-afa8-4193-9207-7ab61ab380cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00e0384-28bc-4de1-874c-4bcb200003ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218fcb36-8f31-41e8-92fa-1db11b2cce83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36fb2269-e9ba-4995-9dfd-265383e5ddf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63333d26-69d6-4d06-aa9d-8bf44fceef83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81ec0cb-7824-4479-af1b-29f546cacae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccbcf21-fc17-42bd-a22e-11abcb1c04d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c637205-aa74-4cb8-8fa7-efb798cb9e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.216']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576b1d16-b763-4097-8a10-7793220ff8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d39e019-578c-4abc-a25c-89c8398ffd36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa93a48-6431-4078-be41-ba72113648b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3729f6fc-9fb2-47f6-8da4-01b75ec73f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd491ad4-75c8-406c-a30e-b6de25174038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09004c7-a273-4014-8c14-186a2e849c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4c93da-79d9-47b5-890c-4c29628cc851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.222']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11ba8d0-6517-4b80-a92d-fe6153833afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d235583d-7f01-416c-8c4e-b9e491efe685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760c4102-7999-4fce-8d05-ee305222da5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be908874-57cd-4e08-8401-79640d499814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee3a0e2-73c5-4a76-b996-d7f03ed6244d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10430066-d7c1-4903-8317-d686a96c1043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccece0e5-776a-426a-8532-e8e32de0c94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06205deb-9642-4cb3-b35b-f5ba6061e941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4662ef7-9258-435a-9e9c-45a73e9e59d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0388cb5-c4d5-4a9c-9261-bb55ff501d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.240']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0aa27fe-d3c4-484a-9644-89c1bd7ddb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.241']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96677a5-f453-4a5e-b633-beabde4add0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.242']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ba79e1-2440-44ee-9b48-0f3e25512084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.243']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20867dc-346a-4440-a057-a7b3ddf9cd41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.244']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d2dc9b-0aa5-40ce-a33d-e06ca549ccc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f881af-16ff-4af0-85c4-9d98c425cafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.246']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca76df6-9847-4417-84cf-871b8933ca8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.247']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f68487b-8cea-42b4-8e23-75a007c39cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ef1db1-e946-4dd6-91a3-158df1eafe54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.32']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f922dcad-7552-4d2c-b0c0-9792addd8d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fed36b7-5449-4587-9a0f-0d0ae6a30ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776ba51d-0314-450c-99c5-3787c52baecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca71610-947a-41cd-b7de-050d681b7aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406c0e20-dadf-4728-9a0c-5bddbfc432ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d2f5dc-0cb8-457a-bb94-79e829d9b4b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a35a00c-4b48-4c7c-95f0-5147658ec4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ac0727-665d-4fb1-950d-adddb3d25341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb59644a-7778-43b0-b7c3-2174234b4b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53633bb3-71ae-44d2-8ad2-8e1ae81420fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be19f3d8-9603-4236-bfa7-ea44ab440350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.207.244.97']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bfa3d1-4547-4559-afc8-0c25e9101070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0526aa-d175-43cd-8531-8eb9df9d71c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.112.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aadfe04-d555-417d-8cac-5e2a8acc37db", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.179.245']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842c213c-65b1-43ad-be59-55af33f3dd63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.0']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c5bfbf-14ce-4b58-9e55-5ae7af96db98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836d57c1-ba1f-475d-aaea-19a1666ef738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f7ee2d-a2fe-406b-94cb-3f706d6ccdba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2724b75-31ea-45f4-a3ac-8eba5ad0f119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322943c3-1a2b-4356-8fd2-4937ee138a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f26e93b-4011-43db-956d-f4935e148329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d89c882-1681-4d9f-a17a-8a5e5f80fd76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.124']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe78749a-e6c8-4d96-a127-3e00a3806aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004263bd-38b4-49a1-9f46-048032b0bf14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.126']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78b7425-5a23-4904-8ed5-05d3ab4b5206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798da572-a2a1-400e-8bcd-ad95d4647fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a544d7fe-75c5-4da4-b8e2-6cb91d2925ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94779ad-d0b5-4361-b8f8-f66fc773740c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2abd42-74e7-4bbf-b1c6-b8f687b76bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095585c0-7997-4e12-b83c-6e7513a9c128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef261307-2eb0-4c4e-bfc8-611c85c14454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714bb58f-cff8-4d27-86f1-0c8e61ef0cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebccdff-ce27-47ef-9cc1-467d8628346a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4792089f-1c88-4778-91d4-fb8d7f70ab6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff136e0-0cc2-4e5c-8259-42aa0d620ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.136']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1686f163-b935-4a53-985f-9bfc67224393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae49a9c-44f6-414a-9da0-61b542dbde6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.138']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf6175a-642e-4078-bd46-b841f83d5074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3fe39c-9426-4910-952b-a00ca89e4670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83e64a1-ccb4-410f-972f-78a7b49fcfe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a562b9-fbb0-407a-bfdd-c62335db1ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5fbb4d-519b-4bdb-b8a2-4a5a3c023a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.142']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4440268-5649-4648-8036-4593e6d1b06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932deaf6-21f9-47ee-a3f7-818b481b8c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f0304d-5a72-4029-8cae-14e77ec822be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9edd6cf-cef5-45fc-98e2-675cf1e85405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.16']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f10ca0b-3aee-421a-b1e8-0dee20629e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.166']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9eb8b3-0651-4c1b-b2fc-48cd38200268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3469d23-250a-4d78-973d-90974b59748b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9642044-02f8-4097-8afe-fe4a53d5eb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ffc0969-9fc4-45a0-aa37-db7ecb1e91e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ddf16c-05b0-451d-a460-e4138f27f488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7557ca73-8ff8-42b3-a189-0134d2aacdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.186']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb883de-5401-45c5-a3a7-7ecaab37fb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb360093-9376-4b33-8ef8-cb248666e4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.188']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f499224-0616-47ef-8004-227201e22a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2aa1926-b783-4445-9f64-1a6ec2805f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79716db1-9447-46aa-afaa-e0fda00eed7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc4c8f5-f356-4416-91be-819784900df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b552919-1b47-4cb0-9b9b-09f2b9b396a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b18d9e9-6095-4201-9c5b-96b05c6b1f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cff443-c555-4fcf-9cc6-b608426e08e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a581f6e-475e-48cd-a71b-6b1326ecebb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea943d74-d33e-4f87-b559-3f22da69bccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8131015-555c-4ab7-9066-be6101ded9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2fd7bd-8b5b-4b1d-9579-68c7b2ef8465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3419e3-383c-45ad-9bd4-ddd67008aa05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ebab92-729d-4c6b-a4d9-26ddb750cb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb49d1e8-8a31-4422-9f90-9164e489cd5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94a8566-0c31-4098-9d45-0576a80dca4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a435579-e3fb-43f6-bc1d-510b5cb35dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56c49c9-5f02-449f-820e-38e98cd2d1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b263b388-f1a7-4ec4-9737-9af9018a0e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d4f4fd-704a-4728-bbc9-1b1e6acf8db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8916a01-693f-4783-8c50-a41b08301984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e30a23-f1db-49d3-be3d-2651e7472ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d142705b-92db-4451-9d20-c169dee5d4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd0bbe8-6edd-465d-9faa-774424ee38d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742bc0e3-dbfe-4e48-b9ab-ea74ccd67825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4061f4-e3e8-4d92-88de-10947a0aadb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.24']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f62b12-dd94-4270-8747-56e6266fd8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29b208e-3e6c-48e7-b653-a97e4b4a45ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81eec8c6-9796-4310-ac7b-1acc96fd6a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b909ce-2e19-469b-8ab2-e78409d2d33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decb2669-b82a-48fb-96c7-c73bcb924454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f97458-912f-4acc-83ec-8f88448e56f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d24c8d-15e8-4d4e-af39-38014154910a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca234b2-73f8-4fbe-b620-9d44092c77f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73301664-a488-42d4-8724-5650f83d090b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e84d8b-f086-447a-88ed-c63fbca685b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.26']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35cc970-89d0-4f0b-b071-f3e4df7ceb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13391344-d552-4042-89e1-a9ce03ccc9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9905f6-d1a6-4b99-b46b-e9de372e20ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4bcb0dc-2d2e-4eed-b416-26cab3dc95f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb62db7-4a4f-47c6-936e-c51af1a34e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4694dc-b8fa-4c81-892a-2dd692f26e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7af8dfe-a379-4c6e-8c40-7966b879d2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac3c071-efe3-4b6f-b5e5-87944b1c05b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ceeb9f-9f29-46ad-adfd-daf1f2416c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcccd01-edaf-4b48-8dfe-37de0d5eaad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbee6cfa-3d02-4135-93e8-8b9bd46e9832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594a2d29-9590-4f73-b555-ee7ff031feed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f892cbce-3868-440a-bc8e-d89392dc33af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f53aa6a-7b51-4620-9450-b0329b010bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edb53d2-57d8-42d4-8a12-36ba35272430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ca8b19-9c28-4a05-971e-a60705b3ce59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.90']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115747e6-4265-4c43-844e-ac3d53fe2c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cadbc57-cb09-40b1-8b44-b149ab549f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d794f13-2e36-4f06-bff5-7676e236c21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09f8696-c4f3-4580-8e02-ad162ab258f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.94']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f2e18e-27a4-4c50-992d-20c74eaf5acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a983d4f1-2c3f-4678-bf06-5fc44bc89ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.219.137']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b3fb84-2ab8-4580-8a40-06fef4eaba59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.0']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fcafec-13e5-4f8a-891f-5a8e58e994f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be86627-379c-47d9-b14b-21bcb85fd414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319b299e-4ba0-4d5e-8c0e-ec0f64b18782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.104']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829c15e6-a2e4-4fb2-8054-444dca70fdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30451dd2-057d-4ddf-90d5-e7174bf8adbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a361ab4-a806-4cab-9f47-2500e789f29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d2de19-aa30-4e17-8bf2-f7c2b1cc0ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.108']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be520698-abb2-47bc-bf56-32260509d05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d823316-ce62-495d-84f6-9741a3607656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6716e0-0b47-4455-8c9e-8a3aa8003aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33b8d6a-c9dd-4f94-b316-ca2d83616079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc4e830-d73b-4d11-8768-23cb211fbeab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.112']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae4b642-4fbc-4043-8ece-fd6c945e7977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61577a0b-ae5a-4383-b8db-1419e2f8cedd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c35d6b-d0ad-4e01-bb28-14a5b28384d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231d46ab-0755-43e1-ad0f-fe2a26f7fdaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.116']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f176e8b2-1132-40c8-ba17-967850a354ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c9a2d6-59bd-45a4-84f4-5ea2c09733de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.118']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471b8b9f-68ea-44fa-acd0-59dcb572a74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a917e0-02d4-499d-90e1-ccb11cc718b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6002541-ddb2-4915-a506-99c030fbdbe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.128']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cc7b15-0924-4f1e-bb17-ca711aae1d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9ec12e-d272-46aa-95bb-1629990415c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d43eaf-98c2-46ae-b636-4c32c34ee4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca50c6a9-0116-4d17-b176-2394e28e9422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a7c6db-3a55-4ddb-a84c-8f335ff0d282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.132']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5537e41-2b9f-4f86-b979-36ede556d81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09819d3-59d9-49c3-9609-8c52926d38a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a29bdb-c9e9-4e12-bb65-eb981bd85a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59195479-11e2-4451-a446-ad716fc9bda1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ffa9b85-8c8c-4e6d-8fdb-d1636a568d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2f3c97-fead-4efd-8fd8-e5f80682ceb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10f8603-15cb-4db7-b7a9-69017b9a5534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f904d9c5-5853-41c0-aed2-489008fd0f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.146']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fea708a-31da-457b-aab9-13bef1cddca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e3aa17-ae9d-4586-ae19-dd35c6be101a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.148']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda8582e-339a-4187-a619-10361abf17c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db980f11-f22e-44f5-a692-3459f37ffea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc2fe80-1049-4dbb-8229-9fec7de3ea84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b204c33d-5cbd-4067-bdcb-76c6026d4240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11089398-95c1-4451-b257-1716c0d75168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922d14f4-1b41-4356-9709-1d4ae6cd8670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76cd196-ad94-4ad7-bee7-bf7a1ac3689b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77dc7460-9f22-4933-b38c-f3a711ec8506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.156']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3259e427-a5fd-46ba-8d38-1d5883869096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01a2f10-699a-435a-abf3-437c8ed92f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65c5843-0265-4944-8e95-4a7323348f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184894b8-87ac-49ad-87c1-65cf3a7ea4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d5deed-9647-48bd-9bd8-ae15a1f98880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.170']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7254d0ad-8b0e-4148-931f-c9a9003a516e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1014083-77e3-4269-983f-691ad414f135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.172']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21fc5a7-bef0-40ab-8fee-f3d52f60fd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbfb944-4a2f-425f-8d8b-98038eec3766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.174']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d22211-0ca6-4b38-99e9-f458ef1c35aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2da698-42ce-4572-a013-66cdef3ff419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bba718-7c22-4420-b2f8-eeee90f293f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.190']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70627d14-a2b7-4a08-a188-03112aeeeb50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6e80fd-ecf8-4146-a0a4-16da1b8820b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ee243e-826f-453d-8e78-67c33252a3a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.200']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4168122b-7048-4bf8-a2ca-34bf439c87df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7aeea5-6d60-439b-aafa-88c280b8e04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.202']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70a430d-41c9-48a7-8bd7-bc85b77a4304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0afe1a1-74a3-4ba1-b07b-20673176d0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f247e84-a7bc-4525-8df9-e070b4acc45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8648c35f-b5ea-4d10-869a-bcfcbb4f6e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.206']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ede20a-fb0a-47d6-ab62-8691e7f65992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a546e3cb-8546-424f-a2ff-33b23d14fee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.208']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76663423-29f4-4c6f-93ba-e4163c141484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445b0e57-3f57-4ee6-805b-eff5f44cbba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6790a805-5214-4493-9fb7-c221406c0256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481cc7df-c487-485c-838b-e35d46bd74e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b241fba-e5e0-4617-b361-f597308c0d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f1b10c-4c19-43b9-b458-f57773303e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e4dc95-20e0-464e-9011-afd287ffd680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc163e0c-9b33-45c5-bb06-0b04a3ddca88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74d79dd-682a-4be4-b550-f524f5866451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.224']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36e327c-67b8-4da7-8939-a67d00e20cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17d657f-0f49-4dcf-b180-b18e47b0a4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.226']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb99aeb-e041-43ff-aa0e-3d0e511a4a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8baa7409-7063-45cc-b5c0-42b46dc3c3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.228']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2546da-218f-4814-b33a-0dbf479e8949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc7245c-4087-4a60-8e75-f40f13e16999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a77aa53-5515-4091-bd70-73c3e01e90c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75806c52-d2e9-44a0-a232-1562287e7e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.232']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5f617f-429e-4543-975b-a70c8bc46f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ed0924-4fb9-4b9d-919c-6b162b2e10c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f8a463-67cb-4c77-809a-3ea2c0fe4f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f241db-5669-4bef-96be-05a92004afc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.236']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a59f69-490b-4bf1-aca9-6d3b240290a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa971b92-6401-4ad3-8e91-cb82d43500cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.238']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa80d088-221d-4da3-b2c6-33f3e47a2bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e644c84-8615-45e7-ad89-401afe1ff051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63df2e6-5c76-43b7-9547-52684750958d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fda292a-b8fb-424e-ac1d-9ca2969d9e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c8c1ee-457a-48c5-bc34-fc1db2c36d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1ae5cb-1e7b-4d20-b4ed-1aecdbb6ba00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640f93e1-7c72-48a8-b5a8-00d39f6d5105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2c00b8-f440-4d2c-9eb3-4abcb6819e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13f480a-f5b2-4b87-bf7a-ad9e84c142b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35dccec4-94ad-4bc8-8355-fc55443fd50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ad9235-c091-43b8-87cc-e1e908ffe143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a5cd4d-f139-4979-8fbd-5a76a85833a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.4']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6fe838-386a-4942-9236-f0aaf6193e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa9d925-4c9c-4bc4-aeaa-8ca7565a7b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2108d8-8c80-4b2e-b62f-87c7eba77f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c3be76-e5c7-4cbc-81ad-11673fa5b8d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afcf6172-5cd0-45d0-b22a-f59df152c38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.62']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfeda439-e491-494b-b669-bb65ed00f5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.64']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a555d60b-4710-4d19-9201-989fde77c915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f617e8df-11f3-4176-95b1-0449f9353109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c98aca1-9679-42a5-90ed-6726e89f5603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b685a0-9c1f-4e43-ad79-1f4d2c29e264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.68']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01deaa99-240d-4de6-a874-ca9cd20ebd38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127a5a2c-8bdc-4908-96f9-43a74c74e5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d4b175-37d8-4e97-bc6a-99587deca4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.70']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69836211-1917-4398-b255-580c93488f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb600def-32f0-486c-ac14-4f836d7a80f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404e5a3b-168d-4786-af40-86b7775406d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b2dcb3-704d-4c31-b2e0-091e2c77061a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082ac93e-95c3-47be-be0c-ee702e8ecff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40623d16-7eeb-4b30-9a9e-7e263580539e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.76']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e48f69d-b836-41b0-baa3-e2a38a6dd3d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d050acb2-6cca-4125-b1a1-b287986b81cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06a8be2-d7d5-4809-b1b9-09c1bcfc9f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78996ca4-ea43-4790-9ad8-fdb1ccd02e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f82efe-853f-470c-85ad-29ae3b9f5111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69f27ce-20cc-457e-8c03-4cd6ee659bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45aa0fbd-19c7-4338-83b1-fe8073bad764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.82']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436cfa22-41b2-4fdb-84d6-30a42cd73228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b50f8a-e701-43f3-93cf-0d7efe9b8aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.84']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4395dcc-1324-4cb5-9c7c-33b41bf81133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e02001-c951-44b5-9eab-db6fcd5bafce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.86']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fae0df-2d03-4029-a44d-bb5469596212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffcee27-8ea8-46f3-8b64-589754d9ddd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6f1893-fe11-45f0-8476-80555def2653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.26.189']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0348a5-b7c5-47e7-bb3a-1309ee1dcffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.126.11']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a43506-e44b-473d-b87b-3c2d69eaa4c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.144.78']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c88fc70-5ff2-46c0-a30a-ed77924fad5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.141']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19e96cb-5b25-48a2-978e-82af1ce0d1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.240.53.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666141a8-be06-4833-b8cf-894964065c67", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.243.21.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5647a8a-ac82-4bef-9cad-13a2aee61832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.242.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a601185e-afa5-485e-b83d-08ced7b7fb08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.243.20']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31884f56-cb09-4a5d-91b8-c6a47cafa983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.243.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c4e0c7-f317-4607-8423-77da46ad583c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099c9efc-1f40-4f1c-b631-51190c6fce64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1997be88-b6c2-4f25-b0db-1a88106718d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.153']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7687350-4bde-475b-81b9-663566d7db91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.17']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb87bc79-deb7-456d-9883-b7c28048e7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.176']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c7d911-fe98-43dd-ab3a-fe4388350b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.18']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98edb48-425c-4b7f-a7af-d1e086d11425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.237']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6832d52-5dfd-4fa4-9a09-1afbb0854316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.143']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c67c02-0586-484f-ae6d-b0dd1b28151e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.80']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0589b04f-d631-458d-bbdc-fe6a86ece37e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a1342e-9471-472b-ba8a-6e4fa317550e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.120']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd90a95-3894-46cc-b3e7-5c3fd77ca5ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.252']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acaa187-e214-405d-94ed-42069acf49e4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8113865-90a7-4714-9127-af587a942203", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.96']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67681dcb-888f-45aa-925e-7d59e5ea4829", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.93.183.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dedbdf79-925f-4d83-b521-45c8fb1b817b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.93.99.93']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75bc221-0cac-4d43-be4a-3d83ccc81ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.99.146.21']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f9a621-f938-4ec5-8f78-207dafdad6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.115.53.54']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143437fa-3f4b-4f0f-9ea8-8d521518ae8a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.14']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4aa5bf3-2c3f-4dc3-995c-baccc6c3695f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.49']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7a8e42-67e2-416d-88e2-5c9d79e648ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.50']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a960a7c6-928e-4e9d-9454-3496512e88ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85392065-866e-432b-8a50-46ae6537d098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709beca6-fa46-4905-9806-f6d60591cf64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d293a9ea-a30e-4645-8f78-1709bf777a83", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.77']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a876369e-83f7-4e36-b0e8-e605c7dae17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950bcb87-3f68-4fbf-965c-da9d2052d476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.142.124.40']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8564c3ca-84bd-4fde-b68a-b949dc2b5dd6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.107.22']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492b83b9-db01-470d-a262-9a2a00b92e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.38.41.212']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6397f23f-b18d-4ebd-84e5-3283d6003c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.39.60.52']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec74c8c-7c3e-4de0-a8f6-004d62f6ae8f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.60.179.109']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d72a66f-c828-4c5c-887c-b094a3a54bdc", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.62.143.71']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e8da6d-8e7c-43d5-bd19-dc73a48d1a83", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.62.246.38']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23efe016-fbfe-4ef3-8182-e082315bd17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293639a5-8b2f-4904-8ad5-a3e7248f03dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.224.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54990d3-1337-4aef-9478-7554a0d456fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d09526e-2746-4e05-9db4-f54930757f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da63fb9d-2014-4b7c-be6d-1eb196d16bf1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.95.204.130']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0331ff-856b-44fc-9df1-e1c124384539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cf5479-7f1f-4232-b241-177b45b7ced7", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.155']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ftp", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05e5235-cb1e-46c0-b48f-9b439750e9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3226cdd-39c8-442f-8a2e-0a81098dd8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.124.166.28']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f7c887-cfbd-42b3-96b6-9ca1d23257c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.139.242.30']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ffb862-515a-428a-8a82-b600d4253855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.234.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9e4fd3-d019-4340-a2f3-69bb7ef61465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbeacd9-513e-44e7-b325-0647ed8aa6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.103']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c61a89f-53f9-4cbb-b05a-e7dd95da4234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.114']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa73c4f-8448-429d-bd67-568bfcc73686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.12']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b05e16e-fc0a-475e-aa5e-cfbb7764827b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.122']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb21687-d4e3-4d4c-a47f-e14af143429d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68877b88-424b-4f92-801b-63938a8adc09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.140']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec3acc7-56c7-4928-b427-68b41017f24a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756670f1-3076-4e11-a919-d088b6edefbd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.158']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ac02c6-d5b9-42cf-abec-e5a811f905d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.192']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6172ce3-aee4-4814-b0c3-a2dac0ac5f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.196']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b5cf7d-10d6-447b-b157-dae67b336b20", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.210']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5dd373-9436-42df-a62a-fd998987b623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e987ac2-2789-4db4-b753-25cca5a12ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.219']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb8606d-9ab7-47ec-a79c-36f08e569797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3523404-7989-4902-868a-ca1d2a96375c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.230']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1062a0-9603-48fe-ac70-76813a234b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fe6dcc-f349-4ee1-95f7-4c8e77f5556f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.36']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e68a5f2-4d81-4198-9b65-356c1953f0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.43']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f280318-2268-4b4e-89ef-a3910ea3dd5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.5']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a26da2-2cb3-48e0-a01e-413f81e6ebb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6607ab-e87a-4977-8e4d-5d213b155be5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.56']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a5a2eb-2488-4254-b144-0b41afa9b4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.58']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a8f8f7-c251-4f37-9ac6-e3ed73833a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.59']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38b69dc-adc1-4fea-a6f3-f5f92df2d5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.66']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1f05ee-93ee-4f03-8921-c406e541b756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.87']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd9f1e5-9be7-4464-a8bf-2924f3c430cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.88']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41eed438-b815-4f53-95ef-1b3d98cc23be", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.91']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52acae14-8577-4c69-bb0c-901bbd550627", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.92']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77417390-4c89-4ab6-b85a-d65f132ede38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.99']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4867e3b4-66ec-4e6c-96f5-75c3fa4858a9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.200.177.214']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03fe69c-5cfd-48ff-8259-f43b2c724385", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.133.154']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d279205b-7f44-4811-85ed-ac6ee3bd4ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ef304d-a189-4bfb-bb51-e4e18e7f4f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.134']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4424bc70-02ef-43d1-bb4c-92d45acceead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c776110-4355-4117-8b3c-1d92cef027f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.6']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e963de-e0a8-49c4-9a04-f22fd0dcbadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.234']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6daddaca-2a55-4088-8f84-56c82f43fadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.43.131.110']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e9e0cd-4282-417b-9578-ceeb4c214517", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.54.108.157']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b680b2bf-30ee-4b1a-8f2c-e78612567b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.74.104.89']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8836ba2-11eb-442c-a6f0-e8ca7cc68979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.104.185.254']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41dd3512-f55c-478b-b012-17fa5cdb6806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.111.226.60']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9226fd6f-32ea-4350-899f-4e45e5b1494d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.173.179.248']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a781b5-1461-4808-a47b-a6e07f997fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.181.232.51']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a23113-8d9f-4ecd-b403-400fccd98d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc0fbd2-a3ed-4c8a-9902-9d7a0b72301f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.108.8']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a66f20-9c66-4534-bc3c-d400c8bbda80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.245.3.152']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b06c0f8-29c6-4269-a3ea-4de0a2249e7b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.26.246.184']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2f0fbf-b735-4d43-9f77-6ee2ec72398d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.3.76.162']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24135bff-39f9-4f5e-819d-8c877db5818b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.37.35.125']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3b385c-e979-4bc0-b74b-fa2c21276dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.46.142.72']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dbe1bbe-67ba-4dfe-bd18-bd95b416219a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.6.42.173']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ba839b-9893-44fa-9a86-2fbe98f9f2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.34']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64096c6a-db54-42ee-8c26-2df768c03cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.98.168']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a51c561-283d-4bc3-b7ae-fdd95bb38b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.62.250.220']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31310236-ba7c-414c-9e9a-fa45a5036a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebb4f80-14c5-439b-9f63-e3d1af1a91fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bbb4bf-a686-4ee0-a7d0-e003889088c9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.87.119']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31dd6aa-416b-40d0-9f90-4e1bb4411ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.159.36.131']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32c5af1-22b1-49b3-a637-82ddf091e253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.21.35.205']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ed6983-8df7-42e2-8ba6-d6d96f60ecc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.80.120.159']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2518032c-0b6a-42b7-956e-79a5f503c713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.80.77.204']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63ccc94-3ee5-46a8-b2c0-a4829c812563", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.230.124.2']", "pattern_type": "stix", "valid_from": "2026-07-27T00:00:00.000Z", "valid_until": "2026-08-26T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-27-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aac9fdf-84f7-4a16-9eb8-3b7b30bca68b", "sighting_of_ref": "indicator--b541b941-c1b2-46e5-a986-42dffb013c99", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5223aa-0828-4457-8b0c-1f4238c31cea", "sighting_of_ref": "indicator--93c96ca8-cc78-4bfb-bafe-c6d9ebcf2a4e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356c0ff4-6dfa-4e85-a1b4-ddb00ad6db92", "sighting_of_ref": "indicator--e0d1c420-634c-4f3f-bf20-4afcb4c954f6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a035a0-fa34-4823-a182-a88b41dee6cf", "sighting_of_ref": "indicator--e0d1c420-634c-4f3f-bf20-4afcb4c954f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c7fd8f-af91-4540-921e-1c25df108488", "sighting_of_ref": "indicator--bfb3d9b6-e111-447c-8433-4de6d6424d45", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddfe37e-573d-43ef-9a32-0a67fb063574", "sighting_of_ref": "indicator--8a4bc40a-e475-4f3f-b0f7-83d5a303ea0e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167b0c9d-e287-4b62-bb8c-431be40f5e5c", "sighting_of_ref": "indicator--5a861122-6ec1-41e0-84b5-85cf21006e0b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c1c5b6-6353-4752-8e75-50cf63e81496", "sighting_of_ref": "indicator--7014f065-9bfe-45c7-8a3b-fd08fccf49f5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ace7bc0-bda1-4a5a-9027-7b225ad693b7", "sighting_of_ref": "indicator--8775bd7f-a4e5-48cb-8a6b-98f1d61489d4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34b1c4d-bd5b-42ab-9765-71f6a1fb7596", "sighting_of_ref": "indicator--92bc4645-8b97-42c8-afac-2aa9ea395124", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834a6fce-d157-4732-a816-fe6a12eaae5f", "sighting_of_ref": "indicator--92bc4645-8b97-42c8-afac-2aa9ea395124", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287f4c1d-cf08-470f-a330-beccd88b2025", "sighting_of_ref": "indicator--29e6dd04-9838-426c-bc1f-125f7f2271c9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597359db-6dd0-40a3-9bf4-f29ce679f814", "sighting_of_ref": "indicator--76ecf718-a3b3-4375-8ae3-6d2461cb905e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43fcd94-be75-4c41-8051-d83c83e1abdf", "sighting_of_ref": "indicator--64f9b851-f03a-4649-9202-497f10dc74ff", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be363d2-ff42-4afb-ac98-852aaa5f9de8", "sighting_of_ref": "indicator--918bc083-bec8-4fb3-91ae-272a40411635", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e61a8b-fb48-41f5-ace4-455582e93e99", "sighting_of_ref": "indicator--9a851c11-3cde-41f3-9ed8-ece74cfd1f6a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb1c7d3-8608-4a1b-967d-38d06662cb47", "sighting_of_ref": "indicator--837705cd-9e02-454c-a9e3-4f2051b4d25a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47851ae-0538-4c7b-b416-ec69e32030ca", "sighting_of_ref": "indicator--3bad421e-d6e5-4505-b5af-8d4a9ec3893c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c39b90-cea3-4606-98fe-dc80c70b65a1", "sighting_of_ref": "indicator--f85fa151-d384-4bed-b844-112879186654", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5892df-9256-44ce-bc37-a16657175253", "sighting_of_ref": "indicator--f85fa151-d384-4bed-b844-112879186654", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f556cb57-e381-40e7-84cb-001ba79b49f2", "sighting_of_ref": "indicator--c5eb3039-84e8-40a0-8a4e-7ab250de2933", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a377d40f-ffcf-47fd-ab8b-cd429aee54b9", "sighting_of_ref": "indicator--04fd4491-f0a8-4925-9f54-46a5941c258b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9df59e3-e5fb-40e8-8a6d-f89fb66f6cfb", "sighting_of_ref": "indicator--f8dff279-f7d8-4232-b666-fc9b313a7042", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a40c06-08f7-4c41-a5bd-596bbfcdd327", "sighting_of_ref": "indicator--d29b2c13-4bfa-4da1-87ec-74b7583067d3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89cc54e-7c65-44c4-8664-225d66665d91", "sighting_of_ref": "indicator--698496fb-ceec-44fd-87f7-37924328c2ec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bf1fc2-2d3c-482c-8df7-0b3a2f51fd86", "sighting_of_ref": "indicator--d9e7771c-7305-4821-9211-3217b26971de", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be593418-b051-4463-99c3-d45e8d4cb3ab", "sighting_of_ref": "indicator--e882da7d-bf05-46c1-8748-4699398b7722", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caeba53d-399f-4432-9c0a-51c0371a21e1", "sighting_of_ref": "indicator--7c6f7eae-e741-43e9-b1db-83ac12513dd3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387cbf30-cc01-4f07-aef2-1aa5d1e5bb30", "sighting_of_ref": "indicator--e72d3af2-6295-4243-8909-4c40db7c2a70", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b845c15d-90cb-4f05-8e39-21e755562627", "sighting_of_ref": "indicator--ae2fa087-62f6-406d-8647-3b9f450b2178", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80173f84-2b6b-45f1-9196-b0469daca16e", "sighting_of_ref": "indicator--73fa3228-0c27-457c-a4b7-ef48881cf727", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2f220e-8064-4889-a40e-21ab32e6ef54", "sighting_of_ref": "indicator--02231a21-e7c6-4b40-ac8e-ff832a7dbd0f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87feaef4-ad0b-48de-b1b2-8a1fa58ea2af", "sighting_of_ref": "indicator--99129d67-b578-40d9-96b1-2c9c0d5d2c6f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827831f1-2fd4-498c-a905-ce9be4385d7e", "sighting_of_ref": "indicator--0260cd4d-917e-447b-9086-fff63f849300", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edef428-1226-4f93-87be-3dd743cbb587", "sighting_of_ref": "indicator--d9458e17-9ac1-4b58-8817-32efc2d133ef", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2b1d17-5bab-4789-9fc0-2e2bb101ad44", "sighting_of_ref": "indicator--212d3f22-7180-438c-b6cc-cc8cdbda9ca2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a3ef41-135d-4532-9e5c-64d16c623273", "sighting_of_ref": "indicator--764d3e0b-e45d-4c48-8408-0bc2ab47677f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379a55dd-c489-4d9b-8abd-19869426e25a", "sighting_of_ref": "indicator--ac2ddcb1-d69d-42ee-94ea-aabcfdfb3b3a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc914954-ba03-49a5-be88-1e6bc603d731", "sighting_of_ref": "indicator--ac2ddcb1-d69d-42ee-94ea-aabcfdfb3b3a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed09cc5c-01d9-4a1b-9f30-320a59fdfe63", "sighting_of_ref": "indicator--1718f333-f22d-45d3-b312-bfb2ae3ec651", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebed1e4f-e06b-47cd-b286-7f915b9525c5", "sighting_of_ref": "indicator--1718f333-f22d-45d3-b312-bfb2ae3ec651", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d326b9-81cc-44e1-8f54-eeb6f168b97d", "sighting_of_ref": "indicator--b8dfc87d-aa90-47bc-9919-8b6b5a3f40ef", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f59f6c-a809-4d0d-bddb-c933c0138e7b", "sighting_of_ref": "indicator--4625a54c-4689-43e2-900b-c41616f751cb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5df7bde-f9f0-4ac8-88ca-5588138c353c", "sighting_of_ref": "indicator--b098abad-9485-4581-b921-1169fffbf398", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62714cc-4912-46d0-a91c-9dcc30050339", "sighting_of_ref": "indicator--b8596c75-8ab1-449b-b009-6c14caab40c2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfa6a51-e3e8-48ee-b5e2-2ce5be05e440", "sighting_of_ref": "indicator--7e99de8c-81a9-4576-9af3-c695d778ae54", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210917a9-c839-417f-9d18-ddd35723a464", "sighting_of_ref": "indicator--87b53ddf-26b8-4d3b-b53a-a4ddadb03a5d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1870b43c-4c14-45c4-8969-11b478a702c8", "sighting_of_ref": "indicator--71a8974f-1e1b-4394-aef5-7fb74785ff88", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74647a77-0517-4dd3-b8c2-b8c63ec1e392", "sighting_of_ref": "indicator--71a8974f-1e1b-4394-aef5-7fb74785ff88", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8ed934-071f-4f21-a1e5-ea8c6c2e0c59", "sighting_of_ref": "indicator--dc2b4fe9-b17e-4012-96f5-cc83c30f8157", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e573cf8c-f4c7-41b0-a811-8b164c76ab15", "sighting_of_ref": "indicator--9ab3311b-64f6-4547-80e3-0a0c24f3bce7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4eb6e0-8b25-4d16-9464-163241c62dca", "sighting_of_ref": "indicator--9ab3311b-64f6-4547-80e3-0a0c24f3bce7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a454c4-70ed-4ce6-8bf1-2e66f21bbeaf", "sighting_of_ref": "indicator--4440830e-1cf9-40c8-a71a-65621d1091f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52c0107-e7c9-4e7e-b83d-2aa6eeebd36c", "sighting_of_ref": "indicator--28a4e19d-5eca-4817-b7b4-73a31bdc265d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b74260-d458-4124-9d07-b98247a3de2c", "sighting_of_ref": "indicator--85cfdf84-adf4-44c4-8e2b-12e8411f34b8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe8dea3-7436-4934-852a-7dd915007139", "sighting_of_ref": "indicator--cefc9fdb-0f0a-4e29-80cb-bfb680817ca2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba3302a-d358-45ca-bed9-c2d35a2a7a40", "sighting_of_ref": "indicator--e16d2d15-67ab-4c4c-bf5e-3f6f172d661a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83e4c40-cd26-4ed3-9494-c1eea6e1fc8f", "sighting_of_ref": "indicator--20ed8727-d8b7-48ac-967a-276dbce8b808", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b45f8ee-be83-498a-b91c-ec33b867cf5d", "sighting_of_ref": "indicator--dcc536b8-fd6f-4726-acce-21c67f1f7ba4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ceb824-a54b-4f3a-b27d-6f9b3b6c1f12", "sighting_of_ref": "indicator--d189a4e8-ff1f-4830-9282-f6a276d907ab", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6c429a-7047-4177-97a6-a35b43e8e236", "sighting_of_ref": "indicator--d189a4e8-ff1f-4830-9282-f6a276d907ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a49b78b-8afb-4a23-a42e-b9833696f96d", "sighting_of_ref": "indicator--385696a1-7701-4f2d-a1ae-42cdfa90dd30", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6adc2065-e85e-4ab4-871a-5c9d35842d1c", "sighting_of_ref": "indicator--f793c51f-c52e-4fbf-9d48-439f10d2ca66", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc64f19-be2c-4451-a901-c40554ecc633", "sighting_of_ref": "indicator--f793c51f-c52e-4fbf-9d48-439f10d2ca66", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59652595-a7dc-43d0-9dc3-7f38e866309b", "sighting_of_ref": "indicator--896e9984-2e90-4d3b-89ae-d3f41abee4a2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c56e5b6-fdbe-4e68-950f-ecb863d9b7ef", "sighting_of_ref": "indicator--9990e234-cc15-413d-a316-2991fb94d844", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f695e7-faeb-423f-aefc-635dcde8cf0a", "sighting_of_ref": "indicator--1598889f-d1f0-4f89-a3dc-7c1cb8e7c153", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a40f696-e46f-4cf9-8c70-e8701374adb9", "sighting_of_ref": "indicator--580eac0c-5b18-45d8-8fa6-1e928963c8cd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22aaff1f-a096-43a0-bc26-d2ab3b21a167", "sighting_of_ref": "indicator--62e7e282-fc84-42a3-9740-08faef267354", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8ba35b-a9e1-49b5-85a7-cd7bf630865b", "sighting_of_ref": "indicator--d3e0de24-b2c6-453a-8e81-12b6ed068971", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1bec8c-b9dd-4333-8525-6b135e92ee33", "sighting_of_ref": "indicator--18a85f90-8ea3-4c2b-95a6-b5cfe448eb9a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fc27b1-8097-4b15-ae6a-77c6310ce964", "sighting_of_ref": "indicator--18a85f90-8ea3-4c2b-95a6-b5cfe448eb9a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad65703-c0f6-4007-92cd-07085e3816a9", "sighting_of_ref": "indicator--b3521dd7-5b99-4796-b623-68ff3c9c676b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69299239-c4be-4a73-b9a9-5bc3909b9cf0", "sighting_of_ref": "indicator--b0d4efae-9225-49e2-943a-04033979c61a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58de76a7-7942-4e5c-9b3d-433c1dcd3458", "sighting_of_ref": "indicator--567f2359-636d-421a-8d0d-f5d8284034b9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86415728-92cd-4e8f-8ffd-63e72ca22c7f", "sighting_of_ref": "indicator--ea35c9ba-3c2a-45d8-b62e-d0bffaeaebf3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a122a33a-736d-4517-be06-06117d66c06c", "sighting_of_ref": "indicator--fda97673-3ee6-4825-8d6f-62b45db7b4f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08644ba7-4dcf-4211-9578-c07590747275", "sighting_of_ref": "indicator--3f18b222-2b8d-41c1-a70c-2c05d100a1f5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfb362b-ce37-4eb2-9f7c-adcabe2dbe94", "sighting_of_ref": "indicator--3f18b222-2b8d-41c1-a70c-2c05d100a1f5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bf42c7-a7e2-4812-865e-c21b8c88543e", "sighting_of_ref": "indicator--bdd92e41-cb3f-4173-a101-301d8f1e52ec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec36bb7-e5ca-410e-aa87-916a5a12f722", "sighting_of_ref": "indicator--35076687-7d9a-47ff-9a01-2fa06a18d44f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ff8c7a-dcd4-490b-adfd-04b7468b4643", "sighting_of_ref": "indicator--f4bff578-6ad7-4fc2-b547-d6feff208c2c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdcaf4a-1369-4f5c-916a-9f33565be36d", "sighting_of_ref": "indicator--211eb63b-26fa-4730-9a27-1aba3111fc56", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f8ce4f-174a-4a37-86c0-4343c3d5763c", "sighting_of_ref": "indicator--9fb7d313-87ee-4939-a986-709a5eac1b25", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1243727-7cd7-402a-b14b-a6b1aae8b5ac", "sighting_of_ref": "indicator--dfda3f72-4cc6-45d6-9b51-be17cd3066df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a947f194-44ca-4ceb-9b20-639555d437ab", "sighting_of_ref": "indicator--183079a3-9f94-4224-8515-1f58f824a4fc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c44f6f2-9df7-49dd-90c2-922fa8cf2d11", "sighting_of_ref": "indicator--183079a3-9f94-4224-8515-1f58f824a4fc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffe2170-a896-46c1-abc3-dac5e4032516", "sighting_of_ref": "indicator--e0bd603d-50fc-44e0-94ae-7b4ef351bfb9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f8d647-93e0-4123-9b82-e22cdc71fbfa", "sighting_of_ref": "indicator--c1f0bc09-d389-4db8-9541-332215b526ef", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0753bf7-4f84-4958-9c84-d85305ac6830", "sighting_of_ref": "indicator--01681b22-a328-459f-866f-d6098b914be3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee31058-23c1-464f-b761-57a18a97e12a", "sighting_of_ref": "indicator--783f13c4-d22b-4c09-a27c-4a68bbaf6b61", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe266a12-4119-47fd-bc3d-82224d51b642", "sighting_of_ref": "indicator--83edc27f-2b9e-4353-b474-5236f59ba42d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f578c08b-5b47-4b78-9ddf-2e075df3284f", "sighting_of_ref": "indicator--6cd9d949-40a0-4ac0-a6fe-ad34befe0016", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29472ba6-0a3e-4fb7-a8f5-6136d55c3d3f", "sighting_of_ref": "indicator--b977b4ed-6be6-41d0-a3db-bd139b4ffde6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc413356-f6fb-4c76-8b0a-882ee18e9d0a", "sighting_of_ref": "indicator--a0fe5658-a3d4-4dee-81a7-77d5875f94ab", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fa89de-21cd-45b2-adf0-147e12248da5", "sighting_of_ref": "indicator--a0fe5658-a3d4-4dee-81a7-77d5875f94ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ff7d90-d4d1-4f69-86ee-62591ce7e625", "sighting_of_ref": "indicator--e01bc18b-31cc-41a5-b6e5-b42dd68a6c43", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfafe586-c067-48ac-9690-126f2ce5f813", "sighting_of_ref": "indicator--32a44420-1ea3-472f-ba26-561c28dcfe00", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c2a668-c0a9-480c-8084-16c300e903a8", "sighting_of_ref": "indicator--7a51e5de-bb1e-4500-969c-6e10696e6ef4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd24b71f-f43f-4d5a-8070-6c2f1db3d064", "sighting_of_ref": "indicator--7a51e5de-bb1e-4500-969c-6e10696e6ef4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e854673b-89df-4fe8-b6a0-450181b71bda", "sighting_of_ref": "indicator--92bf8624-b330-4907-a8ca-c3b088580cdf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd303c7e-0d46-4acc-96ed-111962ef5416", "sighting_of_ref": "indicator--ba8edad9-e257-4685-b9df-65bcf289080b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee05055-89fd-4ad2-bb3c-914a660bb0ed", "sighting_of_ref": "indicator--ba8edad9-e257-4685-b9df-65bcf289080b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e77961-fdf3-459e-ba04-47119c546fbe", "sighting_of_ref": "indicator--72807dd6-a4f5-464e-98d7-add4ad4407a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d723f9-c0dc-4c8f-98ff-8c6cbcf6c7f5", "sighting_of_ref": "indicator--66747ca2-7aa2-4241-a8c5-283cc60fa5e3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c071fa-24c5-4f07-a5d3-c70368c38de6", "sighting_of_ref": "indicator--66747ca2-7aa2-4241-a8c5-283cc60fa5e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e307d516-5ff7-4fa0-b6df-2d7b7666afb1", "sighting_of_ref": "indicator--909ac5e5-72f0-4ca4-af47-1bf1fa8d710b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba059a3-4b76-4434-a4ed-f0f174b71461", "sighting_of_ref": "indicator--909ac5e5-72f0-4ca4-af47-1bf1fa8d710b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ef4f99-0d50-4286-bea6-b4e919993e42", "sighting_of_ref": "indicator--37d583d7-34de-4dff-b462-0b0de5a33d19", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18baecb4-94d3-4bf9-8274-44b35fb63359", "sighting_of_ref": "indicator--c3c9f7b2-5428-4de3-8677-b353f7fbf9b9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c005d373-514b-4029-9268-a24c71fd5920", "sighting_of_ref": "indicator--c3c9f7b2-5428-4de3-8677-b353f7fbf9b9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80f7c89-8ed7-41a4-b133-d24154972972", "sighting_of_ref": "indicator--917b5205-8612-4e8a-bbe1-070c7909bc68", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56e3184-fe3d-478b-8ac9-1cc8a0d60702", "sighting_of_ref": "indicator--f2a9d8f5-5358-4c18-91b3-d7801b9d778a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2641e3-724b-4616-8833-2a9b76b5457c", "sighting_of_ref": "indicator--1df3bb4c-4e72-4118-823a-b78dfac004ca", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d922f5-68eb-4c5d-941d-c2679c321738", "sighting_of_ref": "indicator--c20a75bc-8543-4055-afc7-9348af5d7a3a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1723eee4-f089-48b5-9736-fca1d9434134", "sighting_of_ref": "indicator--1bc6873e-01e9-4145-bb96-f20712a834d6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdb0f1c-2e86-4457-99cd-57499ccb1cc4", "sighting_of_ref": "indicator--1bc6873e-01e9-4145-bb96-f20712a834d6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d64cfc-76f6-4fc5-a2d4-c996b3e51c05", "sighting_of_ref": "indicator--2941c23e-358c-4b49-a261-d2c19418c8eb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ab1185-d30d-437e-89c8-1a99e7318297", "sighting_of_ref": "indicator--5ace3be6-86d2-456e-8f3b-3a2cf59d6adb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8addb80-a386-4967-ac60-171fe6727852", "sighting_of_ref": "indicator--5ace3be6-86d2-456e-8f3b-3a2cf59d6adb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8d35d1-47d2-4af5-8c85-64d2f47f0257", "sighting_of_ref": "indicator--b1dedc70-da29-4684-abf4-d1d932205d7a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec73bb8-d790-4051-a708-ac1a9cfa73c1", "sighting_of_ref": "indicator--b1dedc70-da29-4684-abf4-d1d932205d7a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d41d77-24db-4b02-8039-1582a81cb902", "sighting_of_ref": "indicator--c5326d36-131a-4cf5-9cbe-9c92438dd69f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906ecd06-8786-4060-af62-39bfff93ec41", "sighting_of_ref": "indicator--c5326d36-131a-4cf5-9cbe-9c92438dd69f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a02e45f-b166-41a0-9ab9-4974eda83cdd", "sighting_of_ref": "indicator--e77874e0-24ed-4145-b3fa-4c1e74fd6fcb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed29f37a-48c7-429b-be40-b3266b216d86", "sighting_of_ref": "indicator--50924215-5496-4277-b547-dcd04bf2c9e5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d32d03-252b-471d-bdf1-ed4e2bb719cb", "sighting_of_ref": "indicator--58914373-adca-4157-a349-c1bd0b48c554", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a042e48-e59c-4ee3-ade3-e63fb5a457ec", "sighting_of_ref": "indicator--fcede3d9-3b3b-4921-94f4-4c08b9d93f77", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a86963-a86a-4c91-a41e-5d9d78da6572", "sighting_of_ref": "indicator--8bec94d8-e21d-4547-a959-5050f8aeefd0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36bf1df-756e-4e97-bae9-b5a789648f7a", "sighting_of_ref": "indicator--5accd4d4-de17-441a-b9e1-71e3f3b64e72", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02fa6b7-83a0-4e66-949a-196df0b15476", "sighting_of_ref": "indicator--9df6fda9-0905-478a-b27e-6730d1bd95c7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14968429-bf50-43c9-946d-14b52334dc47", "sighting_of_ref": "indicator--4a6796dd-43f6-42b9-9c9d-924a21cecb8a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7276f9c8-ca32-4456-b102-4d9ed7a3dea6", "sighting_of_ref": "indicator--e0927913-6bce-4f87-aac6-37e289513054", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed63ff90-bc98-4cde-b1f8-ba96c3b827cb", "sighting_of_ref": "indicator--90555257-04ff-41db-8d93-3a8ea8393908", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e13486-f520-4aae-be25-8c42e40abf4c", "sighting_of_ref": "indicator--90555257-04ff-41db-8d93-3a8ea8393908", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b267cce-47b7-49a3-ac50-ac38f106cbf0", "sighting_of_ref": "indicator--cd40201c-f63f-4fc7-93fb-edba5e39d4aa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5e3564-e711-46d1-a017-2e92fcf6bf85", "sighting_of_ref": "indicator--ae6eef4e-dbc9-45db-a136-cb00083c1208", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbdd5a6-1654-4a63-88ec-ccb951c95d4e", "sighting_of_ref": "indicator--3e3ee902-f045-4b4c-9ed2-b326226c4839", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa18a93-24f0-4a86-9741-f2f030754da1", "sighting_of_ref": "indicator--efb8f69c-6cd7-4bff-b775-dba46ab8f318", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d601ff-31f7-49ab-99ba-d25ef22dbd95", "sighting_of_ref": "indicator--b5f13ab4-12d7-4d55-af98-a1e525129159", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca8578d-267d-4606-a8d9-80846a3ad090", "sighting_of_ref": "indicator--5401d55d-33fc-4e44-9b9c-57773790f4cd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ae9bfd-5b20-4c36-bfa9-4be1d03e24d7", "sighting_of_ref": "indicator--bdb02d64-980a-4954-b2c9-3465ab36db8c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd057be1-459a-4a97-a120-bd01ee940179", "sighting_of_ref": "indicator--f85d0159-cdea-4e75-85b7-1397ac5dc572", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf2fb94-5f20-40a5-8e0c-0a110a21fa0b", "sighting_of_ref": "indicator--62009e67-9ea2-4c46-ad30-8853f5fb2d2b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d4115b-480f-4f3e-a7d3-83178faea535", "sighting_of_ref": "indicator--3d304ea8-fd6c-4dee-bd2b-19a283914866", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c928299-07dd-4503-9bf3-55438869246d", "sighting_of_ref": "indicator--ee076fa0-906e-4be2-9aac-ca5dd6637cee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c738b3d6-ea96-42b3-a8ab-1a1b762aebc1", "sighting_of_ref": "indicator--75a8b5a2-21d2-4b41-9429-5098bcbab9ab", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e4ecbb-a7c9-4427-9b90-1fa3e36a7e91", "sighting_of_ref": "indicator--44c22e56-3781-45ac-bf24-1d44b3905245", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9320d12e-f7a0-4e8c-a3f4-665aa72e8c88", "sighting_of_ref": "indicator--ed87c125-8d5d-4d82-a14b-a2475337553e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad103dc-9d1c-4695-9c36-65bf32a2ed7a", "sighting_of_ref": "indicator--1a61e969-5cf3-4199-90e4-eb0d4cc31a7c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435efca8-c3ce-4453-997b-ccab1566585a", "sighting_of_ref": "indicator--c2511e8c-980f-46c3-be80-d00aad80d2ab", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394ceca2-0a76-49f2-b98a-13440ac5ea03", "sighting_of_ref": "indicator--ad63111f-5060-4523-8c49-6d34a0ad3585", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9321e1-4035-48ce-a0c3-609b55e98007", "sighting_of_ref": "indicator--090156cf-5cb0-4522-96dd-86ce739117c5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11f53bb-87ba-4409-8390-e13532ad7204", "sighting_of_ref": "indicator--6dd8e4f8-27bb-4261-a9af-4d8e9139ab43", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9bee99-9753-4401-91de-237588b0d5ae", "sighting_of_ref": "indicator--27463ca6-0fd9-4cb8-927c-9af930aff170", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c923711e-8bdc-4173-9b7f-3f062bb1e572", "sighting_of_ref": "indicator--de1eface-992e-484f-902f-3f73cddea9fc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec72cc4-ee41-408b-92e9-054c392b7c6b", "sighting_of_ref": "indicator--423bbf87-3d23-4366-9cf8-9009504fc7c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5651de74-85a1-4713-86c5-927a994d4ec9", "sighting_of_ref": "indicator--f208d331-aebb-46a0-88d4-454841417589", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc99667-b8a5-456e-af5c-4f7a0ece7ba5", "sighting_of_ref": "indicator--064e368a-12d7-4bf7-ab17-bee38f3fbc22", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7b8427-bdb1-4ad1-90ef-e41c6a8a25e4", "sighting_of_ref": "indicator--c87336fe-6fd6-480d-93fc-2c04ad5d8989", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70c8b28-92a3-4580-91de-e3fa42cb1552", "sighting_of_ref": "indicator--c87336fe-6fd6-480d-93fc-2c04ad5d8989", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c877e432-0556-405a-baa1-30d86b492814", "sighting_of_ref": "indicator--2c38d735-3267-4fd8-9852-72493779d835", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e1cd03-190c-4826-acf3-16265317b6df", "sighting_of_ref": "indicator--443d794e-a11f-47eb-875d-b1118d205849", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3e3c33-ab7f-4f3b-aa7f-7a48684c3015", "sighting_of_ref": "indicator--443d794e-a11f-47eb-875d-b1118d205849", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05059bc-2353-4942-b522-958a55573455", "sighting_of_ref": "indicator--adda2f0d-0bb4-40d6-9d88-a87ae62a7ab1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41acf30e-a5ca-48c9-a9bd-9533323e9725", "sighting_of_ref": "indicator--14e98773-6493-42e0-a140-175a00eca4d6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787917b2-20d4-42dc-97e0-4b741dd40d86", "sighting_of_ref": "indicator--4bb307e8-872f-4fe0-ab21-00c316ea46fc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261a0f69-eeff-4b0d-a949-bc1ac1ce652c", "sighting_of_ref": "indicator--9eefaa0d-2396-4904-b49d-6d8a964abbd6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c43c4fc-04fb-4e92-8fc5-72dc4671359e", "sighting_of_ref": "indicator--9eefaa0d-2396-4904-b49d-6d8a964abbd6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dca27a-68fa-4f7c-8411-e52103d080fc", "sighting_of_ref": "indicator--cb0ec241-a01f-4ac7-b1cd-34790bb0df18", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1410bc5c-8e97-46cc-a4d8-a0398bf264e7", "sighting_of_ref": "indicator--1f982f98-0caf-4199-85b8-b77d54368bab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec2cce0-663b-4353-9e34-6bd207b5bcbc", "sighting_of_ref": "indicator--25edec5c-f9f3-4ce6-a2c5-0c3e5e2e18cf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8de2aeb-71fc-4a3f-a408-4b963f5a0cd4", "sighting_of_ref": "indicator--5c1161a8-5c19-4366-a962-a7055adf196f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2c66e8-ca41-424f-a0c7-66609e7e0898", "sighting_of_ref": "indicator--774fc7dd-d926-4c97-8ccd-5bcec991d5e7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3302698c-818a-488e-acae-876b1b021a14", "sighting_of_ref": "indicator--e994b530-5d40-4dd9-b240-a5fc393679e3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc28b61-df9b-4f44-918b-eff13d150491", "sighting_of_ref": "indicator--e994b530-5d40-4dd9-b240-a5fc393679e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ada2d08-0c8f-445c-b001-126f6182331f", "sighting_of_ref": "indicator--5965d19f-28d9-4033-9937-f02adf8ef47b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97468a6b-e22f-46c7-988d-8d0f03b27c69", "sighting_of_ref": "indicator--887c74f4-0f12-4eff-b4d5-e9ee2cf353cf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cbda5b-43aa-468c-91c6-bdbdc41eb69c", "sighting_of_ref": "indicator--887c74f4-0f12-4eff-b4d5-e9ee2cf353cf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a4287f-2332-408d-9d1a-1ee1f2e4f044", "sighting_of_ref": "indicator--88d93012-cc2c-4d80-9186-a5ed65ee128c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c46b06-a8b0-451b-8030-889e56973fea", "sighting_of_ref": "indicator--cc6829b2-9596-4611-af33-a5687b23607d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326ae737-23c9-4fd6-9ba6-52dfaf75a282", "sighting_of_ref": "indicator--cc6829b2-9596-4611-af33-a5687b23607d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48266fc-6b67-49ed-a100-97117ac621dc", "sighting_of_ref": "indicator--c7e2c60a-e5ed-4671-8b5e-8b31be7bc8e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743e7236-0c70-4304-85d7-b3b97c979d93", "sighting_of_ref": "indicator--8f97a466-d4a6-482f-923e-942bdb826153", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db460c1-bb9d-491c-9b2f-bf0a4fe6d201", "sighting_of_ref": "indicator--2ba0fcdb-909b-4fc2-a606-b0f41e68ec33", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c220a4bb-0cdf-49e7-a905-9a75004b5e66", "sighting_of_ref": "indicator--6149b6d3-4067-43aa-993d-84294d9de94a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c17d1e-cf22-4bcf-b7a4-d877e2346904", "sighting_of_ref": "indicator--6149b6d3-4067-43aa-993d-84294d9de94a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7414c3-7b79-457a-bca7-44d4be6757f7", "sighting_of_ref": "indicator--6f7bd69e-4cc3-4449-a70c-3773cbe68fc2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfd574b-7691-4550-9302-25b77a347637", "sighting_of_ref": "indicator--354445b8-077f-4f4c-87ca-f40d338c9102", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d834e0-6107-4730-acec-2f5c22deb5c9", "sighting_of_ref": "indicator--bf53f2c1-5874-4fa8-b1f6-d951c86415ae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7641fe5-0188-4c5d-bb93-177516dc6f8a", "sighting_of_ref": "indicator--aafcce15-1b01-4cfd-911d-d7613dc4e239", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d872ba6e-6a35-47b3-919c-2e0ee7ea046f", "sighting_of_ref": "indicator--c8d7c4e6-f06d-4593-96f6-6f908f492969", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460fd667-36b0-4cd3-ac9f-91bf655be188", "sighting_of_ref": "indicator--da50ffa5-3f98-45ff-adc2-ef0a295b5040", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7e690b-4b49-44b2-8126-1065ed0af87f", "sighting_of_ref": "indicator--20fc16a6-a1ef-4ed4-b64e-9e834eaad1d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e91d954-c088-4147-8b78-514d0f981d70", "sighting_of_ref": "indicator--33424006-838b-4720-8d21-b3f5d513a636", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04153186-948d-4585-8458-c791a1b12918", "sighting_of_ref": "indicator--5e1e4d74-5668-4d90-b20c-a8aea842da50", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880ae8e5-1296-4a38-8751-0ed10d7ae186", "sighting_of_ref": "indicator--06fe3bb7-b741-4d20-a5a4-67ff21309e69", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ef35f6-501c-4f86-95eb-aacff11c812f", "sighting_of_ref": "indicator--cc582782-c789-4bfb-b740-8dc35ce6a3f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7ad6e5-efc1-4c7b-bcbe-c0b48005bd25", "sighting_of_ref": "indicator--0de89ae3-9403-4b12-9e28-e88ed986ce86", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298c1b98-dc12-4772-87b1-5c67d50af497", "sighting_of_ref": "indicator--469f79eb-ff42-416e-a13e-6028742d4609", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be6b348-f51d-4efe-9464-635cd0d0888e", "sighting_of_ref": "indicator--40ea7143-930c-4b92-9603-7f94a1af14ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe149635-f8e8-4eb5-aee7-fa7f26999457", "sighting_of_ref": "indicator--5513f2d5-604e-4427-b8bb-0014b974b0fd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d871d7-b144-4a8e-824e-62af0cbec7d6", "sighting_of_ref": "indicator--f4a3476d-5187-4b86-a7be-0dab95101a9e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4afbaae-ef8e-4f81-a0d4-7d514c6162c2", "sighting_of_ref": "indicator--14c41d47-eadc-40ad-9c85-5d08e60fb659", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec2b2cb-ece6-49b3-b9bc-5745a372bdc7", "sighting_of_ref": "indicator--e72fd8cd-02de-4d90-a8e7-2e0208bebe6e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf43c99-e612-462e-9b66-948f3fb7b4c1", "sighting_of_ref": "indicator--423b8b59-a97d-4528-9ecd-612747572bf3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecd6cdb-9fd6-4a7b-bef8-f5ec18256d60", "sighting_of_ref": "indicator--bd55e93d-2209-4d02-be79-81fda2470cf0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2066fdab-4e24-47a0-b133-e988133ecf75", "sighting_of_ref": "indicator--6bc510ef-225c-4a30-99f2-535d45f2a9e4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edad2a5-ba91-4efa-a2d1-2b841e87cdaa", "sighting_of_ref": "indicator--9204dc83-30c8-4611-996c-0508b8d16759", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6897154-a296-493c-bbc5-f4132493d811", "sighting_of_ref": "indicator--484de4a8-cae2-4be2-ac71-0f1cccbde920", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a45443-72ca-420e-aa2e-48ee6ae68d6c", "sighting_of_ref": "indicator--d45837f4-0bbd-4373-adbc-36dd531fbc95", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5328b40e-f3f1-4c94-a68e-61ba9fec8607", "sighting_of_ref": "indicator--6e11a94e-b8a4-4412-b424-662b6703574f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bce7e1-a5f3-4f30-9358-2b6ad5cb962f", "sighting_of_ref": "indicator--692399f1-685f-410a-9fe8-2318ce64a57c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a8721f-888d-4eee-a770-50615d5138aa", "sighting_of_ref": "indicator--091b04fe-7f8e-4c8d-8b35-f9a35c36c244", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c2bbd8-8368-4b5f-b51e-0377b9c2d450", "sighting_of_ref": "indicator--183cf363-3a6a-4f70-aff5-66c35a0fa48e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213b5978-0e98-4bda-84ef-dd864b0f082f", "sighting_of_ref": "indicator--6b08eefb-ba47-4d83-bad1-b81f41943bf8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88fa420-dbaf-4c67-88f1-34d82f4aaa24", "sighting_of_ref": "indicator--312b025f-2318-46c6-b510-bb693edc0964", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ad1d81-75b3-4b69-a262-2cc602551fbf", "sighting_of_ref": "indicator--4f9535b8-c344-4198-b15c-a63d84072bdc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd09a18-c020-48d3-956f-940b2fe1b356", "sighting_of_ref": "indicator--1c306e86-682e-4fcd-a5df-a8d255607e23", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7549651-ed11-4c6d-b629-0931af76da7e", "sighting_of_ref": "indicator--e05a6851-3a2c-4052-a158-623bd5eaad71", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8470e7f5-25b6-4b4a-a96d-8083460300af", "sighting_of_ref": "indicator--d573b693-ff7a-4664-b84b-bcdcd77cf449", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bf0a34-f1cc-42ba-8799-71c8aad097a2", "sighting_of_ref": "indicator--c45b3967-2d9a-44f7-a2bd-c297d59b4658", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6371a8-0207-4612-b974-7aca30a722c0", "sighting_of_ref": "indicator--b54c5e12-1e28-45bf-bb2d-fa60c2c44a91", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1af62a-ff72-4927-baab-16893854c75c", "sighting_of_ref": "indicator--7d8ccf7a-0dab-44b9-8110-c88fbb42ef9d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e93543-32a8-448a-ba64-3015392e7d2a", "sighting_of_ref": "indicator--48f282a7-23b1-4241-aab7-7db00f25d8bc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08394dfe-825a-467b-9a76-52220c471bd1", "sighting_of_ref": "indicator--b6e89d45-0203-43cb-a599-f4e6e6e952e7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd796603-f301-420b-9237-0be2bf269c70", "sighting_of_ref": "indicator--808f5e1f-8a9e-41c6-b4cb-16313e14d3b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7363a85-9689-4aa1-adbe-5503b377e647", "sighting_of_ref": "indicator--cce4dfaa-1def-4ade-8892-3124866eaf96", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d7e87d-7bea-427c-9103-6181f7b4f6a2", "sighting_of_ref": "indicator--8a63bc03-de07-46a0-bf93-a0becdf57501", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f3e477-565e-410b-b2e6-c206b8853788", "sighting_of_ref": "indicator--83a5a650-895d-4352-b00c-9601c94f8df6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a528bc29-f367-4ab0-abae-3a2a6d1a6c70", "sighting_of_ref": "indicator--e7a97838-cb07-4132-84a7-95399735d814", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fce86f-97ab-4a9c-b04a-9a967de6a5de", "sighting_of_ref": "indicator--f7a3fd20-fe6e-42f4-a740-f35d8e3c4927", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa36ceb1-a64c-4323-875b-7c8e95dacb60", "sighting_of_ref": "indicator--ae5cf09f-3ee9-4726-92d8-3c1ed483947b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcdf9774-0932-443e-a3e4-7bb146737623", "sighting_of_ref": "indicator--63e13f06-ceaa-4f15-8e18-f6d30ec0bb22", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c96938-7e65-4239-8d33-cf0f25543dc9", "sighting_of_ref": "indicator--758b8247-c89b-4509-a803-fe67f47bd6f7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64c7053-c398-4775-9d0f-ba08f97f0a2b", "sighting_of_ref": "indicator--cc3d5c8f-b421-44be-9712-11bb2d6b7598", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9910689-e8be-435b-b917-ab28111ab0b4", "sighting_of_ref": "indicator--28d88d13-9036-4eaf-9630-0e549773e0ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d69db52-9cdb-4798-8bcb-61dc184102fa", "sighting_of_ref": "indicator--53259498-076f-4013-8c9e-9a733dad9a1f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a499b08-4879-4d7d-ad9b-ec67c0648fa5", "sighting_of_ref": "indicator--05358b1e-c403-47f1-a674-9488078f01fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ad0261-6106-4cf2-af73-baeae899d555", "sighting_of_ref": "indicator--27100186-cf18-4c24-ab12-af89333856f4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f993e4c-c01b-4813-9a84-96351db5fd46", "sighting_of_ref": "indicator--6a097eb4-9264-4eab-9055-2e124a8dc77f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d520a925-4eeb-462a-ab0a-b22dbc30e088", "sighting_of_ref": "indicator--12dd67bd-2027-4316-8926-647d00c3d080", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d062e9-71b4-4750-bad0-517bf18c4729", "sighting_of_ref": "indicator--28607aa0-f079-4199-9a68-1ec522942595", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167eb634-6918-481f-9edd-a26704a46d04", "sighting_of_ref": "indicator--28607aa0-f079-4199-9a68-1ec522942595", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbd938c-5b87-4c21-a3c8-a221c8983c45", "sighting_of_ref": "indicator--78b9c77a-326a-4e71-8769-dc4bd9444116", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420a1659-c680-4ef6-9413-a5d9e2e916bc", "sighting_of_ref": "indicator--78b9c77a-326a-4e71-8769-dc4bd9444116", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c847e34a-fbb9-4822-b560-c17c612a09d0", "sighting_of_ref": "indicator--bb82e941-7bf0-4f8b-9881-b521470758b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d91e62-4e86-4aba-8c4b-5fb79b3a8938", "sighting_of_ref": "indicator--ef775735-10ef-4b48-b00e-5ff2fb950d5c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706009ca-4a51-4079-ba1e-edcefbbb3f3e", "sighting_of_ref": "indicator--d59a2809-8883-46f3-909b-19558622687d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdad87ce-1abf-4c70-9c91-83cb5cc6d270", "sighting_of_ref": "indicator--a6db9531-375b-40e1-99f0-8b1e74706e56", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef424786-338c-4438-b000-b0cba631f0d4", "sighting_of_ref": "indicator--edfc4047-c5c7-4d44-b9d7-d2e52bd1562b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03231514-3f06-4c69-ad8a-633aa38560f0", "sighting_of_ref": "indicator--a1d88df3-e438-45e2-9167-6e573465a95f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2f70e9-e877-42d8-8189-a14899b6992b", "sighting_of_ref": "indicator--a1d88df3-e438-45e2-9167-6e573465a95f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dee060-ea51-4635-82e3-4b793cd995c6", "sighting_of_ref": "indicator--81fcb39f-517a-452c-834c-5a255864128e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583714e5-86f6-46c8-a0ba-6b60d4cf5577", "sighting_of_ref": "indicator--58dc89bd-9af3-404d-bcb7-94df05bdd479", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6146531-2604-44ca-a1de-b8c4981b6a8d", "sighting_of_ref": "indicator--05efb290-5908-415d-b562-fd54a77b9091", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd9ebd2-c0cd-4c61-9b51-6aedddd40e04", "sighting_of_ref": "indicator--f4cd4ac1-d6fd-4c2e-be34-acadb97a9ac6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5be60d0-0b22-4c86-8e5f-eaa8c38124a6", "sighting_of_ref": "indicator--c91ad7e1-8643-4442-ac43-c828e9fa4349", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43161c9d-988b-418a-a07a-f43aab776ae4", "sighting_of_ref": "indicator--42393621-10bc-4842-852b-77a1a86b0883", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52ee817-b8b9-4671-bf62-0275baa45358", "sighting_of_ref": "indicator--e736f9c7-54fd-450e-b5ab-d25effde11b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bca5afb-8d62-445e-aa3f-a1289fe0e062", "sighting_of_ref": "indicator--14468a45-ef19-4b30-b05e-f963ee64aa29", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96c7cc3-c8cc-43cc-b88f-d55ec9071b7e", "sighting_of_ref": "indicator--50618ead-f4ca-4ee3-9cee-c39ab870c37e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae15b7b-5c41-4f79-a2bd-fb8ea1776dbf", "sighting_of_ref": "indicator--f2d8edca-28de-4ddf-9e3c-9ae6b9d1d757", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a9155b-4bb9-415d-99d6-a7927906d1c8", "sighting_of_ref": "indicator--3a1aa905-1dca-419a-a277-bde3af3f7275", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4e136c-dc45-45e6-a387-4fc1daa55938", "sighting_of_ref": "indicator--052834c7-8df2-4157-990d-a5e5245934ae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943fb7ee-b0c4-48b2-bdad-9f928552b2a0", "sighting_of_ref": "indicator--fd4d4f13-e255-4244-bd85-efdb110d8936", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d5d052-9d28-4494-b4f3-90dc748e4611", "sighting_of_ref": "indicator--6762ec16-08db-4c9c-9f1d-a0474d31a5b6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e539d9-1957-4ff8-8824-e4aaf4f0dc1a", "sighting_of_ref": "indicator--246b76f8-f7ca-487f-9c50-fe7a07f776e2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53441f0-5a2a-4e53-9202-d02fd5e039c9", "sighting_of_ref": "indicator--a3ca304d-343d-427f-8178-54cc53942dc6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d4e1ad-e15d-49fc-b0e0-5d7bde084a52", "sighting_of_ref": "indicator--b7bfcc24-846d-4336-b058-e7804a04d278", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0dcc772-79f0-4e83-ae1a-cd927f130347", "sighting_of_ref": "indicator--b10e5194-f7ca-4699-baba-6397aac43e0d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec834332-88a9-40d7-9420-ef5d700b8674", "sighting_of_ref": "indicator--f769f94e-9c38-40dd-8dfb-abcf849aec7e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e5827d-2897-48ca-8e4a-3c99de22fd73", "sighting_of_ref": "indicator--2a7f4a61-da8d-49db-beda-1e70c7763e7a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a4fc49-eb96-4cef-b540-30a4eab75699", "sighting_of_ref": "indicator--df3b3fa0-5f8d-4509-9d1e-d52025c21816", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7825bfb-b7c9-4fa5-90a5-72dd88266567", "sighting_of_ref": "indicator--b28ad73a-3408-4ba4-a703-e48879d071f2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4bb7ca-9e46-4939-8bc1-d1d8d6bba6b7", "sighting_of_ref": "indicator--f1f3a4f4-d9f8-4ca1-8e90-0fc55f8d21c6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e8d7ea-397f-42f5-864c-808d88edb195", "sighting_of_ref": "indicator--fcbc81db-d188-4d49-96d7-38fbf8b793b8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e64d7c3-1b00-4126-8653-dce79108264d", "sighting_of_ref": "indicator--a8f41deb-e644-4ab8-968f-664c0132d5a6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd2863c-4a0a-4b43-bcfc-5edcaaba19d1", "sighting_of_ref": "indicator--89a68b16-5ee7-4451-9cc0-d6ec97e6e3c4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e22c61-ad5c-43e4-9eb0-0e3d1ff93351", "sighting_of_ref": "indicator--6bb0aa8c-e0f8-467d-a4d2-d5b195490334", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461ee289-de70-469f-a54e-f606503d606f", "sighting_of_ref": "indicator--6bb0aa8c-e0f8-467d-a4d2-d5b195490334", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7903e3be-84ab-479f-8aa8-5a05432c6f19", "sighting_of_ref": "indicator--c49232ee-d768-45ee-8cae-6164bbcd4221", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88f50b9-5f2d-480d-8e6f-8fa96babe46c", "sighting_of_ref": "indicator--a96feda9-42c7-4cc3-b826-afcfb5c249f3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1d3909-6326-42b2-89c6-8a36c1eeb894", "sighting_of_ref": "indicator--a96feda9-42c7-4cc3-b826-afcfb5c249f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56734f50-bcff-4dd8-b479-32bd4b1eeb0a", "sighting_of_ref": "indicator--20a69df4-9891-498a-90c7-71d27ce253c8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de2bae6-9b79-49e7-9181-d13dc802f36d", "sighting_of_ref": "indicator--20a69df4-9891-498a-90c7-71d27ce253c8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62dd074-0f20-49ba-895d-d56982ee36d9", "sighting_of_ref": "indicator--28cf3ea6-d0e6-4f50-9fce-f5f4bdc9b466", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b156ad27-8843-4a44-b3ae-b9330f817b7a", "sighting_of_ref": "indicator--16cc320c-05d0-4d2e-8af5-3b3063d52b33", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1064d058-4535-48c3-b542-d077f670d808", "sighting_of_ref": "indicator--2549f0d0-f484-4823-9220-5ad58a449fbc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6a6d41-a1ec-463f-b29e-46497154568c", "sighting_of_ref": "indicator--ec378ce4-a090-499b-816a-091bd27430eb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25d2b7a-c15e-42a5-89af-b10a5f177ba3", "sighting_of_ref": "indicator--69b15c46-0100-4678-a0e7-1217f9092913", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbda1136-a237-4922-ab10-3afdfa1f3b8e", "sighting_of_ref": "indicator--69b15c46-0100-4678-a0e7-1217f9092913", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613c8701-1e48-4b49-a694-1adf401c8860", "sighting_of_ref": "indicator--f4baa025-d45c-484f-9310-fbdad825d4e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eedcf3d-16ab-4523-be93-23efb908fc04", "sighting_of_ref": "indicator--a8f825ec-0b3d-4e65-b16c-7c02c7d1feac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be9337e-9fe6-483a-9ab5-b970c36a6c0c", "sighting_of_ref": "indicator--af1f21f8-e276-47cf-bc91-59ac2e052956", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1508a17-6de2-46e3-beed-a3551ff55d48", "sighting_of_ref": "indicator--b02e2edb-c4e4-4dfa-a6ad-23364c06efb8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b39289b-0818-4eab-b93b-f1c841eb59dd", "sighting_of_ref": "indicator--939d3582-93cb-4c75-859a-a9e303405544", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aeb642b-1191-4cfd-8908-f1296c8b6724", "sighting_of_ref": "indicator--d303470c-dac4-4416-815f-6ec2a0f07de8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79866748-21ba-4219-8b37-dcb8701d6a71", "sighting_of_ref": "indicator--704e8a2f-1bc8-421c-813d-b81e6aebd80f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89182485-154c-4866-b60b-8f526cba8d2d", "sighting_of_ref": "indicator--689755c1-bf8d-4ac5-bf3e-551d6f944eaf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f6a504-edd9-4fd0-986d-a096f6d3fd40", "sighting_of_ref": "indicator--e3fd8517-8dd9-4e54-a4c9-9ff6e7eda325", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0267cc16-ec41-49de-a34a-5ef83dc70a4d", "sighting_of_ref": "indicator--b3423138-cb72-46b7-b659-0a6a05d27607", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f83ea4c-2661-4665-8ce3-565926364c81", "sighting_of_ref": "indicator--7cbccf7e-762c-40d6-9551-6a6e2f0c29f7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e2c5fb-f82e-4db4-b5dd-d70cbdb52384", "sighting_of_ref": "indicator--7cbccf7e-762c-40d6-9551-6a6e2f0c29f7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b8bc32-2270-4105-a1d3-4fda7eec1a47", "sighting_of_ref": "indicator--192d306d-cf30-4697-83ee-e3fc5e4f6243", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7058a1aa-655f-441d-866c-b6bb6f8d4e1d", "sighting_of_ref": "indicator--35f782c7-a529-4234-a7d9-7c1397eae5ae", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af00a3d3-0425-4995-aba8-87cc5cb7f1d1", "sighting_of_ref": "indicator--35f782c7-a529-4234-a7d9-7c1397eae5ae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7876364e-8b92-4137-a5d0-d6b78f39e8b1", "sighting_of_ref": "indicator--3f547851-74c8-4a10-9c2a-dad017727c7f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2b1b1f-129f-4e4a-8215-f521b2bf199d", "sighting_of_ref": "indicator--3f547851-74c8-4a10-9c2a-dad017727c7f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8641f11e-6030-4f9d-98f3-ed9aad5908fb", "sighting_of_ref": "indicator--26c44819-d09e-45f3-b70e-1d6f8ce81ef4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa95001-31ad-4a93-9ec8-58512bec141c", "sighting_of_ref": "indicator--11dc34d0-3ca4-49ec-9b7c-adae0bc3f6b9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97eccfb2-19aa-46a0-85ec-24aa83306e85", "sighting_of_ref": "indicator--5e321569-69dc-492f-a476-b38d494f5ab6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a917a8-cfa2-466b-9d9b-3b4a5061f920", "sighting_of_ref": "indicator--160731a8-ecde-4647-afb7-b0ffbb32999b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3164e2-bfbe-46bc-85f8-c37748bf1e34", "sighting_of_ref": "indicator--916f9796-6da8-476e-8ebe-51928d7e385c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1ad85b-9f6b-44ff-8f9b-acf0c390fca9", "sighting_of_ref": "indicator--290c2ca5-4a0a-4a78-be75-1d52c12d7464", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65088527-c7ce-44ec-8387-2168845b2964", "sighting_of_ref": "indicator--7a037a74-91c4-4e55-a60e-d61d0a9ff5f4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb68a34-d4eb-415b-b49a-35ecc3c4ed8e", "sighting_of_ref": "indicator--365649ea-373c-47b6-9268-9204c63a67a0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaf9d39-bf68-4470-8ef2-7ae27fcd166f", "sighting_of_ref": "indicator--a875f50d-8b7e-4b10-bb85-4721bd3e8a73", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d11e825-bbcf-46b0-95c1-8260f35bd2b4", "sighting_of_ref": "indicator--a875f50d-8b7e-4b10-bb85-4721bd3e8a73", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab03065-a00b-4af4-8b7c-f2310bd58812", "sighting_of_ref": "indicator--51ab57fe-083d-4e97-bbfc-f4a1c9cfb0a2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948586ce-99cd-468a-a24a-22df13c41aa1", "sighting_of_ref": "indicator--205e6329-ae2e-4d5a-a996-22eef07c9a84", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d17edf9-9e15-449e-9cf7-bf1bb3ee1b48", "sighting_of_ref": "indicator--5af2e918-8de3-425f-8586-97923e96fa90", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb449f0a-d950-47dc-a0aa-fc211a029648", "sighting_of_ref": "indicator--5af2e918-8de3-425f-8586-97923e96fa90", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01187a19-d2a9-40a2-981a-394bd7710585", "sighting_of_ref": "indicator--036ab024-3359-4de5-9795-d4cfa5418e93", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09296d6-868b-493e-91f0-cc10d49e0c86", "sighting_of_ref": "indicator--d77bb868-c29c-43f9-93ee-f89e30f4f233", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d29418d-d1e3-4ea2-8c7b-e0b87bece056", "sighting_of_ref": "indicator--5d4dea79-e5ad-4805-ada5-37fb5446ee09", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39de7c8d-e814-457d-9b80-137538173cc7", "sighting_of_ref": "indicator--4c0e4e1b-fa27-498c-9e26-9fb308bf09dc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9718ad0d-9300-480c-8f9c-c539bd48a09b", "sighting_of_ref": "indicator--78078fb9-fbf3-4323-91cf-2118ab6487ec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbcb22a-af96-435d-ac00-fafc03b9cfe8", "sighting_of_ref": "indicator--c768b7df-1ae2-41e1-84d9-a4ba1a49c1bc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a102dcb4-7601-4b0e-a78a-9e33e5042eb2", "sighting_of_ref": "indicator--8751509c-3890-46da-9b70-76c55f59fa51", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39bb8e4b-7989-49be-b0f3-e159256132aa", "sighting_of_ref": "indicator--2292d9a5-c082-48e8-a1e1-e860bb6146c1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea0d18b-608c-45f4-8c3f-24b4d17de12a", "sighting_of_ref": "indicator--2292d9a5-c082-48e8-a1e1-e860bb6146c1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad9e139-61e0-4ca8-8bf9-fe2e793289b0", "sighting_of_ref": "indicator--37340a10-9445-4916-aaa4-2a0b35d3a0ed", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a7f508-a5e3-4229-926e-140236faf19f", "sighting_of_ref": "indicator--c4820a00-6da7-4097-8d9d-120eec04bb92", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3931cafe-3b96-4020-9255-3d92635beedf", "sighting_of_ref": "indicator--5538b8ea-d1ee-477a-ba74-2bfc8d7290a9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c422eb-bcfe-4950-bff4-a57a9c277087", "sighting_of_ref": "indicator--77739b8c-cf82-409f-9291-a4629ec90ab4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f877b95c-b2e5-4d88-97a7-3952ab3d8240", "sighting_of_ref": "indicator--d928ff0a-2745-433b-9a32-108567eb850a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f583ed66-f708-4c65-a41b-ec7d33199d3d", "sighting_of_ref": "indicator--a2e68739-0402-4d6e-82e2-664c86f3bf67", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13b5718-bc4e-4d0f-81ae-d13deff07532", "sighting_of_ref": "indicator--07aa9837-5468-4a87-b04c-6dfe143f1d0e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6cc1d5-2eee-46f0-b46b-b593fba07faf", "sighting_of_ref": "indicator--a43417cf-ff95-48b8-947a-8d05ce6d4979", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e2a52b-db14-4575-a3ab-b7d042ebeafc", "sighting_of_ref": "indicator--a43417cf-ff95-48b8-947a-8d05ce6d4979", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcfb098-882f-477b-a4aa-03e07323ff3a", "sighting_of_ref": "indicator--e19347ce-366b-434c-b5f9-f61bcde5875f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d0c041-b87d-4409-aa6e-ca632adcf1b0", "sighting_of_ref": "indicator--e19347ce-366b-434c-b5f9-f61bcde5875f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bad2cf6-59cd-422f-9786-c138206d1f07", "sighting_of_ref": "indicator--d278a2a1-bc09-420f-bbb5-f630b1cafd9e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dceb5006-2f1d-4bca-8c52-4a7c79c58917", "sighting_of_ref": "indicator--d278a2a1-bc09-420f-bbb5-f630b1cafd9e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97214a5-48f7-4268-8a20-ea63826d2f8f", "sighting_of_ref": "indicator--1a1612c4-42f9-4c95-a62c-3d6252c7ad8c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bb0eab-6cb7-48b8-8f71-131be387dc98", "sighting_of_ref": "indicator--1a1612c4-42f9-4c95-a62c-3d6252c7ad8c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d41de8-f8b9-4c23-b16e-4310b59de22b", "sighting_of_ref": "indicator--c746cc98-b91f-45f7-900d-8edbcdccb664", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357fc1d0-d57b-465e-8154-2e990340e9ff", "sighting_of_ref": "indicator--a5bb7115-8e1d-4989-b4f0-de758129543d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5c1483-e512-4bc1-8fdf-64693b14bd1c", "sighting_of_ref": "indicator--a5bb7115-8e1d-4989-b4f0-de758129543d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94e85c1-02ca-474e-9ce7-a5c934957c60", "sighting_of_ref": "indicator--fe0453c4-e3fc-4588-8e49-8e846dd7202e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c32a7c0-596d-4986-9a78-899a94ba4384", "sighting_of_ref": "indicator--d1846106-6186-45cc-85e2-6b80af7b750d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6cb700-20bf-4b32-8964-6fcdd4537b78", "sighting_of_ref": "indicator--e415caf0-ebb9-4135-a2d1-2b0b2fe11e23", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673b8007-8040-4588-ab9c-4a2a08ff81db", "sighting_of_ref": "indicator--7c282871-b8da-464b-a569-0a41fb97a17a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d907085-4be3-486a-a6c7-806a247dd8f5", "sighting_of_ref": "indicator--796f8135-e1f9-4984-8df2-5aeca5380021", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08ba351-9564-40fa-9f9d-42d1c50fe96c", "sighting_of_ref": "indicator--e0cda271-d1f1-429b-aa5f-a3dd670aff45", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ffe4cf-72b8-41de-be8c-d5d3dae7d93d", "sighting_of_ref": "indicator--e0bf77c2-4796-4bcd-a835-2e46c46e37d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373b5a6b-d798-43e8-8dc0-6c5da7663d4e", "sighting_of_ref": "indicator--3748d1fb-2eea-4296-96a6-a70a6e4ea4fc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7477725-19db-486f-901f-fa68c630cc14", "sighting_of_ref": "indicator--e00769c0-041a-4ef8-8c61-6ab637382e31", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b14086b-d9d2-4746-b66b-49f60a53a722", "sighting_of_ref": "indicator--084d070c-48aa-4538-9132-f98be00e4d1b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72f7a8e-439d-40dd-9534-5b1d0d922768", "sighting_of_ref": "indicator--84dda71a-ea45-493b-98df-76e9719c38a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12ebeb7-036d-4a06-869d-ea6742178921", "sighting_of_ref": "indicator--6e3ec84d-434a-41fa-ac37-d2cb60dae023", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bd4bca-7d9f-4624-9934-5f3717da256c", "sighting_of_ref": "indicator--34f92a82-18be-491f-afb2-91278925bfc6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de07329c-5d9b-4c28-a130-87d807eedc22", "sighting_of_ref": "indicator--dfc79a5f-5977-400d-82c5-ac574197149a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed25015-7e5a-45b0-9152-c898ebe9024c", "sighting_of_ref": "indicator--97688f0d-e4cc-40a9-92ad-8c1d87f177ff", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10b9f12-ef60-4863-96de-a01243e48884", "sighting_of_ref": "indicator--655f8eb4-1f0a-442b-b734-1a3d3fd5ca7a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc3541f-0704-4a0d-869a-25efb01bd94e", "sighting_of_ref": "indicator--655f8eb4-1f0a-442b-b734-1a3d3fd5ca7a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f766720-ac5e-4749-9e2a-70b0b609481b", "sighting_of_ref": "indicator--f6670322-4985-45e9-b5f3-f91a434a6982", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2b4558-3789-4ef2-b24c-2ac7bd7a9125", "sighting_of_ref": "indicator--f6670322-4985-45e9-b5f3-f91a434a6982", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bbb9ac-a6bf-4222-8e03-28b6bd9d247f", "sighting_of_ref": "indicator--196b75fe-0d67-455d-b495-32d5cdeb2fdf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0476ec77-bb0a-47c1-9ead-e894af0a1336", "sighting_of_ref": "indicator--f6adcdd9-9247-4446-a55d-caa19b3436e5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479164a1-9083-4ef3-b69a-a0f21b123ec6", "sighting_of_ref": "indicator--ab9aa122-c222-487f-a43f-4746d37b32fd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8130d5ad-14a4-4f7d-bbd7-16eea1ad0e67", "sighting_of_ref": "indicator--77181dfc-9b6a-4569-83f5-9e00d7a5d0c1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f639bc43-e2e7-466f-a547-f7d9d0513d94", "sighting_of_ref": "indicator--a1988270-10a7-4f4d-96a4-3aa69f1153d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc5761b-7056-4436-ad64-1394733c4469", "sighting_of_ref": "indicator--ef0deb69-3f91-4481-a78a-663fe8046941", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d017cd9-248e-4bc1-b2af-d7644e8d104d", "sighting_of_ref": "indicator--9fb9b21a-77e4-40e3-8328-233325b3c866", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a90ad0f-3ace-4d2b-89c2-63176b2dc01e", "sighting_of_ref": "indicator--c46d0684-aded-4eeb-b347-8de9f0bdad8b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c21aa7d-e1cb-40dd-b34e-563144ce9b71", "sighting_of_ref": "indicator--2c6929f5-a619-4135-b661-daf341aaff8a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e428078-0dc0-46be-a5eb-cc4d43016560", "sighting_of_ref": "indicator--524cfa56-f4ee-4856-8fe6-55c2f26fcd62", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae09d0a-08f1-473b-9e73-09098e65e1dc", "sighting_of_ref": "indicator--94f35e74-fc89-4ce9-af31-8871eca386b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16c6c7b-24fc-4151-b858-9833bdb0a7e3", "sighting_of_ref": "indicator--19d734f2-6cbd-460e-a602-352b35b9226d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b0fa47-4e74-42e0-a98f-82deef253a5d", "sighting_of_ref": "indicator--84763179-a4a2-4c94-be30-0ab169325f68", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2680f494-df04-40a0-a295-9f1668381b8b", "sighting_of_ref": "indicator--d61a6ca5-880a-4c14-8299-8366eac22431", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e20a0a-ed31-4783-bcc6-803b6042dcc5", "sighting_of_ref": "indicator--4abdb2d2-dcfe-40d4-8b80-0747050be45e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731237c3-2f91-4e90-a46e-68bad4f05434", "sighting_of_ref": "indicator--082d4b3c-c5ee-4ebf-ac9d-9cc99ea44a8d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2af7e3-6ea5-4746-a561-506faf2c8387", "sighting_of_ref": "indicator--e8bca0c9-10b2-41fb-be8d-70d112b8be28", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453f1a85-0593-47cf-8ba5-e3251e981291", "sighting_of_ref": "indicator--e546764c-0de1-429b-a3b7-13559517c612", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd2c5bf-ec7d-4d83-872f-c61a575a33f9", "sighting_of_ref": "indicator--0e3e2623-1c8f-4123-945b-8b94f7f7df1e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6e6039-51f9-418d-995c-a2dabf54ce3b", "sighting_of_ref": "indicator--66617443-d010-4377-9e80-95292541de37", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18348d0d-4816-40eb-b6cd-2fb6c0723264", "sighting_of_ref": "indicator--12b81bd3-816b-40f7-9579-a7cc724c6780", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6621371-fd12-4bcd-828b-08bcd7354fa2", "sighting_of_ref": "indicator--6e53304d-6bc8-48d4-867e-41fe0d088784", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f48a901-616a-42d7-80a7-b9efeaf3909a", "sighting_of_ref": "indicator--6c8e58c7-a6c7-461e-93f6-3349812ec9fe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bdd84e-8c74-4b61-87af-cf9a00a17a4d", "sighting_of_ref": "indicator--6c8e58c7-a6c7-461e-93f6-3349812ec9fe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7ba6fc-5ffd-4ca8-8208-ecd7518fbddb", "sighting_of_ref": "indicator--7db3cbc9-773a-474b-9f12-a3a5e0e3adaa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b30af2-8695-4b8b-b80d-6834c1a7ec0b", "sighting_of_ref": "indicator--d4afdd2a-fa43-498b-915c-1dd4375724e6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8e4285-822f-4625-9ec2-ed9114291fea", "sighting_of_ref": "indicator--3895c8d3-c204-46e9-b45e-968bd69dc29d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe041861-1435-44fb-8642-c377e7871631", "sighting_of_ref": "indicator--fe0123f2-64a5-49f4-9a53-fbb41c7bdc3a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddac02de-5b07-4735-9ca9-65e45578b377", "sighting_of_ref": "indicator--f746eeea-332b-47a6-a6fe-3a09933502ff", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b95da4-d7da-4de6-9f26-ae506973e8d3", "sighting_of_ref": "indicator--a754d094-771c-40a8-ad09-3d4c6a8de281", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fec251-cda2-424a-b598-9eb290047cb7", "sighting_of_ref": "indicator--5f085cfc-6705-406a-a85b-bf70fc3e4c9f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbaaac82-9353-4deb-97be-049d6cb0de68", "sighting_of_ref": "indicator--c7afc9fa-df06-4646-bd78-ee99dc47940d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90290b4-618c-4731-9d2d-758eb7f6007f", "sighting_of_ref": "indicator--831d6152-4cba-4974-b31a-f2a72e0602a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccce04f-be50-4c12-a69d-02018bb7e761", "sighting_of_ref": "indicator--eec2b1aa-0c61-43da-b23f-be35f8b4f719", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3e82ea-e9c7-42be-a6d7-b24b9d57aab8", "sighting_of_ref": "indicator--55f52f92-ad43-4c8e-b31e-2402e86ab44a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f463520-a71a-422e-87b2-bff60c0ded67", "sighting_of_ref": "indicator--d4117e0d-1e88-4ce5-8437-e71efdbb5895", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affa58a7-a3b1-44eb-9e1d-6df712704950", "sighting_of_ref": "indicator--4ef837c7-4544-4727-ae9f-e5cba059c8cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacfa498-ed8a-4ce3-9acd-66aa977d75db", "sighting_of_ref": "indicator--625da8a9-99dc-45df-8ebf-5c00ebb2d3a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ceeadac-f8db-42b0-896f-fe2205e6f317", "sighting_of_ref": "indicator--adfd1baa-9a54-46ef-9a7e-97e1ad2509ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c288b67-0454-4b1b-b421-e2ddb2d89b4e", "sighting_of_ref": "indicator--03dd96b2-3a2a-4962-9ffc-14161f9ea2ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc13287c-9317-4e5e-ba43-664084cd203b", "sighting_of_ref": "indicator--8b76955b-fe97-4dfc-b13f-f9c822d963a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9588729-c201-4595-bddc-e1e03c5aa620", "sighting_of_ref": "indicator--e8f1a12b-026b-49a4-8923-984572377598", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e3ec7a-7839-4307-956e-ba7273d1c09e", "sighting_of_ref": "indicator--db338a4a-2607-4e75-8de2-ff99057831ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c73603-c24d-445a-94d9-42f514356ec3", "sighting_of_ref": "indicator--8b4489b2-9388-418c-b991-34c3bfaa556f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16426760-6276-4365-8b9a-675f21afdd6e", "sighting_of_ref": "indicator--3d6d9e55-7ea0-4a65-a1fc-d5ff3c7a980b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacd6044-8c6c-4e08-940b-95d1f098c892", "sighting_of_ref": "indicator--c8efaef6-8a72-41d1-b410-01f65946cafe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47cc46b-af75-45fc-b56f-7a9477ae656b", "sighting_of_ref": "indicator--ef324ad4-ea58-431a-b7a9-b9a2475d6947", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8a05d7-94ed-409e-88d7-309d4480b2d1", "sighting_of_ref": "indicator--6ac28158-c328-44ee-a031-08bde7cf7520", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b0ef48-4e48-441b-88ba-aefe0f522f08", "sighting_of_ref": "indicator--a8bc8304-8c43-4d15-8fe9-c205004a37ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa4f16a-9f0d-44ba-af01-512cf51c74be", "sighting_of_ref": "indicator--6dbab0f6-2815-45ae-934a-311643bd63d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4786a401-9c3d-448b-ac23-0bd26f777160", "sighting_of_ref": "indicator--7925e855-4e0b-4ff9-8a3e-8d69593bf057", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c786a27e-272d-4314-82aa-34dee89e0e01", "sighting_of_ref": "indicator--6cfa7cb4-9259-44f9-8974-9ba0e0fcec9d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1933fad5-9a9e-4df2-a211-b1ab21c69f73", "sighting_of_ref": "indicator--4b0d6dab-9230-483e-860c-0d8c94001c15", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d31c351-22d5-401d-a5f9-c2364878da59", "sighting_of_ref": "indicator--38c7af1e-3598-4c29-906c-346551f66d95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae93877-7cc2-44e0-866b-210ce5bb6d1f", "sighting_of_ref": "indicator--5bb17125-356a-4ba2-af87-3bd367d1e6ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfb97ea-9d78-4037-bce0-0ad03c51c24a", "sighting_of_ref": "indicator--8acaf31c-00b4-4acb-aa3e-b47d46263e95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e33dae5-42b7-42c7-b004-f24f54f85c0d", "sighting_of_ref": "indicator--49530ad6-4411-49e0-9eeb-d53e9d1372d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a23157b-22e9-4ff6-b78d-a047f543f5c1", "sighting_of_ref": "indicator--78231395-2f0c-4640-aec7-a869e99e1dff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920d7ddb-ae25-424a-a954-1663f8e08d9b", "sighting_of_ref": "indicator--5f7eefa5-0a58-477c-b564-f68bbb12abf5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612a1b2e-a3f9-4036-b1c0-60e3ba7a60cb", "sighting_of_ref": "indicator--a028ae36-14e7-475e-80be-918a43300a1f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4681ef8-9805-447c-b6b4-a45b42789e69", "sighting_of_ref": "indicator--1b75b500-fe7b-47f0-a920-14af52e70dd5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4113e5-25d2-410e-90fc-cad4b0915d4d", "sighting_of_ref": "indicator--9ac7c0a6-0c98-4464-8fee-a207bf3c0f36", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee12000-1144-4cd8-b43f-aa1ff6ad47ec", "sighting_of_ref": "indicator--ccbb1767-af0a-44c9-a88c-d8c65904442b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae62bffe-cd62-406a-bd6e-3a2df4f87c46", "sighting_of_ref": "indicator--5af4c8b0-025f-4c96-9375-d00102bea18e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b65196-f55b-42e9-9c01-ddbeba9712b5", "sighting_of_ref": "indicator--c90c1105-9380-4c70-97cf-33498acd31ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537d1f47-474b-4103-9215-66e6f9983297", "sighting_of_ref": "indicator--bfc1f784-3d87-425b-9d4f-5896635d1ec5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f49a43b-41cc-4354-a0a1-f4b6b163c38d", "sighting_of_ref": "indicator--7e9b79e9-6be3-4db8-9a33-a686a84726c4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78cf919-d98d-452d-88bb-2b436b316a00", "sighting_of_ref": "indicator--e344dd22-e122-4be8-a80b-324344b52f6f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69077348-b593-44c3-9581-3114710eb765", "sighting_of_ref": "indicator--bf328398-7ce8-4005-9e58-93bed51542d7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074a72e8-1159-4796-9f82-d34c0b9162b5", "sighting_of_ref": "indicator--04dd33f2-3a8c-4d3e-b48b-0da319512898", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a64f831-8c6f-4ba1-847f-69b2823203ff", "sighting_of_ref": "indicator--447f03ae-3fa0-4dbc-ab05-cf0cceec41b1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f8830d-34ef-4804-a9c7-bfb77abff7bc", "sighting_of_ref": "indicator--afac88ef-def5-4cc8-a252-e42d236c24ad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247e61ab-37e6-45d0-b567-219e0f0e6ed1", "sighting_of_ref": "indicator--1f41f97b-95e5-4b96-a2dd-18b46b8ef149", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad39f73-22f0-4708-a0ca-d7d15fa45bf6", "sighting_of_ref": "indicator--b7e1a306-8fe9-4c67-aecb-5ff59b146fd7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd844816-4a70-45b4-9de8-76fca1ad9ae1", "sighting_of_ref": "indicator--8c863924-980d-491d-9df9-0d8fde549b8b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb64dfc-37c3-42c8-ba40-942e88609d91", "sighting_of_ref": "indicator--a506d113-5302-4aec-b881-34ead76155cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54d4cae-4456-42d0-aec7-eec041b79980", "sighting_of_ref": "indicator--44a47d8e-49f7-4d14-a2ed-33158b13d18e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4664ce26-46c2-4df6-b18a-bd0a35034109", "sighting_of_ref": "indicator--5b155a84-24ea-49b4-bbbc-871db26e5e22", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad10e96-6a0a-48eb-b99f-08970d58f3fa", "sighting_of_ref": "indicator--5b155a84-24ea-49b4-bbbc-871db26e5e22", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c914df-1ec2-403b-9a00-573aee7b9201", "sighting_of_ref": "indicator--573c516a-5829-46ab-9857-1df88441f945", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3d6406-21ef-4bbc-93e6-50a97937d61b", "sighting_of_ref": "indicator--005a3210-66bb-42e5-93e6-da692974c7a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2019b66-b42f-4981-bb30-73b19e543ab3", "sighting_of_ref": "indicator--28aed573-151d-4b8a-bcfc-52bd7cd5aa47", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a90edbc-6855-4b18-aa27-3127b1415f0b", "sighting_of_ref": "indicator--28aed573-151d-4b8a-bcfc-52bd7cd5aa47", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f5fb5a-a84f-43b9-ae82-df4eab140a1a", "sighting_of_ref": "indicator--ad880ff8-f8f9-4e75-9683-944e71f4485a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea776ba-b076-4c16-8e73-077f58f0a350", "sighting_of_ref": "indicator--0f571245-6e33-4108-8733-97a9cc6f7c8a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103464af-1e5a-4366-8db4-7e3e53845015", "sighting_of_ref": "indicator--04645f13-73ea-476d-926e-c6f50ec86252", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ab352b-91b6-4b05-bd09-b73bd6b8fc87", "sighting_of_ref": "indicator--b3a8f6eb-c6d1-402b-9197-3ac3b49ffdc3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412bbb3b-b6fc-481e-b686-580bf7714086", "sighting_of_ref": "indicator--1229ebb8-835d-4dc0-b3b2-d78ad761f4dc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f10f046-84a9-4359-b2b3-bd9aa88a45fe", "sighting_of_ref": "indicator--1229ebb8-835d-4dc0-b3b2-d78ad761f4dc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2493d6f3-3144-443b-92b2-d77a4a26afb8", "sighting_of_ref": "indicator--9f4970d6-94f7-4019-839a-909ae9592382", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f7fd9c-4bc4-47c4-a510-39154f1dc0ba", "sighting_of_ref": "indicator--2dad7687-f8d3-4504-a8de-9ef7877b5dd5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546b1eba-3a65-45aa-bf39-f2585dcb53ff", "sighting_of_ref": "indicator--d0e4607d-c9a6-4366-8c30-a84697ca57b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22027eac-5954-40e3-af31-77006ced9fbc", "sighting_of_ref": "indicator--501e60db-abcd-4594-afe9-c76dadbb96d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a4cb63-7672-4675-a871-ffdd9a3749cb", "sighting_of_ref": "indicator--196c696e-b6af-44bc-bc22-f6bf7b290816", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6beb971-38d2-41e1-a0f7-bca98a00ac2e", "sighting_of_ref": "indicator--557ee73e-c1a9-4747-8c21-74918bcaf4db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da1947c-006b-4939-b204-3908d072fc2d", "sighting_of_ref": "indicator--41d6c3e8-9ad7-4e7c-a1c4-e3f0ff0612a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959f05ca-8995-49ae-a292-322355d68c60", "sighting_of_ref": "indicator--d6ceb650-b829-4daf-9ae2-753921b103d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb6df7b-44a5-4d3f-a094-871f3a1b81bf", "sighting_of_ref": "indicator--6598d5ec-090a-4935-94d1-3f00b7191687", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1be3ab-7b6a-409d-85b1-38bcdbbbaa20", "sighting_of_ref": "indicator--6223c47d-6e83-4594-84ab-390d28cd6665", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722ff192-bedc-48fc-9adb-636feac15dc4", "sighting_of_ref": "indicator--f13db158-c71f-4a90-b03a-b15813d3f8be", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e27fbd-471d-4c42-be4e-370cbb4c4d76", "sighting_of_ref": "indicator--fa45324b-61ac-48c6-801f-92e6d93ced5b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abe053b-fed0-49c6-9d50-cdaccb23ada5", "sighting_of_ref": "indicator--5e4616b0-e166-4602-84d4-3f7ea3c06865", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b75f37-b93d-44a2-94a9-58bd61f0440b", "sighting_of_ref": "indicator--5e4616b0-e166-4602-84d4-3f7ea3c06865", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b327f3-a374-46db-938f-a30c62d457bc", "sighting_of_ref": "indicator--23361811-3c66-4b51-b63a-7a083323ca55", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0ab7a5-ec11-41d7-9f79-23d7d233681d", "sighting_of_ref": "indicator--23361811-3c66-4b51-b63a-7a083323ca55", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2ec60c-a11c-4150-b9bc-411e81718a0a", "sighting_of_ref": "indicator--207467d7-1754-49b1-9133-bcc04f2ad2cb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940a7485-eb1e-429b-a162-36390290d817", "sighting_of_ref": "indicator--207467d7-1754-49b1-9133-bcc04f2ad2cb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4cd5f3-aae1-4a0a-b999-fcb20dc1e848", "sighting_of_ref": "indicator--c092e7fa-f0f7-43df-b679-b17c1ee0e7fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0256bd-290b-4ce1-8214-01cd559cc48a", "sighting_of_ref": "indicator--5c49d4a7-9522-4e81-a7e5-42def64768c2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8d89dc-ad23-4c6d-9e46-3d065e912691", "sighting_of_ref": "indicator--7a1d7cc2-42c0-4c8e-9f7b-5ce081f56bb0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f0a770-48af-4b31-97ad-963714fa4ed8", "sighting_of_ref": "indicator--7a1d7cc2-42c0-4c8e-9f7b-5ce081f56bb0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedc91fb-2a68-4bf4-8b9a-cc5510fc1f52", "sighting_of_ref": "indicator--ebd0d525-c4c8-431f-b0d5-8876c3e077b6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2704fd-f036-4a09-950c-0692fe5c2419", "sighting_of_ref": "indicator--cdd6fe47-6a9e-407b-ab47-c0f1de1d4deb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e44b30-098f-4e53-8f9c-04d17d021355", "sighting_of_ref": "indicator--7b47aee5-6c38-4b46-9f7c-3d7ff841e59e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7def461c-dd82-48aa-9560-41cc98ae948f", "sighting_of_ref": "indicator--afbf77db-afff-4bae-b5ec-277dc59d14af", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a685bb-e9fa-4852-a114-81ffab84acae", "sighting_of_ref": "indicator--afbf77db-afff-4bae-b5ec-277dc59d14af", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbd8235-29ce-44cb-9191-b33f8ed88e6a", "sighting_of_ref": "indicator--8e822fa4-3201-41cf-8af0-421ffc6acf18", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc3027d-b502-473b-95e1-bcbe36dd4c8c", "sighting_of_ref": "indicator--8e822fa4-3201-41cf-8af0-421ffc6acf18", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4540b7-276a-4b88-b915-c1b6bb83f72d", "sighting_of_ref": "indicator--0917ea27-2c6d-423d-8dcd-4c4223bcea99", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85579e98-8b96-42e1-b941-644708868ae7", "sighting_of_ref": "indicator--f1160372-4ac7-4596-aa97-3d957a4c63bb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48ef410-fdbd-4822-9b67-172ad0247aad", "sighting_of_ref": "indicator--1666b711-28ed-4230-87ad-291aa19b0c33", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b639fc-a001-4027-8998-9114c5f779b4", "sighting_of_ref": "indicator--d19890e6-03d9-43c3-802f-65bc3aad433c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed81c552-43ba-4d30-bb63-8f0d1708d231", "sighting_of_ref": "indicator--d19890e6-03d9-43c3-802f-65bc3aad433c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc65365-0994-4814-9000-ae8683024112", "sighting_of_ref": "indicator--1c8949eb-b08e-4a50-ab9c-57e635784aec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13d8a1b-eb2d-417f-b9d9-0a7b2107c246", "sighting_of_ref": "indicator--8b528747-1134-4a38-87e1-bb3df90c631b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a38fedf-b5bc-48ac-af93-103dc8e9d056", "sighting_of_ref": "indicator--1c33044f-c417-451b-b7b7-882141913b96", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf269900-fdd7-4995-b534-061e3c8ef272", "sighting_of_ref": "indicator--1c33044f-c417-451b-b7b7-882141913b96", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028744c2-6c10-458c-a7f0-26a5f32e8b76", "sighting_of_ref": "indicator--394210a3-8850-462f-a61e-e0f9f1603c1f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c016ef-dedb-475a-838a-115fc3f5f7c7", "sighting_of_ref": "indicator--5dd55175-91f9-431d-8ba9-4bcd804cd8c1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8412af6-2cb7-4960-a8ca-60241b97c893", "sighting_of_ref": "indicator--42ca21d7-d74d-4e4b-bf41-993c4fa5cca2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec82001-a46e-4c32-b4ea-1049bf46e737", "sighting_of_ref": "indicator--8c4ed957-d63f-46c6-b19f-e64198c0b64e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5faa2f-b09f-4596-9e59-dc2643f5bff1", "sighting_of_ref": "indicator--ba7771fe-32a2-46f3-b54a-422206bf37d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25e556a-9224-44f2-b2c0-7bc2922ded3f", "sighting_of_ref": "indicator--8f61e4ed-0d20-4bdf-b0db-81c3194c7f9f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c80fc1-3efc-48c3-b930-0a9682178124", "sighting_of_ref": "indicator--88ae19dc-9010-44ab-bc52-6b856434e63c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c996b8-5fef-4cdd-820d-7c2ae755b87a", "sighting_of_ref": "indicator--ad257c58-ab02-4388-be28-aac922cf4765", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116b9155-ca46-41db-8428-0734dca88521", "sighting_of_ref": "indicator--6f1e00e3-951e-415d-8211-037aa47735d1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711d1669-a07d-44ad-a3e1-b9bb3d0d41c7", "sighting_of_ref": "indicator--ddd369ce-1eb7-4da0-aad7-504d43892fb0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124c5879-1096-4ce2-a218-a7aac3c1efe4", "sighting_of_ref": "indicator--4b52cf05-e69b-4103-aec9-e9b1f0566724", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f375553-0be2-436d-bde7-58b8388c71af", "sighting_of_ref": "indicator--2c76ecfb-cb33-4bd3-a521-df8a51454c68", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd524e7f-3bc4-4646-b1ff-4d4472a475b9", "sighting_of_ref": "indicator--c166d645-f2de-4a78-ae48-51f198947af5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4680a1-8921-4e84-b4b6-01962da05c3a", "sighting_of_ref": "indicator--74287ddb-f513-4291-a946-9afb8c5451c9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6885757-2032-4dbd-9825-d9bd1f7bad50", "sighting_of_ref": "indicator--9d3775a4-bcdc-452f-b91c-9b8175860fe3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fffb3bb-de9f-496f-89ee-5d3f30433c12", "sighting_of_ref": "indicator--dec9b7f5-9868-4d57-8751-62a49173a32d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6891a915-b259-442c-94aa-8e059feca229", "sighting_of_ref": "indicator--97f124ab-d895-4fbb-aba5-394160610a09", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bccd59e-050d-49ba-a2e2-f795f6ac400a", "sighting_of_ref": "indicator--88993cc5-c305-4621-8251-18d765c5965a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a3f279-6209-4818-8eca-c1ab795b84bd", "sighting_of_ref": "indicator--eb0711d2-1dac-42d5-98d9-0071d97eec83", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f336ecb-4ef4-49aa-a753-0e76428879a6", "sighting_of_ref": "indicator--eb0711d2-1dac-42d5-98d9-0071d97eec83", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6101cf28-8ae2-4448-bee5-f6f1777a3549", "sighting_of_ref": "indicator--eefa61b6-8acf-44aa-bdcc-e6f37a531aac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9461f4d6-a91d-4123-a89e-e76e624255a8", "sighting_of_ref": "indicator--de8cca53-3f05-4da0-915c-9c04a7c027be", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2062a7-90bd-49aa-857e-00c65e2f9fbb", "sighting_of_ref": "indicator--0155633a-4499-429f-b2b8-b524ecbdb016", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118b851f-19df-470c-811f-c3da1191186f", "sighting_of_ref": "indicator--f91ef8f4-b4cb-482d-ad76-f06d26cac843", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf39b15-40d5-4d11-939b-78b74e9e7548", "sighting_of_ref": "indicator--0887c527-b727-43dd-b7ce-e1042fec527a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff69b142-916b-44e0-a1d6-4c7401c1af60", "sighting_of_ref": "indicator--b5e05708-bea2-4686-865b-d5d4b2799690", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf6b7f9-9e67-4739-93d9-7a731e56455d", "sighting_of_ref": "indicator--1eb9a2d1-ebd3-45a0-8d64-f9cd655e8bb6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411f05e6-241d-4392-a767-ee20a0296b04", "sighting_of_ref": "indicator--1a4578d8-e4cb-4b3e-87ed-cb37060a0afc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4622cf3-4157-44d5-9cbd-ce977333dd89", "sighting_of_ref": "indicator--1a4578d8-e4cb-4b3e-87ed-cb37060a0afc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e488bc-f167-4c6a-a173-e8c90628ae78", "sighting_of_ref": "indicator--e1d8641c-6286-421f-b62c-a5e4c07744bc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda2c2b7-3dd5-400f-a16a-3e99ec53665d", "sighting_of_ref": "indicator--e1d8641c-6286-421f-b62c-a5e4c07744bc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bab9a51-d5bc-4da6-8a34-f8029ed3ae2d", "sighting_of_ref": "indicator--68c9bb89-f7b8-42bd-9700-91c4d54edac7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c28a1f-a25c-4584-8797-e088c3dfb570", "sighting_of_ref": "indicator--68c9bb89-f7b8-42bd-9700-91c4d54edac7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee303e0-16d9-431e-93f3-2033be9753ad", "sighting_of_ref": "indicator--96e50b96-68c5-4101-b6a6-b6e96d5b2093", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b2a154-518c-401a-b502-ffa1d8e031fb", "sighting_of_ref": "indicator--96e50b96-68c5-4101-b6a6-b6e96d5b2093", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98b9889-4558-4633-9f18-59ec4d28b757", "sighting_of_ref": "indicator--9eeb5799-481a-4847-a4a8-6bf2370ff625", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef891eb5-b31f-410c-8d6c-ed4ccd0b8cd8", "sighting_of_ref": "indicator--4cf43fcb-2836-4437-a236-145186a63e27", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd866d33-92ca-4560-98e0-7332e9a24340", "sighting_of_ref": "indicator--9f090c66-6733-4ba5-a1dd-e9388045667b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4152afac-8495-48c3-b9c2-5e9dabd896e0", "sighting_of_ref": "indicator--ede68320-4dcc-48ee-8247-34ac2dc28f6b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf0f71e-40fc-438e-a21d-1a620f3a22ae", "sighting_of_ref": "indicator--ede68320-4dcc-48ee-8247-34ac2dc28f6b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca91b9c-56fb-443e-a247-7ecb515bd0b8", "sighting_of_ref": "indicator--ae793411-4b08-4a1a-b4d3-e6e956c7a8e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc37b8f7-7c7b-42f0-bd74-d62bcbd550ff", "sighting_of_ref": "indicator--eca3a74c-5dfe-4ac3-b119-e6e21ee0f5b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c85ee4d-def6-43d0-92c5-eae7fa99afc0", "sighting_of_ref": "indicator--91ca4cb2-864d-4563-8d22-9650f03f6ca9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3095444-14b6-4f9a-a1da-2ced9d2db024", "sighting_of_ref": "indicator--0ad8ac4c-5f86-49f4-b0cd-9360906259d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4d4775-5c9b-4388-ae64-4ff77cd35a6d", "sighting_of_ref": "indicator--d602333a-cfc9-470a-9565-2e18a28283fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edb02eb-cd44-4b8a-bf1d-4cb7bd134533", "sighting_of_ref": "indicator--65ee5e23-f4d0-48d7-9fc6-10276de8c748", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e78948-6dcd-4f67-90b2-857bf6bb8d5c", "sighting_of_ref": "indicator--65ee5e23-f4d0-48d7-9fc6-10276de8c748", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822f3ae0-05bc-4249-8890-9c95451d77d0", "sighting_of_ref": "indicator--fc4681ad-b76c-4692-965c-bb06bd238b90", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef9b1b7-301a-4a8f-988a-c14f2c6c4cea", "sighting_of_ref": "indicator--e500e209-320b-449f-bbd3-681047bd3de2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f421a8-d02c-48d7-954d-62aec0848669", "sighting_of_ref": "indicator--d3d5260b-22b9-4056-acce-546464d79217", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110acca6-159c-465e-860e-ed8408397390", "sighting_of_ref": "indicator--ecbdd549-ba28-4329-9143-c5d90dcad79e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f4fffc-5e27-4d0d-891b-6b36909eb849", "sighting_of_ref": "indicator--ecbdd549-ba28-4329-9143-c5d90dcad79e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a614394-4969-4f94-945e-aea7cec59d35", "sighting_of_ref": "indicator--ac6815ca-835c-4946-a7f2-b57453400b2f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2b5d3d-811f-4af3-9da4-7a3f814ab0ed", "sighting_of_ref": "indicator--ac6815ca-835c-4946-a7f2-b57453400b2f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806ec95d-9f64-479a-a7be-2bc1a4efe9a5", "sighting_of_ref": "indicator--7eb401e1-083a-4772-9ede-0c6de4048360", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9352da23-93d0-4973-9e80-c07bb261c140", "sighting_of_ref": "indicator--7eb401e1-083a-4772-9ede-0c6de4048360", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9105d0-fc12-47fb-a12b-b2e9d13c64b4", "sighting_of_ref": "indicator--75f67a0d-f7b2-42e6-b319-fd009830d917", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357b4811-0655-48ce-aa61-648d89b9d118", "sighting_of_ref": "indicator--75f67a0d-f7b2-42e6-b319-fd009830d917", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b2c41c-81c9-4503-baed-e7d6dd3df675", "sighting_of_ref": "indicator--1ffbc0a4-20b9-4bc4-be44-68b07188faed", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5c87c2-79a9-4b1d-a922-45869c2d3525", "sighting_of_ref": "indicator--1ffbc0a4-20b9-4bc4-be44-68b07188faed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb6e405-d112-4095-8191-1de5d7e8eecb", "sighting_of_ref": "indicator--14507243-d630-4e05-8533-464507e6b49a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e81eccc-ef05-4c6b-a7b1-33f14b998fea", "sighting_of_ref": "indicator--14507243-d630-4e05-8533-464507e6b49a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ca1f36-08d5-4e8a-ae77-cfedbb58650d", "sighting_of_ref": "indicator--b12155f7-848c-42f9-b896-dcb0b70bb897", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdb408a-20ce-4fe2-ade7-c2246cf47d20", "sighting_of_ref": "indicator--d0704221-dcca-4138-88c5-cc348d93d883", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d83818-9361-44d5-9bb2-1e15acb80f21", "sighting_of_ref": "indicator--d0704221-dcca-4138-88c5-cc348d93d883", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a631e943-aa2a-4428-8cb0-9356251d63f9", "sighting_of_ref": "indicator--d8f03f8c-d4ec-43e6-a820-5b0e11511d81", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fb52d1-3b56-4c02-aebe-44f02adb4845", "sighting_of_ref": "indicator--affe73df-65e6-4440-ad0f-88daa79dacaa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80c0ed4-fa10-4277-ab8d-58da929680f4", "sighting_of_ref": "indicator--affe73df-65e6-4440-ad0f-88daa79dacaa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87875eb-223f-492b-86eb-e68c98bbac08", "sighting_of_ref": "indicator--9dec01d9-88fc-4ebf-ba53-9ba5d6d2053f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d5becd-85db-46de-977b-c72d26593e95", "sighting_of_ref": "indicator--e21bce5b-6a02-4510-bcc5-4e6667b09848", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cfc2e2-9dc7-48fb-b79f-9d737b4e2372", "sighting_of_ref": "indicator--49c46d2e-a8af-4aa4-afe8-e03a42040b98", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a567c6-87c7-4ef4-9505-ba3bd9112c22", "sighting_of_ref": "indicator--cb1c4b00-a740-4b65-ab17-e4479861ec6f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997ae6fa-185a-4084-858f-5ab1849314e0", "sighting_of_ref": "indicator--37a13f3e-228b-48ec-bda3-3fd86fcd609d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa543e7-ee2c-46ad-8adf-5fbdab8beb0c", "sighting_of_ref": "indicator--eb700a8e-bc8b-474e-90b3-4ba053137d8d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8db102-2d39-4319-b496-bdd370747c4e", "sighting_of_ref": "indicator--c68ab57d-08e9-4146-b0ab-4d187afb4ccf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a316454b-aba9-4d82-80ae-20d175726b04", "sighting_of_ref": "indicator--1c47cafa-4721-4ac7-9133-576694db7144", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868b783a-e755-4418-a371-e4a22f9eba2d", "sighting_of_ref": "indicator--ea1fa632-4494-47b6-b4b8-8cd1bb3fe67f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed71837-6a72-4e0b-aa9d-96726b291755", "sighting_of_ref": "indicator--d6d86eb4-5ff7-412f-bff9-70b1f98cd48e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bd823c-2dd3-41b5-94eb-79df7252a622", "sighting_of_ref": "indicator--c6bc8ff7-8f57-4367-80d2-77ac1dfdd3d6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e377eb-bfdb-4e31-a5a9-b2007bc3016b", "sighting_of_ref": "indicator--62424719-6884-4aff-8beb-26088e001f1e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69d6d2e-8e9c-40e8-8c9e-c4bbcc2f8b4a", "sighting_of_ref": "indicator--35d512ac-1129-4d42-b550-2c4b7c72ccea", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27fb851-07b9-4d33-8cb7-1759275beff6", "sighting_of_ref": "indicator--35d512ac-1129-4d42-b550-2c4b7c72ccea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d3b48c-35a9-4248-b103-c80cacf856a1", "sighting_of_ref": "indicator--e4f8b7eb-7ef2-455b-bd31-9c26da5216ba", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169074b0-d984-44d4-8819-724ee0feb7e9", "sighting_of_ref": "indicator--e4f8b7eb-7ef2-455b-bd31-9c26da5216ba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fee7cf9-79a3-461f-97c9-5dd0e56dfd3d", "sighting_of_ref": "indicator--5e964151-61d6-4b99-bc57-a36b31782192", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93150b13-b6e2-4229-b789-e1bed66f19fc", "sighting_of_ref": "indicator--5e964151-61d6-4b99-bc57-a36b31782192", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61f4d87-f3e6-4a54-9a6b-62874e6bfba6", "sighting_of_ref": "indicator--3b0df5e4-91e8-43bc-80be-31d60add49e9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bef2a11-5478-42e3-98d6-1d2e6f2702f1", "sighting_of_ref": "indicator--3b0df5e4-91e8-43bc-80be-31d60add49e9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02cf5c9-541c-491b-8dd4-28fb6dcec397", "sighting_of_ref": "indicator--4d827748-5fd0-4429-b488-979ff731265e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f6007c-fed7-4f8c-9ee5-e4d3267c72be", "sighting_of_ref": "indicator--0dee6a13-f539-4c65-b282-81cd2f2ec01d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c963f3c1-6dda-4812-98f5-39486c90c2b7", "sighting_of_ref": "indicator--f5182fe7-22fb-4f1d-b6a1-fba3d9ab67d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc76a43-6ba7-4644-811e-a846e01908a9", "sighting_of_ref": "indicator--a9358aef-b2ff-4373-84ea-cc4e695408c9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3e6007-87db-4eb1-8707-d8e209b2b2a7", "sighting_of_ref": "indicator--a9358aef-b2ff-4373-84ea-cc4e695408c9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9151357a-dbf4-4ca9-95c4-7bc1c9ff507e", "sighting_of_ref": "indicator--b202a4e7-7fce-4791-8e69-388c3b58c245", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23be23f-6c9c-4509-9944-b80de117335c", "sighting_of_ref": "indicator--b202a4e7-7fce-4791-8e69-388c3b58c245", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24df0e74-b6e4-4dc2-8777-5534f0abbe37", "sighting_of_ref": "indicator--2e5ab560-de43-4db6-a8e7-4ac5dbc112fe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d89a6e6-4e3f-46d3-82e9-5728bb0513d2", "sighting_of_ref": "indicator--2e5ab560-de43-4db6-a8e7-4ac5dbc112fe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1148e3-9e0e-4e77-87b1-89292ff47ef2", "sighting_of_ref": "indicator--f55e2dc7-dc6e-447b-907a-82d88461d15f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41858890-2b21-4fbf-8a8d-280c50e8812c", "sighting_of_ref": "indicator--f55e2dc7-dc6e-447b-907a-82d88461d15f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfe4b5d-ace3-4780-aa86-2b55d8fa35d1", "sighting_of_ref": "indicator--745f82ff-bb6d-441e-88d5-aba76c733eba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe74013-aa09-4929-be39-0addb84d3d7b", "sighting_of_ref": "indicator--7b6f0824-5f6f-460e-a8d8-568b80f41f19", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1eb56ce-874e-43fa-bcea-e2eedb28112a", "sighting_of_ref": "indicator--65175248-9359-4233-8dc3-1812f5e4eaa4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7793a49f-f6ca-4e5d-8bba-f656317076c5", "sighting_of_ref": "indicator--48e415fe-3a1b-4025-9a66-4f006ba4d3ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4b23b9-9cb0-4ddb-8c16-8684d0bc7d5c", "sighting_of_ref": "indicator--02b918d2-3fc5-4b17-b070-ca1065813ac4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d978f05d-6ba0-464e-bc8c-bd1cdd757056", "sighting_of_ref": "indicator--3f5e60a5-7791-4cfe-9f95-b21b8455d14f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cc4ffd-370b-4b86-9ab3-74f3acfa7730", "sighting_of_ref": "indicator--c70e78a5-87b4-4930-860a-4eb8ee2c3588", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d25d8d-861d-43b1-8dc3-3884ff81c009", "sighting_of_ref": "indicator--c70e78a5-87b4-4930-860a-4eb8ee2c3588", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc67367b-4100-4d90-b69a-1cda7b112337", "sighting_of_ref": "indicator--72f73b1f-2c83-4aef-b931-ebecf581a0cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba95683-bbea-4466-a603-508414feeb44", "sighting_of_ref": "indicator--d3fcba96-5ca6-4778-a5d4-f6cb83841614", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58db121-9944-4c30-86d6-e7c160fa300e", "sighting_of_ref": "indicator--2e136919-b54a-4011-ae46-4483543c0042", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ccf831-97da-40af-87fb-525dcf2cd57d", "sighting_of_ref": "indicator--8a5bb069-4458-43e3-b176-a085993b3b7c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcbedbb-a957-4968-8ef2-eecd68852298", "sighting_of_ref": "indicator--b13b80cb-0fe4-4af1-bff6-8869dfd7e11d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c693a04-5eff-435e-ac85-8ab4cae5f209", "sighting_of_ref": "indicator--c2eb80ab-12d6-4b6f-ab77-0c82e75d0158", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92bb2df-4186-4e95-a041-9ee26bf5fed1", "sighting_of_ref": "indicator--198ed53a-b9e1-4ae1-a61d-61e106bbc7d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26a95e0-b14c-4805-82d1-6cba688ca497", "sighting_of_ref": "indicator--83161e2d-93fa-43be-b48b-9d8aa9757a90", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9dda77-0746-4094-9c5a-14bda1da035d", "sighting_of_ref": "indicator--d2e6b2ad-d64e-4a12-b705-47c9d6bb4a23", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe0bf9f-23f2-4ff1-bee9-aed18758a8f6", "sighting_of_ref": "indicator--f2b8a8a1-be79-4c6d-95f3-3d983dc9b1f9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65001668-3794-4836-bab6-15f63039db67", "sighting_of_ref": "indicator--4f5f3a0c-0ccf-43ab-baa9-b2a24b5fb869", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9df2917-537a-44d7-ab87-341bdb38afbc", "sighting_of_ref": "indicator--4f5f3a0c-0ccf-43ab-baa9-b2a24b5fb869", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf08df9d-c128-4d19-b567-aa352e67aeb0", "sighting_of_ref": "indicator--2ef2c693-434c-405b-9e87-6a0f91fc97f2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539a341b-3f4b-422f-8d0b-cd3b245e5bef", "sighting_of_ref": "indicator--2423cf84-9824-4523-8504-0b85745168ac", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccf8bcb-2cd7-475a-afbe-b28a89041469", "sighting_of_ref": "indicator--e37d8d8d-3959-4c1a-9759-c94ff91e4bce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c444105-147b-42ee-9469-7d6c2566bd2d", "sighting_of_ref": "indicator--66deb95f-5c0f-46cc-a7e6-14d6b86877dd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf47e70-cb28-402e-956d-f5b4b84a9f36", "sighting_of_ref": "indicator--bbfa76ed-5858-4cf0-9b02-2d58236a230c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5911b23c-32c5-44f0-988e-ebd9e467a536", "sighting_of_ref": "indicator--182a4e50-f97e-4c14-996a-0dbef5bbd89c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503f53ef-c87d-4fce-93d8-269a94a8f6b5", "sighting_of_ref": "indicator--7df326d6-925d-442d-85d1-44694bd1243c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e44d53-3f2f-4c56-893f-26795fa7e5fe", "sighting_of_ref": "indicator--757c6f9e-332f-415c-b361-6b6bf5ae4915", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83aec8d1-787d-401b-88e6-e4a7a5cd3d80", "sighting_of_ref": "indicator--c84f4675-cc99-4d82-ad5f-8d49e1eb335b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777a7695-ffb8-477c-8206-1b960ec97259", "sighting_of_ref": "indicator--a59a7f74-d635-4c53-b176-1c2ce62a039d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29a2faf-ddb3-41a3-9e02-9dda3f7ce421", "sighting_of_ref": "indicator--10542245-a714-47b2-8c25-bf0ad9fd9811", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34649949-64e4-467e-94bf-ca7692ff8294", "sighting_of_ref": "indicator--6701732f-0fc8-4bb2-b60f-2eec79a6215f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50d6a9f-d0aa-40fa-965c-7907f14e41ac", "sighting_of_ref": "indicator--35fb42fd-6955-429c-b2ff-5b882c7736cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9252071-d24e-41be-8905-14b84a0e672c", "sighting_of_ref": "indicator--3317f070-1966-4f67-a773-41b5b5ffb6d0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247da7c8-8c0e-45c2-9578-15186c0fa606", "sighting_of_ref": "indicator--772fcc8f-efd4-4125-9444-bf1fe0081913", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ffd0dc-799d-4090-91b2-f26aa321bf75", "sighting_of_ref": "indicator--59be05a6-4db4-48ec-b2a4-03bcda9a45ae", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a779b82-543c-4680-ac56-f9cd2041c088", "sighting_of_ref": "indicator--59be05a6-4db4-48ec-b2a4-03bcda9a45ae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a14b28-e836-47a1-adc1-21dffb362715", "sighting_of_ref": "indicator--34d574af-0adb-4ff6-add1-f67f2ddca974", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1433d7b4-ed79-4cdb-bd76-0d27e63326c9", "sighting_of_ref": "indicator--34d574af-0adb-4ff6-add1-f67f2ddca974", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcc0b53-4fea-4338-826b-fd2d4b7f27d5", "sighting_of_ref": "indicator--a7da3221-8dba-4e6f-8e75-a54a18b72c86", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49da4379-c6b5-4c3b-b5d9-71386ec5ac11", "sighting_of_ref": "indicator--a7da3221-8dba-4e6f-8e75-a54a18b72c86", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876bf37c-0926-4133-8b6d-7df45d12a952", "sighting_of_ref": "indicator--180716fa-8eb3-4497-a0f0-a148f1b36cd5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e1b858-20ba-4910-8c4e-a9f1030764e7", "sighting_of_ref": "indicator--934f73a8-946e-45da-849e-8272080cf983", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4324131-b261-45fd-a3a4-7af212a0c5d8", "sighting_of_ref": "indicator--a693d982-1b38-43d5-8e97-f1107ca6cc74", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfe0b9e-56a7-4ae0-86a0-396435887a2e", "sighting_of_ref": "indicator--2289ac6a-97c2-4c4c-b95c-a839d105e17c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff789e4-c788-4166-9458-4a7712de4e4f", "sighting_of_ref": "indicator--2289ac6a-97c2-4c4c-b95c-a839d105e17c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d345cc-fe37-42fb-b857-18f3f9cfe4d5", "sighting_of_ref": "indicator--6c7b74c7-71fb-44b3-bf5e-15d4370c293f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002d6389-380f-42ac-a755-edad69f2090c", "sighting_of_ref": "indicator--f7503fce-d71c-4594-9d8c-fb47aaae6e24", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e680be7a-d053-4b5f-bba7-c0b085975f56", "sighting_of_ref": "indicator--01b91f5d-58a8-417b-8fab-9c5631fcdf7f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29859eb5-c693-4b9e-9cff-0858b616acc2", "sighting_of_ref": "indicator--1d274481-588c-4ea8-b713-1c75d23eda11", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9b95c5-8808-4d0b-948f-b2b6e357d8c4", "sighting_of_ref": "indicator--b38dc1c4-385c-4691-88a4-2a35513a4210", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e18871-23fd-4273-a370-eeaf4bc4270e", "sighting_of_ref": "indicator--e2e96220-b435-4b6d-adf9-bb58baba3a78", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a68a306-4336-49ec-a7bf-c18c90d0234f", "sighting_of_ref": "indicator--7dcc36a3-2be0-4947-8d4f-236083cc2841", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f32d77-ad33-4262-a165-99fec58a4930", "sighting_of_ref": "indicator--3aa0cb93-5345-48c7-8178-fa9793c76b15", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dbd698-cd5f-43a8-9ee4-0c70945a647d", "sighting_of_ref": "indicator--89a7ce7c-279b-4136-bc1a-ae2df9175aa4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3558e5f-7cae-4236-a75c-eb74c434126c", "sighting_of_ref": "indicator--89a7ce7c-279b-4136-bc1a-ae2df9175aa4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733333de-7a39-42ee-94a0-730c5723d2f0", "sighting_of_ref": "indicator--c8815332-c663-441a-a0bc-05a84fe4c857", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c1b0c4-b41f-4b61-87e5-acf09cd8affe", "sighting_of_ref": "indicator--dd4a1025-9af8-467e-843d-ebf39ff64f87", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a35e66-ede8-4802-bef8-7645b038a916", "sighting_of_ref": "indicator--e81eb3c8-1bee-428e-b7c3-5bd613a92c7f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5743dfb1-1b6b-4650-a32d-f259fad154c5", "sighting_of_ref": "indicator--ad244a03-2d8f-40c6-bec7-703eadf949b6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d54ae2a-ce96-475d-93e6-b2ebcd5bdf4c", "sighting_of_ref": "indicator--d96bad9b-52fd-4860-a4f4-b4f53b335859", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68630440-7c2a-4f58-9439-794ed7c11b90", "sighting_of_ref": "indicator--d96bad9b-52fd-4860-a4f4-b4f53b335859", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09551d3-fec6-47ee-b692-96205595ab1e", "sighting_of_ref": "indicator--c4d9121d-f8e1-43c6-927b-415ea6393ce6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294bb7d8-261a-4399-aa9f-3562ee42c98d", "sighting_of_ref": "indicator--c4d9121d-f8e1-43c6-927b-415ea6393ce6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc5034d-345c-481f-8351-3f753c238f24", "sighting_of_ref": "indicator--26ec6967-58da-43a7-b113-c99b9576bdea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2d9ff1-12f0-4169-a121-7f03b1ed1963", "sighting_of_ref": "indicator--e94767f4-0f1f-46cf-8128-7d5ca0d652d5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bfb2202-3e8e-420a-bb69-64335c4e1e89", "sighting_of_ref": "indicator--7dd93449-a1f7-401e-b25b-8b9ced8e2b2c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cc216d-f240-47bb-b986-45e19d153a86", "sighting_of_ref": "indicator--7dd93449-a1f7-401e-b25b-8b9ced8e2b2c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9c8fe6-f438-4027-8edd-865b966afb94", "sighting_of_ref": "indicator--aa194e67-81b2-480c-bf7f-1b523389e5ea", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff455f6a-1bd0-42eb-81ab-81a5eaffbdd1", "sighting_of_ref": "indicator--aa194e67-81b2-480c-bf7f-1b523389e5ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5049129b-0ccb-4157-849a-694f1acba66c", "sighting_of_ref": "indicator--10ab6e8d-9924-475c-ba23-da79fd7c673e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2c5383-ddc2-4511-9f23-d1b9f31b998b", "sighting_of_ref": "indicator--10ab6e8d-9924-475c-ba23-da79fd7c673e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14dc2ba-feaf-4557-ab3e-fdb9eb4ca868", "sighting_of_ref": "indicator--58dc2f70-9729-4945-9b20-be9dc6df8abf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6078d7be-67bd-480f-b58b-6d10bdae619b", "sighting_of_ref": "indicator--fc3cb8d3-0aa6-4ca6-b347-ec27534c42c6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872dafff-ee88-43f5-821b-e954a7f7977f", "sighting_of_ref": "indicator--fc3cb8d3-0aa6-4ca6-b347-ec27534c42c6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f12be8e-c18c-4475-8bf0-d637cb7baf83", "sighting_of_ref": "indicator--b4c69c3b-da3a-47d4-94e3-c1bdc19c5170", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2020e3d-c057-436e-90de-1e80dbabb256", "sighting_of_ref": "indicator--f766db96-6501-4ee9-a12b-130217a35818", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f466de45-d802-4bd2-a97c-e8d15f1f49be", "sighting_of_ref": "indicator--7c079b36-cd06-4ea3-8c88-c00660784505", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52b1131-74af-4be9-90a4-dc03c29611cc", "sighting_of_ref": "indicator--c418c075-200e-40ea-b272-1d47d6eb5b4a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a85a83a-0508-41e5-bea1-08b2071fd10a", "sighting_of_ref": "indicator--5ea05c4f-83d2-450e-ac0b-fa4c37bebeb5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055d0788-cecf-48df-ba24-3620d7baca79", "sighting_of_ref": "indicator--3e925e5d-9251-4b14-bda4-10d0c7174768", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec4ff5b-56f7-4292-af32-16a5d77f90ef", "sighting_of_ref": "indicator--37901ec5-de2b-4bf6-9b13-a843fd90dad2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85477402-ecf6-414d-b4e0-aa27327963e3", "sighting_of_ref": "indicator--37901ec5-de2b-4bf6-9b13-a843fd90dad2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60576edd-c942-435c-bcb9-f422ba8350dc", "sighting_of_ref": "indicator--4f241609-326d-48c3-8bcd-eedab9bad354", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40677436-c918-4164-bd98-31a08c91dcdb", "sighting_of_ref": "indicator--2653e6d0-2940-4028-82c4-471995ea2b3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f519436b-03db-45f4-89e6-e116f85deddc", "sighting_of_ref": "indicator--af173af4-68ef-400c-a198-8ad7163ad665", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3dc97b-13c9-4e71-9c7d-afafd851444d", "sighting_of_ref": "indicator--3fb1fe49-2619-4d61-8b7b-ca99d9b298dd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899b86f1-9e45-4eba-82dd-0cba0a31ea4f", "sighting_of_ref": "indicator--3fb1fe49-2619-4d61-8b7b-ca99d9b298dd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a59471-a719-41d2-8e7b-4205e2558d3e", "sighting_of_ref": "indicator--aebd712b-bec6-4d5a-b319-3ced4699ca79", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c8dbec-9293-451f-8620-5bf181aeb7ae", "sighting_of_ref": "indicator--f543d9b1-575f-4e24-8b8e-45579d1c6c32", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9045b02f-0711-4942-8f5b-3bd86ce55efc", "sighting_of_ref": "indicator--1ad95b3c-689c-479b-a19f-576ad683d008", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d36a139-834d-4bcb-8303-f5bed7e3ec59", "sighting_of_ref": "indicator--4e558ce4-2677-4bcf-b822-fbf03e401d20", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035a3b0f-95cc-4b18-8beb-3c2e3e6c588d", "sighting_of_ref": "indicator--8e5c1861-ae7f-4fd7-82ce-ce5b1270efd2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099ee42d-d349-4d77-bc92-676030283045", "sighting_of_ref": "indicator--39ad543b-5a2c-4b00-81fa-bc69f440cd9f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda8f36e-33e5-4b77-8c03-9a9bdf585d98", "sighting_of_ref": "indicator--39ad543b-5a2c-4b00-81fa-bc69f440cd9f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3ae3f9-e342-43f5-b887-d436b7d4eba4", "sighting_of_ref": "indicator--485caa5c-f74e-4046-b3d8-98201db7b7fc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae36bad-2a88-4021-8fa8-008a783f149e", "sighting_of_ref": "indicator--485caa5c-f74e-4046-b3d8-98201db7b7fc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fc71f9-d8aa-4d46-add0-72cea94e0071", "sighting_of_ref": "indicator--9a1d964a-971c-45a1-808f-9d7051239273", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ec6ca4-1971-451a-9ad8-2ebf1f5ac1f8", "sighting_of_ref": "indicator--10f11859-d191-446e-8095-c32e8cb93bd9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86fd4c1-1352-42fd-b08a-aaa5bf0da8fb", "sighting_of_ref": "indicator--10f11859-d191-446e-8095-c32e8cb93bd9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1dc043-72fc-476e-aafb-4f21da301e80", "sighting_of_ref": "indicator--0b8ad7ca-cc98-4c0a-9b85-2aee91a6ea2d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdef8bd-c3a3-4409-b57f-d7d059e9fcb0", "sighting_of_ref": "indicator--0b8ad7ca-cc98-4c0a-9b85-2aee91a6ea2d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3179d8-c2fb-4d51-a002-a26229b23d2b", "sighting_of_ref": "indicator--ca2d000c-df04-485c-8af7-aa132fe17e08", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573359b6-ba9a-4be7-8bf4-d0ef0eef21a9", "sighting_of_ref": "indicator--ca2d000c-df04-485c-8af7-aa132fe17e08", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfd4054-76fc-4980-b820-3a697ba0b886", "sighting_of_ref": "indicator--becd46c8-3b55-499b-9a3a-f371ac1cae8c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7cc8ea-8de4-4196-bb3c-b0052463f918", "sighting_of_ref": "indicator--becd46c8-3b55-499b-9a3a-f371ac1cae8c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d99f616-3743-4785-b0c4-2bbc6d1e8bdf", "sighting_of_ref": "indicator--49d2c3d1-a618-4c78-8e94-108725b69974", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf5583c-e789-4cc1-9cd4-7cdabf43013f", "sighting_of_ref": "indicator--858adc76-c637-4623-8438-debf2754c57d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a2a874-b4f0-49bb-bd71-687cb8d87d83", "sighting_of_ref": "indicator--858adc76-c637-4623-8438-debf2754c57d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd89a8c-cb36-4adc-a93f-c568e489c2e7", "sighting_of_ref": "indicator--39327f17-438e-49e2-b772-26fb246f9674", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc265cf7-868a-4809-b78c-4105de743df8", "sighting_of_ref": "indicator--e28907fe-b3e4-475e-a2b4-38f2ca40db91", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5ef0e0-b2a8-4ab8-a797-7fec8a2c52f7", "sighting_of_ref": "indicator--e28907fe-b3e4-475e-a2b4-38f2ca40db91", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1ba371-7b5a-4757-9888-0e0595a24c6b", "sighting_of_ref": "indicator--3b057c90-064f-4b40-80de-de9fd35f2cfc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4ac7ff-b90e-4c67-8baa-8744758e292a", "sighting_of_ref": "indicator--0c3c6232-03ed-4bf6-867e-1a6a83ddba16", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eaf12a5-f5cc-4093-936c-b12e9bc15991", "sighting_of_ref": "indicator--0c3c6232-03ed-4bf6-867e-1a6a83ddba16", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d55f15-da01-4bfc-b059-593329b975d1", "sighting_of_ref": "indicator--d097f1ee-ee56-4cc2-8dfb-dfbe18b58034", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f193c86-0400-4d3d-93a9-4a724a0cbb1f", "sighting_of_ref": "indicator--d097f1ee-ee56-4cc2-8dfb-dfbe18b58034", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bbb946-96ab-4358-bc27-7bee674f3d3b", "sighting_of_ref": "indicator--1768daa0-089d-40b3-b260-6f2c67cd55b6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb90c36-6e08-41c2-b811-fc70210e64d0", "sighting_of_ref": "indicator--76114e5e-7730-471d-851a-17ac1319920e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a823c4bb-153f-4f24-aa61-0fb720301c8e", "sighting_of_ref": "indicator--6297ed08-d169-412c-bb7a-ae92a29925d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ad8062-eceb-43f6-8ee0-bdb2352347df", "sighting_of_ref": "indicator--327b548e-c434-4c8c-a89b-0a824e370852", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17464b6-494f-4d1f-9633-99db4bae9afb", "sighting_of_ref": "indicator--c7cc0b05-9563-483c-ae83-89704c4857e2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313d341d-7246-4dec-983c-cd6bb0658efe", "sighting_of_ref": "indicator--fbb317c0-f096-4815-a383-389105efba06", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f061b1-b6fe-45fe-ae1c-7fae2a8fcd71", "sighting_of_ref": "indicator--bdea250c-0653-45c6-aaad-b6bf885b9bb1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d745380-3912-483b-8969-868caa6cc056", "sighting_of_ref": "indicator--79e21cfe-bbcd-4124-a5f6-b6a911d1a801", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c49183-59b4-4655-afd7-b1e9730df3fa", "sighting_of_ref": "indicator--0869b3fb-5fcd-403e-ad91-6b6f57c581cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9412eb-cd6f-4a9a-9785-7e0895977e96", "sighting_of_ref": "indicator--c5acce34-9f62-46e2-ad45-c55d759dfada", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74648746-25f3-4e24-af50-7d633775985c", "sighting_of_ref": "indicator--d0f88af9-d2eb-482f-a6ad-10f76b88142c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f84804-1cad-4d6e-baff-926e9e83242d", "sighting_of_ref": "indicator--688da567-d008-4c27-99e1-7607cd7d9623", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cf46b6-b8ff-4b6d-895c-0273b3569f00", "sighting_of_ref": "indicator--248a57d1-6057-4799-824c-c09e9a1dec3e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825dffc1-91c7-42fb-a9a7-a77db44eef4c", "sighting_of_ref": "indicator--2255034b-b531-4f59-86c5-1f121e7873ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adccdf80-0f52-4f39-97ac-79b66ade17c3", "sighting_of_ref": "indicator--155d41b6-c845-44d4-abe4-555d8ef5e404", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042580c8-891e-4961-8116-6ee9ca2f0294", "sighting_of_ref": "indicator--155d41b6-c845-44d4-abe4-555d8ef5e404", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4d2622-3457-4c84-9abc-f19f350d7e1a", "sighting_of_ref": "indicator--bb262a40-306a-4de3-bfd5-8f37eaa4b33a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721ca31a-8301-419d-9955-633cac1c2ba4", "sighting_of_ref": "indicator--86b71002-1ec9-4b54-9f7a-32e51205fd4b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb20022-d057-4524-ae0e-3366b870595d", "sighting_of_ref": "indicator--2a7b1c4f-f543-4148-976b-912c383a18d7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec3d16b-a229-4418-9d0d-b8fc565895f5", "sighting_of_ref": "indicator--373e1d47-df46-42e3-ad89-94b96d5d04dd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ede410-4558-452e-804a-4d39b3c7b954", "sighting_of_ref": "indicator--affd3c89-4011-4dc4-9257-4d33c0311752", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8ee84e-d9e3-4421-aef7-b587444dd581", "sighting_of_ref": "indicator--5576c7a6-7672-414c-b187-c543a22778f3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4349a811-ebf3-43e6-ae97-65208eb49593", "sighting_of_ref": "indicator--9434fb3d-97c0-4af7-a83c-87a7ee0b2a1a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dcf8c7-f0e6-45ed-b32b-e259e78ecdf8", "sighting_of_ref": "indicator--20d31197-0215-4920-8d23-74034c8bdd8d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557c5687-587e-4d75-97d1-bbbeafae4aec", "sighting_of_ref": "indicator--20d31197-0215-4920-8d23-74034c8bdd8d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d09204-dc7f-49dc-831e-5b77849f611c", "sighting_of_ref": "indicator--92b9b288-1204-40e8-9c45-29ce1b4d03d9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe88f38-d970-4939-b18e-133e89aa58b8", "sighting_of_ref": "indicator--92b9b288-1204-40e8-9c45-29ce1b4d03d9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c502ac07-2371-4670-9f8b-efb293d43562", "sighting_of_ref": "indicator--62b04035-19bf-4c45-97ef-187709715a28", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77087ff3-3c4c-4b14-a4f2-c32f94c9c54d", "sighting_of_ref": "indicator--2fcc170a-585e-4e6e-a5e3-7cc529ccf7be", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b833c68a-5b0d-423e-a353-3ccd1b8a3ee4", "sighting_of_ref": "indicator--6070794d-87d4-4cde-8964-c527727f86a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed9315c-d020-4bd1-ade6-2c292cc6a7fa", "sighting_of_ref": "indicator--d3ff855a-5d04-4f69-8ffc-68e0e7ac5590", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d202780-3287-4ed5-8066-186041456922", "sighting_of_ref": "indicator--3659ecfa-aa81-4741-a05a-5f4c30efc08a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bc37c6-a692-4b86-bbec-587a3d61f54c", "sighting_of_ref": "indicator--b042b3bf-bfb4-436f-83aa-bb4dd20a23e9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dda85d6-a112-4dfd-8383-129e93b916d9", "sighting_of_ref": "indicator--2f62aa3f-516c-4415-9f83-64c457059400", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8e378d-c258-459e-9853-f5052d741192", "sighting_of_ref": "indicator--749ce339-a267-4af9-84b5-488a8c9f9c30", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64a0e05-1c7a-483e-90e2-2367097c369f", "sighting_of_ref": "indicator--15293bf5-654c-4c10-b803-bd559c480ee1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fc5fa4-e8b4-4308-9345-3c116b825678", "sighting_of_ref": "indicator--15293bf5-654c-4c10-b803-bd559c480ee1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c46780-87f2-4b96-b7e3-135c55c0065f", "sighting_of_ref": "indicator--d855ad8b-110f-4e94-aebf-802e3821e013", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a792c6e-7cc1-4170-84c8-50e6b24c28a8", "sighting_of_ref": "indicator--d855ad8b-110f-4e94-aebf-802e3821e013", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb569c7a-c8f6-4a0c-962f-381de751a3b3", "sighting_of_ref": "indicator--68720d95-acc2-40c1-9b9e-077bb08afbc6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bfe506-55f8-4be0-8998-97b7238888ed", "sighting_of_ref": "indicator--825dd342-0a80-4a2e-91e7-cdec94708807", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2994797-30de-4d71-8c39-cadad5c17fb1", "sighting_of_ref": "indicator--825dd342-0a80-4a2e-91e7-cdec94708807", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793a84c7-1267-47ed-a908-5b104c53d48f", "sighting_of_ref": "indicator--5d5b20bc-4b34-4475-bbd6-288b55688732", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2f2b3f-8e81-4ab3-b612-c7633099fd1e", "sighting_of_ref": "indicator--7853851f-557f-4a89-ad57-b37d48d541bb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8916df-f9ac-4cab-b4f2-18824e436f06", "sighting_of_ref": "indicator--14892b4c-399d-49e2-bfcb-3b6bfefffb18", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5741af27-e0eb-445d-b53f-1223987aa56d", "sighting_of_ref": "indicator--06fda412-7321-4813-9d58-5fefa65a2772", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc16097-fd94-4e09-932b-94469dacbd98", "sighting_of_ref": "indicator--06fda412-7321-4813-9d58-5fefa65a2772", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4720cb72-8b85-4af6-84c7-24cb51063cd8", "sighting_of_ref": "indicator--7f511884-0bf7-4c56-bb5e-b3406f118da6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cf8e6d-9f8b-46a0-bd1b-ddf9bdb9cd82", "sighting_of_ref": "indicator--60189a19-740f-4eb8-ac0c-ef3e3f9a16c8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62783814-1b7e-4e78-86d7-7a378aff6abd", "sighting_of_ref": "indicator--683c3e0b-bb5c-4368-a414-62809332fec3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8894aba3-f68d-499d-b74b-81c1cc7285ce", "sighting_of_ref": "indicator--683c3e0b-bb5c-4368-a414-62809332fec3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75a0c50-652a-42fd-aa9d-7c19ebfdad54", "sighting_of_ref": "indicator--dd9676b8-ba66-4b41-a4bc-e2a12329d310", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7f4cf1-ade0-466d-8a27-d161a3fef3e4", "sighting_of_ref": "indicator--f592dbd1-6f7b-42b0-b9d3-df8386d69c48", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e63dcbd-ad19-412e-bd65-8faadd6e0193", "sighting_of_ref": "indicator--cbfca324-b0b5-4bd1-adb0-b5b46fdaaffd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3ee3f5-5409-45dd-92b9-0b443ecdc273", "sighting_of_ref": "indicator--1806a79a-8327-43ed-b028-382197aeec8b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bbc84e-889c-4030-acf6-d398a17fb74b", "sighting_of_ref": "indicator--8d6e6052-8880-4474-b1a0-3b60e6d20506", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd489b8-ba80-4517-a0f7-af2864d66d1a", "sighting_of_ref": "indicator--36479a86-350f-4f7f-8628-f7a6dbfdfa73", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303a6787-f66d-42e7-afb9-f907ef3b04bb", "sighting_of_ref": "indicator--0ed8607b-da14-4d5d-9178-738ed6703bac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7927fa4e-8d24-4385-a687-e25085bd0b32", "sighting_of_ref": "indicator--0a9464cc-eb51-49b1-8c76-95784cc1043f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdedaeb-0558-485a-83d5-72837ec25a89", "sighting_of_ref": "indicator--0f9e7ac8-4109-4296-82e1-1d4e0780cd2f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3023e8-7290-4654-8c88-4083b518162c", "sighting_of_ref": "indicator--03ab4f83-2a21-4164-a560-a55ef410a516", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f35eadb-2a54-441b-beac-76b8010a03df", "sighting_of_ref": "indicator--d5ff832d-9ba8-4253-8ffe-f6e42ac856bb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc28a989-57e2-4430-9c50-e1dea070f891", "sighting_of_ref": "indicator--3cf5f274-032e-4632-b5e2-400fada91042", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e8999e-e916-4505-94cc-9e5255b090f5", "sighting_of_ref": "indicator--3d74bdbc-2274-457c-8b10-2865448c8595", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07571ca5-76c4-4f5b-92bb-b9f3fef7b0e7", "sighting_of_ref": "indicator--3d74bdbc-2274-457c-8b10-2865448c8595", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d79875-a117-44d8-82f2-9191c6a54b3f", "sighting_of_ref": "indicator--82c54275-3878-4386-9734-1fe2e6f0f2be", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e617ab61-ec63-4155-a137-d35830637f7b", "sighting_of_ref": "indicator--5e8f9cca-8da5-4763-ad9f-29d66ebc364d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2581e05-661e-4062-9ca5-b7cd1f349ad9", "sighting_of_ref": "indicator--e508a313-2e36-40a3-8b4e-158117a63d7d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de75293-8f56-47e7-a8d3-a0946e79b763", "sighting_of_ref": "indicator--efc4a75f-3175-46aa-88d1-0d073a3621df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c78226-2abf-4b41-8fd8-2c162ca40b67", "sighting_of_ref": "indicator--5e264bec-114c-48ba-bf67-a85cafb141d7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93a3b92-ee11-4475-9ac6-4774223203aa", "sighting_of_ref": "indicator--3851280f-25bd-4f52-aa80-514a290a85c7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc51fd1c-a7f5-43ea-b38b-d79945de4c57", "sighting_of_ref": "indicator--a020d90b-68dc-4199-8103-a752a5dcd3d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a380c53f-351f-4b6d-a8ca-1daaf44f8f25", "sighting_of_ref": "indicator--11aaa47f-a2f6-4664-8c8a-fccab9ff9bee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8aab55-16de-4b6a-8385-0ba2024e6b56", "sighting_of_ref": "indicator--19879a1d-630e-4edb-8f9a-d614efcb581a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17222a6e-6084-4c92-b223-7f705cfb01af", "sighting_of_ref": "indicator--810c3981-9846-4340-ac93-ae0badfcbc5d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffaaf44f-c9aa-4b9d-9df1-087c3b04ad34", "sighting_of_ref": "indicator--46eec7ee-2292-4b0a-8190-680f820be90e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3b4c54-ce07-4735-b8d0-7c6767d22299", "sighting_of_ref": "indicator--c3dc2bfe-23e1-453a-8f9f-aa68180ec443", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e6a796-49eb-4217-b713-398ed2c42800", "sighting_of_ref": "indicator--d817e2f4-02ae-446e-90d3-90afef54ec41", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa51c89-83b9-41cc-ad95-1116d1417f4f", "sighting_of_ref": "indicator--3a3f67f8-8db3-4998-8c34-1ab2e10a166b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1fc949-87ea-4b07-b32d-08254b860a87", "sighting_of_ref": "indicator--04e04381-9f27-4dfc-975d-96c9abcc06ce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23ca54d-b50b-4b0a-8a41-897a8f0dd2b4", "sighting_of_ref": "indicator--19733b58-0059-45dd-b5b1-9c3304d2d9bf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f43957e-61b7-4bb8-99b1-c01d44cd8bcf", "sighting_of_ref": "indicator--e898fca7-fd5e-42a3-bfc9-0ba462a4ffea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71061c47-d26e-4e27-82f8-88c08e4d9504", "sighting_of_ref": "indicator--4cec0f1d-680a-40c7-be4a-fc08541eac41", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d9e9f9-588e-4e7d-a97c-12711d560ac6", "sighting_of_ref": "indicator--baefedad-4ac5-470d-93e0-7ffb651cf9df", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9edbf4-8099-431a-a37f-0c10da1384b6", "sighting_of_ref": "indicator--e5c93647-68ce-42b1-bcf6-3265cf43d0fc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3863e882-f068-433a-9710-859af9d52836", "sighting_of_ref": "indicator--14db72aa-728f-4004-b4cf-fd8617e48ed6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f758fff-9602-4fa0-95cb-8c81db97b286", "sighting_of_ref": "indicator--d9e2a32f-225f-48db-b106-8fa24de3f33c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d2c20e-1f96-42bd-86f8-36e3b10b44df", "sighting_of_ref": "indicator--262647f1-a62f-4abd-8822-f2ec330be101", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35258106-3ad5-4464-859f-85e9059d7528", "sighting_of_ref": "indicator--f147a2f4-fac2-49b2-8ace-e76d1d348533", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d413ae-4fde-4ccb-a297-6accf06faee2", "sighting_of_ref": "indicator--f147a2f4-fac2-49b2-8ace-e76d1d348533", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd855fc0-a9f5-47c5-87dd-c5b510b301f4", "sighting_of_ref": "indicator--c51504cf-8eed-42e8-90c6-93757579ff78", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e91040-554a-4e38-ae27-863ddc992259", "sighting_of_ref": "indicator--bbf0b73f-789c-4687-99aa-48506dab00e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d8fdc6-49ff-46a3-8f4b-e3236d4a804c", "sighting_of_ref": "indicator--600bf181-176a-4a3a-81b8-39d50ab2d9f5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632c3bd7-5840-41c2-a765-5c8108f8d242", "sighting_of_ref": "indicator--33877446-bc5c-456e-af52-c40352c5d498", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7fc064-217a-4e1a-a7fb-a362ac1d850e", "sighting_of_ref": "indicator--89978c8c-0208-42f9-867b-48856a6cc171", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3621b9c-64b1-4f2a-8a3b-af989c89363d", "sighting_of_ref": "indicator--dc426d81-606d-45af-a077-1df75a012c5a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990f65ed-47b7-4881-bb9c-4d19ac329076", "sighting_of_ref": "indicator--5b92d503-2ddc-4df8-bf6a-21f7fda0246c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89736402-1e9a-4026-afad-7ac6078ab58e", "sighting_of_ref": "indicator--cfb07579-3c92-435c-8ea4-0409fd0d3774", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a36bbe-3664-4552-b6db-33d00eb11e2b", "sighting_of_ref": "indicator--d0643dbf-b838-46e5-b546-3473d2e4ac04", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8badb3e0-5fe5-4204-8b10-9f98612cc107", "sighting_of_ref": "indicator--ffcd01e6-0211-447c-9b1a-8a052c416309", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382b00ef-89b3-4171-a92d-6fcdde533b54", "sighting_of_ref": "indicator--94fd1c82-3e23-4910-aafc-08015454a141", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1249df98-6cbb-498b-94a7-76f99737b96c", "sighting_of_ref": "indicator--753fc39c-eafd-4cb0-9e0f-350ef82f121e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694946b4-e4ba-41f8-b522-1e89a81ea086", "sighting_of_ref": "indicator--a16b71cb-e371-4501-b3fe-f7d15c61415e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123510d8-7059-49f2-b0bb-b588fe2d8085", "sighting_of_ref": "indicator--2c31c5c4-7495-4d53-b27b-b8ff0c49fd11", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0186f2c9-0576-435f-80a6-ac2432b29e88", "sighting_of_ref": "indicator--7e534ef5-226a-44bb-b67e-0823838ba758", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c63d18-b611-4b92-8325-375fb2f084aa", "sighting_of_ref": "indicator--b5ec26dc-0d00-426f-ae1b-65dd071af215", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49476ef1-6e2c-4a4f-898b-e369490cd3c4", "sighting_of_ref": "indicator--6ec98767-6581-4ca9-acc1-9399f4c81991", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52d8bc9-5e88-4165-a1fe-51fd38d4d2e1", "sighting_of_ref": "indicator--c5bc6716-9efc-4d69-8ee1-98fbb677109d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46941df-fae5-46ef-b6e5-58016f48a2be", "sighting_of_ref": "indicator--64495f0f-41c8-4413-a1c8-97112d9a6b35", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c341c61-ecb6-48f1-b500-a4e1569fb76b", "sighting_of_ref": "indicator--12a3d553-0863-4c7b-9208-400615cbbdf2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463872ca-f2d0-4984-b6ec-712c5fc16499", "sighting_of_ref": "indicator--3b8fcdac-e61b-4a20-bfcf-4cf13f966c20", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b1f7e5-de4e-463a-a950-cc9eac58cb9c", "sighting_of_ref": "indicator--4a86f502-3fcb-4711-a4fe-4203fff31a78", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a04a6e-0597-4d1a-a2b1-8e2eda9d119f", "sighting_of_ref": "indicator--4a86f502-3fcb-4711-a4fe-4203fff31a78", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d855df83-368a-4823-8940-22c621a6e33b", "sighting_of_ref": "indicator--c0b95853-069a-4fde-b66d-26181ad2f74a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a373016-de02-430d-9faa-3be62ee84378", "sighting_of_ref": "indicator--43cf493e-f193-4b8a-8b34-0b3a85209daa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f17697a-a719-4228-bd81-7e068121bdad", "sighting_of_ref": "indicator--058be1fc-c167-4772-8ef9-f1ea88c53099", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b345d7-cffd-431c-a5c3-f1afb2b80cc4", "sighting_of_ref": "indicator--3ca9858a-f2f2-4b55-9c06-e91cd3d73bd6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665ffc2c-6694-40b3-85e7-3be373852235", "sighting_of_ref": "indicator--a545f573-7121-4ce9-8a1c-4084c79f48c9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8eb54c-229d-45c0-a5c2-7fd79e8a86d3", "sighting_of_ref": "indicator--9f170e7e-3c82-4e84-a8b2-04d85af59784", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607cff82-d831-4371-8bb1-421ccaf015d8", "sighting_of_ref": "indicator--9c85d82c-d4fe-4dfd-b742-4ae188554207", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426d47bb-889b-45cf-9cfe-188876096cbe", "sighting_of_ref": "indicator--bff53e0d-6f85-449b-80e1-fc3cbeceea13", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2e3ad7-7bb4-4e15-9f19-177138674966", "sighting_of_ref": "indicator--50b628e3-d858-4169-8eae-4f24bd2c384f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef219ce-5459-4797-ac49-77316fececea", "sighting_of_ref": "indicator--50b628e3-d858-4169-8eae-4f24bd2c384f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fa2f16-8231-4bda-8676-3486f41759fc", "sighting_of_ref": "indicator--d936fe36-3a69-47a4-bf99-32a8ae722512", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0038fa0b-4a5a-478c-b8a4-85f838e7aeee", "sighting_of_ref": "indicator--a2a59eb2-a8c2-4781-8af1-f8d0f68056da", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4b8c25-3081-4491-b424-3019bd99ce80", "sighting_of_ref": "indicator--17922026-fe23-4656-8cb0-18c33827d543", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d64962-98eb-4b8c-969a-7b1effff1172", "sighting_of_ref": "indicator--e02f69cb-9d96-4cf8-a8e5-b9fe3b0bd326", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fb695b-182a-45ca-86eb-a98591a19bfe", "sighting_of_ref": "indicator--e02f69cb-9d96-4cf8-a8e5-b9fe3b0bd326", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65a2f55-10d1-4dd7-b274-54632cda5592", "sighting_of_ref": "indicator--cd9a7b12-735c-4366-bf14-c0212ba62079", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b537ae-fc21-43cf-851c-ad5d621a602f", "sighting_of_ref": "indicator--ca2b1156-5160-447b-9727-ac10c4330285", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a164972-87e0-4ac8-8022-4558525c4680", "sighting_of_ref": "indicator--e079ef21-acb7-4146-9d07-c75f9dc3295d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41aa572-5ba4-422b-9473-392f5744d32a", "sighting_of_ref": "indicator--3ae30303-2c01-444c-a64f-6f35c99f5adc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c0b047-29b2-4b62-8f21-44d754a00e15", "sighting_of_ref": "indicator--3ae30303-2c01-444c-a64f-6f35c99f5adc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44b9af0-ea08-43b8-aab2-d1354047c663", "sighting_of_ref": "indicator--991c4e74-836a-4088-8b31-a158f937ea78", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3632acd-1636-41bc-bfab-7203580011c5", "sighting_of_ref": "indicator--f9bce562-a889-4d0b-b814-9b37381f5bd3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cdabff-580f-47b7-a945-61a53c41f53d", "sighting_of_ref": "indicator--f9bce562-a889-4d0b-b814-9b37381f5bd3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccdc4ab-1a52-4c7a-9445-0d12d1047ce2", "sighting_of_ref": "indicator--566e31bc-f572-432a-97e0-c9e5d942eaed", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b02f901-ad4b-4f4b-8537-17a406ba33b5", "sighting_of_ref": "indicator--7dda93e6-1f80-4569-9e89-c07e6ed14fe9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f4064a-fe1e-477f-96f1-b0846f5b1f0b", "sighting_of_ref": "indicator--d21696d0-b78b-414c-9052-19850513008c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af069beb-a63b-4868-932c-e74e704aec7c", "sighting_of_ref": "indicator--371f1651-62dc-4dfa-98b3-f62312700e10", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6972c2b8-ecf3-4e24-b43a-5f2b0fec513e", "sighting_of_ref": "indicator--d492f041-5386-43af-816e-7de1997e0e72", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0cc763-af12-47b7-8466-664f4f2d06c1", "sighting_of_ref": "indicator--a60372b5-5464-4ce6-89ea-ddc648243e13", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140aa972-ea0a-4163-8a67-e56ce3716da2", "sighting_of_ref": "indicator--f51f44f8-5114-40be-8748-88d0c148a607", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a05afe9-6387-46f3-96e5-bb9fab63513d", "sighting_of_ref": "indicator--f51f44f8-5114-40be-8748-88d0c148a607", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86a2b1e-c544-4186-b150-1d9b166342f7", "sighting_of_ref": "indicator--717b3bf2-805f-4cbf-b3ab-53eda0ebcde0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b51593e-4084-454b-9dc0-d4072f17e73c", "sighting_of_ref": "indicator--96a014cf-9b7c-4331-8268-ca57035e2518", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d918a715-5061-46c4-bbb0-a5addef9e472", "sighting_of_ref": "indicator--d4437c0e-7aa4-45d1-b4f1-f8b028c2d5e7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706d6eeb-0db2-4e13-99d9-59f95fae23f2", "sighting_of_ref": "indicator--d4437c0e-7aa4-45d1-b4f1-f8b028c2d5e7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2a4ae9-e69d-420e-92a0-0c39f45e7ede", "sighting_of_ref": "indicator--22982ecc-46aa-4b0f-88ab-ad7991267ec0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d21ada-1a16-42ae-ab3c-f23903b85794", "sighting_of_ref": "indicator--378ceebc-f86f-4043-bd39-461670b0a2a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b51c772-1330-43f0-9b35-40eb2b4cd716", "sighting_of_ref": "indicator--edfbd72a-0639-469e-879b-4ee5fd2c00b2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cb91e2-bab8-40f7-8edf-a699935e2289", "sighting_of_ref": "indicator--1bad6364-7c7b-4916-8812-0849d14df329", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c62c93e-77b8-497a-9221-bd93e001702b", "sighting_of_ref": "indicator--8b93dc38-a1fd-451a-a4f7-43964cdb72b0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c01278-8fe9-4b7a-856a-1712b9f1bee7", "sighting_of_ref": "indicator--8b93dc38-a1fd-451a-a4f7-43964cdb72b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580af113-2f5c-4f5c-a84f-71dbb5e2e4e6", "sighting_of_ref": "indicator--dbdc3d93-e6f9-4184-aa8b-94a1ea110667", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1635ffb1-0f3f-4fb8-994c-0587534a8628", "sighting_of_ref": "indicator--d9a7bb41-5e7e-43a0-9387-c626364bf5ed", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23aafd96-0ad2-4e85-bb7b-1a552e219035", "sighting_of_ref": "indicator--d9a7bb41-5e7e-43a0-9387-c626364bf5ed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d479be-ffdb-4a34-8075-d28d36a51827", "sighting_of_ref": "indicator--1b159047-81f5-4c3d-8404-090f0ae083a1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f64306d-2e63-405b-98ba-53887e09d3d3", "sighting_of_ref": "indicator--2135f0b5-6e3a-4026-b4a4-61c474fbf687", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d8a53f-3241-4bd8-a56e-4fa77f89a72d", "sighting_of_ref": "indicator--2135f0b5-6e3a-4026-b4a4-61c474fbf687", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8f56e6-4aa2-4fe7-9084-e620dbcedfd7", "sighting_of_ref": "indicator--878a2f85-2940-4ec8-b269-28242ebb2723", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844de356-e55e-4c8f-a078-ac4908d24012", "sighting_of_ref": "indicator--e00de1aa-4544-40d0-8024-52dc35d3a1e9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f6b6b1-96e9-4a5d-88c5-6b945d08abbb", "sighting_of_ref": "indicator--b1ea7b66-ccf8-46c5-8fad-34b0e9d67476", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316e82f1-03d5-4a4c-ad41-58693f9438cd", "sighting_of_ref": "indicator--62eb718a-0ef0-4955-b78d-69f05ac40802", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94dc2eb-a58a-45be-bc8a-d756db560530", "sighting_of_ref": "indicator--52235236-cf4f-4295-9837-b2cb32887bcd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3e3607-4b2a-4aab-8533-a416ab31fe49", "sighting_of_ref": "indicator--e193acee-8269-49c2-b17e-37eb308a64b8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f5bc65-9241-4622-b6c2-9ad583920582", "sighting_of_ref": "indicator--3af38c0d-1f7b-4ce4-955d-ec7383757470", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c656166-0688-4595-a084-ff45b70bd785", "sighting_of_ref": "indicator--e324116f-bc50-4ce9-bae4-f948d4793673", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899b56f4-7dcc-41c9-8ff1-cd2d6d789ae5", "sighting_of_ref": "indicator--039af007-42b6-46bc-a990-bc568fc477bc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b051e9-c087-4d58-b2a0-e1888d8917fc", "sighting_of_ref": "indicator--1ee10948-bd3c-48d6-a76e-97c1423dc9a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34571b14-7188-4d2a-b1de-9ee8fb933980", "sighting_of_ref": "indicator--9a93e404-02cf-4c21-86f2-eba4a5e48970", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c201b50c-f427-4330-bf5c-ecc5e9774a6b", "sighting_of_ref": "indicator--e646958c-a884-483b-8089-43e4b3422f5f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138f8ce2-37fc-4126-ab2b-044b4505abd2", "sighting_of_ref": "indicator--8aecabb5-f374-4937-acc0-392e6d631110", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5c56c4-81b3-4fcc-96ac-268101a35a39", "sighting_of_ref": "indicator--58e3c11e-a296-4d07-8e3d-40f4c5803806", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f4fa71-7320-4a33-8a84-4fc891a50898", "sighting_of_ref": "indicator--58e3c11e-a296-4d07-8e3d-40f4c5803806", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad88a5c-c6e2-4ec9-8944-4058d326281d", "sighting_of_ref": "indicator--131c6cf8-5991-44ad-b0c7-314b42620a46", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aeb6aa4-d8e9-4354-84b2-84020ff466c9", "sighting_of_ref": "indicator--60d5f7e9-46dd-434b-9403-d7c27c1216c1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87a9af0-15c2-4343-8475-aa479dd70f37", "sighting_of_ref": "indicator--60d5f7e9-46dd-434b-9403-d7c27c1216c1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af8d87c-dcd3-4c6b-bdf4-86c697913109", "sighting_of_ref": "indicator--e9c020da-5ff5-497d-89b1-2f0c40afdbe1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9d070f-731f-4ea8-a2a0-24d10080a18f", "sighting_of_ref": "indicator--a17f6879-19be-4abd-bdcd-46a58adbeb47", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31429bca-bd36-45e9-b97a-673f292b7a15", "sighting_of_ref": "indicator--f03e23f2-75ef-4afe-8dee-bde8f88491b1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10264de-5f7f-445e-a343-f3e0d4179fcd", "sighting_of_ref": "indicator--f03e23f2-75ef-4afe-8dee-bde8f88491b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100a8c1e-2e5c-4fb1-bb94-3d3f490201fb", "sighting_of_ref": "indicator--7ca72a71-c162-45ef-b1b8-8e6e46e1e109", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed63d92-3bcd-408b-b361-09dba5fe9c1a", "sighting_of_ref": "indicator--7ca72a71-c162-45ef-b1b8-8e6e46e1e109", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acbb0f4-5239-44d2-a871-71b823b518a0", "sighting_of_ref": "indicator--272d47f7-fd87-49eb-a4e6-d6aaa0874ae4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43b195c-a9fb-4695-9b6c-5159b2beaa2c", "sighting_of_ref": "indicator--5453a252-012f-499f-ab6f-09e49ecc714e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b31aa9-fa5d-4ecb-bf43-efbe1c9636e6", "sighting_of_ref": "indicator--56f86abb-8b2e-4ee5-bfbb-938a56453991", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c63749-3cf7-4fec-b2e8-ce4ab25197ad", "sighting_of_ref": "indicator--02b3a7cc-f4c2-44b6-b5a6-67b392a93a43", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85a8a59-05e7-4935-97dd-50e4ea7a1d3c", "sighting_of_ref": "indicator--02b3a7cc-f4c2-44b6-b5a6-67b392a93a43", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ae4685-a592-402a-812a-8bdeecf4fdac", "sighting_of_ref": "indicator--b237d1d2-b609-4619-91c8-0e6f554dd510", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a37420-e0d9-4307-b276-c4388dd901f1", "sighting_of_ref": "indicator--d4366c64-cdc5-40de-90bb-cfd08a5bd2f7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0da0bda-9d35-4109-879f-ed63c96d9fae", "sighting_of_ref": "indicator--666822e3-9472-4a0c-afbd-e49de316b1c4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1053d4e4-ba09-447f-82c2-fef5134e7e49", "sighting_of_ref": "indicator--666822e3-9472-4a0c-afbd-e49de316b1c4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfdd8fb-c2da-47ae-a851-ba83994dab26", "sighting_of_ref": "indicator--e444223b-f63f-43a4-acd6-c7f8315aa40c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c54de5e-872a-4692-aced-d34b538f1736", "sighting_of_ref": "indicator--784cca3f-23bd-4a36-a1bb-f76838f8dd54", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b34a600-2d5b-476a-b8d9-327f22b5c67d", "sighting_of_ref": "indicator--784cca3f-23bd-4a36-a1bb-f76838f8dd54", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d666c028-4e97-4a3a-b858-d625190c9623", "sighting_of_ref": "indicator--9ed881de-4088-489e-83be-57cca21dec91", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce23d2e-889c-4b55-ae9c-4fabf9b6a075", "sighting_of_ref": "indicator--ee1cc4a8-36e3-41fa-870f-6d705a1aca74", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1803f1-77bd-4301-968f-5835058ff8bf", "sighting_of_ref": "indicator--ee1cc4a8-36e3-41fa-870f-6d705a1aca74", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd0a127-57e9-4cb2-9c56-330887c8f98a", "sighting_of_ref": "indicator--f4874009-deb7-4053-97e8-0f8a4379d50d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6973ae-cbf9-423c-a79c-9cf01e2926ee", "sighting_of_ref": "indicator--ec58cd10-a785-48d6-8903-7d79a8b3d93a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8864d8a0-4132-42a2-9b63-d92cd37959d4", "sighting_of_ref": "indicator--05728b50-b710-4717-8be8-770765ac45b6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5259b9c4-bcac-4148-aa3a-8c0ccbb8bfe1", "sighting_of_ref": "indicator--1f55d092-a0a0-46ec-8cfc-f6cd8ada4b3a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96d0d89-a747-4ac4-9102-96b6fe39e554", "sighting_of_ref": "indicator--005be49f-acd3-4176-84cd-4040065887a4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938fb6eb-54e9-447f-97e4-7f8a9fc0a8ca", "sighting_of_ref": "indicator--bd6a49b6-555a-47c9-a9f6-46df2af8016e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643aaebf-2c63-4c33-b13f-a25eb0b72983", "sighting_of_ref": "indicator--56e0ecbd-7825-4a80-85fd-f4d14d226572", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc95fe7-f056-4d35-b2ba-9aa9d2ca9430", "sighting_of_ref": "indicator--bd9d85d1-b0ac-4c62-b14e-44573f7d06ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8accfbd-8789-41e7-8344-aea049e25d38", "sighting_of_ref": "indicator--9597d032-c1bd-462f-b51e-1d60bdc6f9ed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30248b5-328a-440f-8d97-3329ee9a338b", "sighting_of_ref": "indicator--6d5113b7-fe08-49c8-a488-6b9ff6b483a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd845ab7-00e1-4923-9807-854d6c61a54f", "sighting_of_ref": "indicator--95ffeec0-1771-4075-975c-374673221504", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b597d09e-0c5c-4c55-b114-efd8c4ef413d", "sighting_of_ref": "indicator--95ffeec0-1771-4075-975c-374673221504", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa79981-f01c-4e47-8edd-f3cab6916c9b", "sighting_of_ref": "indicator--2cee0856-3d2c-4409-a309-e0e99f6cb860", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f97ac9-97bf-4904-a81a-bdedb4c16299", "sighting_of_ref": "indicator--04b6ef49-283d-4302-88c8-ad454abdc56c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817d37ac-82f3-434a-ac38-8e9bf0522ab8", "sighting_of_ref": "indicator--70dd02be-81e8-4f9f-8a06-26280924de46", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cfa714-b0a3-4513-8a38-648832004b64", "sighting_of_ref": "indicator--95647ed9-2a1a-413e-87e0-55677c6a3c22", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86a1072-361b-497e-aec4-bf2ec454d2ed", "sighting_of_ref": "indicator--95647ed9-2a1a-413e-87e0-55677c6a3c22", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26990151-44bb-4288-9f88-5491be42bd82", "sighting_of_ref": "indicator--d448432e-f3c5-435a-a822-840ae4c6373c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e59f775-d392-462f-be44-ff7d30e7af01", "sighting_of_ref": "indicator--22c9a88a-a943-41ae-9585-36a3cccac2fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e23774-3347-453b-be85-6d2840772e93", "sighting_of_ref": "indicator--a9fff8d9-3992-4748-a560-cba92ccd145d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02b9697-0db9-4d83-ae20-760db2718e99", "sighting_of_ref": "indicator--3e1c86b2-2fb8-4514-b0c9-1422934fcb29", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f54355-bf27-495d-a8f4-c2c891b5e187", "sighting_of_ref": "indicator--1df7abec-0dfa-41eb-9beb-d3fd1056995c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e614e91e-390b-45c1-876f-72d8fb9b41a7", "sighting_of_ref": "indicator--eeea346a-9b9e-4a30-9688-8d2429f77cdc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5fba49-c558-439a-aac3-65708a5cb899", "sighting_of_ref": "indicator--d5c0702b-ca10-4b99-bb55-0944610cf0f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5df241-ea5c-4ac3-8d73-afe5156f4e70", "sighting_of_ref": "indicator--af8c09af-d638-40dc-8176-33028cca0437", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f55bdc1-a23a-4b54-accd-9766a6d298e8", "sighting_of_ref": "indicator--5fb7bcb0-5efb-492f-a60e-ae23d4fe8a17", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c0646b-4e24-4a2b-9e4d-dc66b4986c2d", "sighting_of_ref": "indicator--5fb7bcb0-5efb-492f-a60e-ae23d4fe8a17", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e33a2d-a500-4aaa-846b-0fef71b9108a", "sighting_of_ref": "indicator--6f6d893e-de88-4fc8-b3d8-026bce4b37d0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad86070-8e25-4dfe-a3aa-eff05a6423bb", "sighting_of_ref": "indicator--6f6d893e-de88-4fc8-b3d8-026bce4b37d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919f56d9-1025-4f20-9179-450990dd5a86", "sighting_of_ref": "indicator--3a356c9d-9070-4673-bee7-62c19842940a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59cd50a-5a95-4151-ac07-b55477b011c3", "sighting_of_ref": "indicator--3a356c9d-9070-4673-bee7-62c19842940a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f51f77-dcd8-4505-a4bb-90def72bbf32", "sighting_of_ref": "indicator--fa4f4d56-50dd-428d-8992-e11e386cb1b7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb587520-f666-466b-b876-0e1aa13f3f0e", "sighting_of_ref": "indicator--fa4f4d56-50dd-428d-8992-e11e386cb1b7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c9b110-50a6-4ece-b16c-b042314c0233", "sighting_of_ref": "indicator--76ff5c50-83a3-467c-8f4c-e6777ed7bada", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ece98e-f7f5-46ce-9b0a-31babf3b21c7", "sighting_of_ref": "indicator--76ff5c50-83a3-467c-8f4c-e6777ed7bada", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac215d8-1756-4baf-81db-3f8dcc46c2ce", "sighting_of_ref": "indicator--c0470db5-2ba4-4f5f-a61c-e454ffd13bf0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab59c092-30c6-4d40-b970-de4c6ef0a9e1", "sighting_of_ref": "indicator--d31e689c-e427-428c-93ce-d90f060929fb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c731173-e280-410e-be6b-f7553ce08985", "sighting_of_ref": "indicator--d31e689c-e427-428c-93ce-d90f060929fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0d9eaa-dd6f-4663-9216-cf5abf0d5016", "sighting_of_ref": "indicator--23faf27e-9c6f-4b6a-b126-7afa54ab1bec", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2525fe5b-f27b-4792-ac6a-354f002147f5", "sighting_of_ref": "indicator--23faf27e-9c6f-4b6a-b126-7afa54ab1bec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c666fe-2a5b-4a8a-bc35-cca372a2e1eb", "sighting_of_ref": "indicator--31138f26-8a72-4d62-ae1c-d53a5d422cc9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dc0e4c-d076-4745-b3a1-0db2c7467094", "sighting_of_ref": "indicator--31138f26-8a72-4d62-ae1c-d53a5d422cc9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9c39b2-a668-4ba1-9330-58b001bb9f4c", "sighting_of_ref": "indicator--df9f6fc5-beef-40b4-8f9f-bf1cebd52dc3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dce4635-3b76-4792-a168-d8f23c9943e5", "sighting_of_ref": "indicator--df9f6fc5-beef-40b4-8f9f-bf1cebd52dc3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbeb477-9220-4f12-8908-d54271e0f425", "sighting_of_ref": "indicator--e2604e89-d398-4ce3-a2a9-5a3059fe78c6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d9fe11-a3b6-4ac6-a334-c746586ebe15", "sighting_of_ref": "indicator--e2604e89-d398-4ce3-a2a9-5a3059fe78c6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3923cda-826b-4a75-99e2-526a1f3a8e5b", "sighting_of_ref": "indicator--53a945aa-b368-4883-82aa-d73ec03ab886", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9542034c-19f6-442f-a6ab-5148d34884a6", "sighting_of_ref": "indicator--9b353e7b-9a2b-4ce8-b144-33705f3c809c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d77e85-00a9-4e83-a0b0-64b29d742afc", "sighting_of_ref": "indicator--9b353e7b-9a2b-4ce8-b144-33705f3c809c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302df6ca-fff6-4e38-9323-6cbf7cf3f84e", "sighting_of_ref": "indicator--54fda761-1e02-4afc-bc3e-fb2eea1944dc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b9d9eb-b6c3-4ad0-be2a-a152ee7dcd72", "sighting_of_ref": "indicator--54fda761-1e02-4afc-bc3e-fb2eea1944dc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503b0e7f-f414-4efe-9bab-b789486189d1", "sighting_of_ref": "indicator--1cd55e21-d986-4056-b4de-218545fbc52f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea63a098-be88-49c8-a8ea-3e5606749b53", "sighting_of_ref": "indicator--1cd55e21-d986-4056-b4de-218545fbc52f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a73ae5-ba97-4690-b7a9-0cab4873cd8b", "sighting_of_ref": "indicator--684cf920-ffa7-4b9b-9b75-53c4963cccdc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b6b3dd-fd16-4607-afb2-38fe7a9ad31a", "sighting_of_ref": "indicator--0cecb064-224e-47c9-96a7-678f967b65d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14850b91-673c-467f-8110-877b6243b34e", "sighting_of_ref": "indicator--075507d4-f1d5-4824-93b5-c005b4540982", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89984e51-2829-49dd-8390-3f56ba154a4f", "sighting_of_ref": "indicator--075507d4-f1d5-4824-93b5-c005b4540982", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff8e243-12d5-4e35-8633-02f8c28c88cd", "sighting_of_ref": "indicator--973d5884-ba63-4f8e-957b-a997038776b1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63cd493-bc61-4641-947e-2a11ba7ea2d9", "sighting_of_ref": "indicator--973d5884-ba63-4f8e-957b-a997038776b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97be75a-a6db-4393-8bbc-7f78120a7bd0", "sighting_of_ref": "indicator--bf6fe119-8a85-4b7d-b5dc-85f8b49b75d7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810478d8-7582-42d8-9f3c-52a8f3f18c3a", "sighting_of_ref": "indicator--16dea5ff-d808-4ba5-87f6-3289a1c020b4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eaf5f86-9bc9-443d-a895-cbbcb4cfae35", "sighting_of_ref": "indicator--0e90fd6e-cf72-4d05-ac62-61c8ebb70bf6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c8e85d-1eb5-49cb-a30e-3df4b5c9fb22", "sighting_of_ref": "indicator--0e90fd6e-cf72-4d05-ac62-61c8ebb70bf6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8caa88f-80f7-4d90-b172-db9f51e1b41f", "sighting_of_ref": "indicator--0ef2ca5a-850c-4cb8-8898-7e56a6516d97", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c596a4ee-b4fd-4dce-ab66-2689b7fb93d0", "sighting_of_ref": "indicator--0ef2ca5a-850c-4cb8-8898-7e56a6516d97", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ee9076-e2aa-458e-8aa9-988c58c773e5", "sighting_of_ref": "indicator--cad4edea-ce40-4184-8d6e-7784e09d123b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a36fca-79cd-485e-bb3a-a7ac355f341a", "sighting_of_ref": "indicator--2a555757-b095-4f48-acfb-3b4ae0c692a8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09aca8f4-d2c8-42b1-9b23-37f657be2289", "sighting_of_ref": "indicator--5c780ed7-5553-4e58-9a64-09dc88c3c7f4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb90229-0a4f-4398-9d9c-d6dba85f513a", "sighting_of_ref": "indicator--5c780ed7-5553-4e58-9a64-09dc88c3c7f4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b5e1c3-1311-42b0-afd4-8802dd8310fe", "sighting_of_ref": "indicator--31b7ad8a-0e72-4f3d-8622-089f083b85ad", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408ec2b4-4905-44b9-a60b-1b101f3f91ab", "sighting_of_ref": "indicator--31b7ad8a-0e72-4f3d-8622-089f083b85ad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf3d11f-8d9b-4dc3-9185-b585ad3aa84b", "sighting_of_ref": "indicator--64aac2f1-fe5d-4e50-96eb-c265895d5933", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d9cd0e-5ba6-42cd-9f53-4737c2eddf86", "sighting_of_ref": "indicator--3807074e-aebc-49fd-bb9d-2476b8016c1f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df922f6d-8329-45aa-af89-e7c739c7192b", "sighting_of_ref": "indicator--090a68b4-d4a8-4f00-aed5-6933c44f5885", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ada7ab9-8237-4a5e-97f1-d67a8cae3ab5", "sighting_of_ref": "indicator--9f967fd9-4156-4573-99df-56ee65c84f90", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ba8485-728c-485d-9b4f-dbadfd647fda", "sighting_of_ref": "indicator--4aeb5eaa-73bb-4a45-baa9-6d051c9a3f45", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87036b72-30ee-4f89-b9c4-9ccf7ea9147d", "sighting_of_ref": "indicator--297934d6-2372-452d-a669-a0c19ef051e9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2ae079-6795-469f-8969-5d6220024d51", "sighting_of_ref": "indicator--1b6d76a8-90c5-4d03-927d-501964dfde9a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b129b94b-5da3-4996-8236-2f0ee3e2d268", "sighting_of_ref": "indicator--d02b1845-2828-4f88-afed-d54c0c68ab60", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7b1d1a-efcb-475a-a349-137361ecec00", "sighting_of_ref": "indicator--b0107d58-4f97-42c9-93ff-82b6d0631376", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4ceb1e-8b0a-4a11-94dc-727278a26203", "sighting_of_ref": "indicator--c4c16588-5955-412b-9f6b-96cdede79424", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cfa0f0-cb25-4bd5-a82e-e3a5c27c325b", "sighting_of_ref": "indicator--8f9b2b10-e3f6-4955-a61b-55b5db54431d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21441f65-0b6e-41e8-929a-56b86aa601d8", "sighting_of_ref": "indicator--9728c999-434a-4c89-be60-01b5eea18e25", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af322e4-4961-4a19-9aeb-fd23551fb17b", "sighting_of_ref": "indicator--628aaf98-91d6-4b54-a700-18839cf42604", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c372fbea-7103-42a1-8388-4ed242d258db", "sighting_of_ref": "indicator--7530b28f-3642-4df6-a068-1e958ba67cb8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280899ac-75fe-42a7-899f-10941d6dacce", "sighting_of_ref": "indicator--b4f557bf-9a1f-4d09-9a47-2e0ec41d3938", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcbc948-f0ae-4f33-9951-485113a7f4b6", "sighting_of_ref": "indicator--9a7fe14c-f16b-4a58-8fcc-280f682fa45e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af64719-4ccb-48de-a925-d2259ea43603", "sighting_of_ref": "indicator--f3a9d039-0dca-4fcd-a2fe-349784260fe1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e50fefd-5d2f-4385-8ab3-0d49dcc4ae9b", "sighting_of_ref": "indicator--03db7083-8367-4083-88d6-cdd6fe12962f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20636851-0154-4c64-8b4a-d7dd663378cf", "sighting_of_ref": "indicator--565b3f87-345d-4802-b280-63585f57b596", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e64f432-ac08-40e3-9e01-00665fbff8cf", "sighting_of_ref": "indicator--c40955b5-7067-42d8-8ade-17cf5b95455c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a2723f-d502-4905-bc2a-ad36f49c3dec", "sighting_of_ref": "indicator--842556ce-096d-4c8d-93ec-47a166f90a23", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5e02b1-b31d-4929-ab06-1d758c3b6174", "sighting_of_ref": "indicator--fe02bd7a-c564-497c-968c-5f5c49bedabe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c97403a-8c23-4503-81db-1248dada6b2d", "sighting_of_ref": "indicator--aa3be2e4-d960-4b78-8abe-55c5bba67240", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f5965d-4e15-47a8-ba72-c71179ad7628", "sighting_of_ref": "indicator--bc0c143d-1d87-47bd-bae4-b210dc329cb3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1f1a70-14be-4a8b-87a2-76bb203c06d0", "sighting_of_ref": "indicator--65954eb9-d084-43a0-a621-773e9346a1a6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5303541b-b3e2-43a1-bf25-d81c5182d44d", "sighting_of_ref": "indicator--49ead395-7c06-4738-9ebb-ad9f999f5e89", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6ad052-a12a-4f52-9552-d655333a204d", "sighting_of_ref": "indicator--ac3e2b99-fc20-4529-a7a1-8a456ab1ee60", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0dab5a-da95-47a7-8f25-404cd74f4bdd", "sighting_of_ref": "indicator--83fb70ce-e93c-4358-a985-e9603e0d1919", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b02f18-d609-40af-88fc-c3a75f3f1bac", "sighting_of_ref": "indicator--8f432a8f-3fc3-4c99-aea3-d86c8c44d12d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4738753-9c55-4565-b867-e5b3014dda1e", "sighting_of_ref": "indicator--ca5f09ac-6ebb-45ff-95c9-f0799eb02fb6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6b914b-dd76-41a6-9354-2cbe3a39c69d", "sighting_of_ref": "indicator--0811ea8a-23e5-47f0-8386-d7b227ea0080", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acceb0fd-dda3-4a1f-8ca4-f9a5b0627e9f", "sighting_of_ref": "indicator--91a2fb8c-e758-4750-9624-d75a88679d02", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78258ccb-a876-48eb-b45c-b54cb38cc8eb", "sighting_of_ref": "indicator--28214b0e-2115-4a70-9edc-afc7dbfb1bdd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed64508-6756-4fb3-bcdc-82cb6fadb466", "sighting_of_ref": "indicator--95390c2c-e529-42c7-b725-b82e8f9e2159", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944f9256-537a-47f1-9367-42139a333150", "sighting_of_ref": "indicator--13b80746-cce4-4028-a707-070ec75aa75c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a3dc8e-cd50-4ea5-8009-cba219750500", "sighting_of_ref": "indicator--203f46e9-4db7-435d-bd9e-281027fd8e9b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118dcddd-f359-469f-ab67-ab484fd7176f", "sighting_of_ref": "indicator--4eca3a9f-126b-422b-8256-9fd3e480b4f5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838be311-750b-4922-810b-6de1e4480dee", "sighting_of_ref": "indicator--c8d1a315-a3a6-42ca-8060-0eab079136e7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45c13a1-dfa8-492e-9f01-e431f8bf6144", "sighting_of_ref": "indicator--966ef94b-632e-41ea-bacc-2f16bdbc08b7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f035ea-0dac-46b9-af70-d285cd563455", "sighting_of_ref": "indicator--336fd195-3c9d-4c1b-8dc0-4d5a4e8383c6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ea0db6-9fe6-403c-8502-fe5e547628ef", "sighting_of_ref": "indicator--7505a08f-6987-472e-b51d-955c2015fc2e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebb43ba-fa88-4b00-925c-cc0c8987a055", "sighting_of_ref": "indicator--50b98660-0637-4075-bec9-56552a9176ed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1571cc3f-b7e6-438c-bbe2-286f3c21cd6b", "sighting_of_ref": "indicator--ed022af0-bf57-4694-97ee-23b924786d0e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91f7e01-eef2-4021-898c-7cf0d2c6396a", "sighting_of_ref": "indicator--cecb2c4c-a087-4af3-9437-f5755d1f40cd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17050ef-cd9c-4935-b0a3-400415dd377a", "sighting_of_ref": "indicator--270df56f-b2a5-4f92-8c06-a5d3d5c84ba8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9e8a57-782f-4c72-9079-ce451c6277f6", "sighting_of_ref": "indicator--49f2ad74-21f6-46bc-a208-0d0d5f4b7e13", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6393d70f-6daa-4001-ba4b-67cab9564ad5", "sighting_of_ref": "indicator--5802a36f-ea16-4bd9-9513-8073a07963b9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308cca33-b60c-4fcb-bc0c-fee15c4521d5", "sighting_of_ref": "indicator--16d49b95-74be-44ac-97d6-3ea55434249f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b35f73-81b2-4a77-8869-9da134ddc596", "sighting_of_ref": "indicator--0e0c614f-f2e4-4831-a5e0-3e102de6c4eb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6b3c52-543f-4d3c-addb-963fd19b944c", "sighting_of_ref": "indicator--cb6713ed-cc1c-4ae5-b574-49fcd40484d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9747bc3f-f955-4a32-8c81-6ece88ca31ff", "sighting_of_ref": "indicator--bcc51370-25f7-4c04-88ed-46b77f0c60d5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fca6c5f-6f72-497b-9643-471d8c6beaf0", "sighting_of_ref": "indicator--78951da6-8081-4ab5-961d-f74af4b03249", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3923b51b-0301-4ef1-8eba-bb21fb26e2bd", "sighting_of_ref": "indicator--d4ce8d3e-6918-4ca3-9f71-709e93dfa3a0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb647e61-d369-4c76-a453-d670082d0bcc", "sighting_of_ref": "indicator--f0855b98-1c6e-4aa0-842c-bc13bace3605", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7efbeed-76fb-440d-a436-41779a70aef3", "sighting_of_ref": "indicator--60381b85-0850-4ba4-9a8e-6c23393d2b07", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfb64ce-019b-4a80-a344-31cf9b5d5017", "sighting_of_ref": "indicator--865caad9-f916-4001-a8c3-8c22f9e8d5bb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2276267d-0888-4110-935a-0f3b1589c5e8", "sighting_of_ref": "indicator--9af8ad23-73e5-4053-ba5d-4ceca64790a0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cffc0b-8f6b-4d18-90f8-5fc6331de12a", "sighting_of_ref": "indicator--bbae4956-79b8-4e76-829e-c3c56ea99ec7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f4f40c-a57d-4662-bcf5-ae5517d1e3d6", "sighting_of_ref": "indicator--1591bb49-679e-487d-917e-14befca6b93f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef7f189-f06d-40a0-a234-8af9e5937c1a", "sighting_of_ref": "indicator--c216a292-2d3f-46d1-979a-fbfbeb109c12", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be76265-3e7e-4b17-8dc0-5e29d777cbb3", "sighting_of_ref": "indicator--78bdcf4c-1a4b-46b3-871c-91b45393d0ba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7ae152-65d8-434a-9e34-48059fb3c70c", "sighting_of_ref": "indicator--e218a93a-7864-4867-bd6c-9f52d9e167c0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ecaef6-2414-47fd-bdad-d8384683f465", "sighting_of_ref": "indicator--55674a8e-0d5a-4a42-af72-d50f8adcb254", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79653e13-2e0c-47da-abef-13106bb485aa", "sighting_of_ref": "indicator--ba245cc1-0097-4873-a94c-70d662c96ae4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef755ac2-ca06-4e74-93ed-645174b9f37e", "sighting_of_ref": "indicator--0f712051-8e24-440f-b1da-2ebae3fcd1a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f09b65-e958-4e4f-bce6-a0ac5c32ce74", "sighting_of_ref": "indicator--465b0971-6178-4d48-a3bc-52ffb2bae52b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368d30fa-1d93-4ef5-9efc-2950426fe1bb", "sighting_of_ref": "indicator--96ddfe07-9955-4389-8572-a130845c539f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7001f3-a635-4ec3-a81f-69ef364d29dc", "sighting_of_ref": "indicator--8c8302c2-7df3-4a5f-a924-a1688c9108ed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f2264a-8101-4051-9663-b0b4e0497422", "sighting_of_ref": "indicator--48dad19a-7c67-4466-b94a-13e72ed1732d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4901ce30-e3a4-404e-aa9b-bfc9735e5a3a", "sighting_of_ref": "indicator--a0c71e0d-4678-4ccb-8f17-5250e86f65db", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca444f50-7ec1-4e03-a5ea-5f3779551155", "sighting_of_ref": "indicator--a52b39d6-6d47-43be-b5ae-58c2aaa5ada6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966ca48e-7a4b-44ea-9188-5cb96ac1e8ae", "sighting_of_ref": "indicator--48d1b91d-75b0-40df-9d5c-8cca1adcf980", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a373bc-79aa-46b8-9b58-3d2a40d7d0a3", "sighting_of_ref": "indicator--18d7b0fb-627c-42b9-b3e3-8815bd3be4c8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292249ec-d4cb-437b-94d7-d5457df4749b", "sighting_of_ref": "indicator--d49a1cb4-6629-4891-aff4-a04d4c8d8c79", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c16d58d-fdd3-4cb8-bb10-fdfcea0756bb", "sighting_of_ref": "indicator--073e76c0-fb1b-4ba3-a334-fd929b536d28", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c29a10-b194-4d0b-b29e-1dd1073c114a", "sighting_of_ref": "indicator--daf7b59b-da9e-4fae-a071-1a11234d9cb9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0520cdf4-2163-4e99-ab69-350efb825c6c", "sighting_of_ref": "indicator--acda72c1-74a1-4cec-a82e-ecdccdb40690", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978f95bc-73ae-4000-a39a-dde61c39d4ad", "sighting_of_ref": "indicator--433a7c96-f6df-4fec-bfd6-aebd9035804e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19b9fc3-d25b-4447-8b48-2ba64a7aaa3a", "sighting_of_ref": "indicator--ac0af905-6c22-4b83-a8a7-6488731e96a6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1475be1-17d2-43c3-b6f9-3a3dc49dc863", "sighting_of_ref": "indicator--fe0a998c-e916-44c3-bcca-1a33f9b80cbc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92c7d88-de65-4ce8-9589-edda13ffa109", "sighting_of_ref": "indicator--da03dfa1-f441-476f-9f42-6ce28f0bccea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e931beba-534d-4966-827c-6c9f662f471a", "sighting_of_ref": "indicator--48d729fe-7676-4e39-87cf-afc02e4c9800", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b98535-fd98-4c46-893a-f9a660cae8d6", "sighting_of_ref": "indicator--9a51240b-54d8-49db-8be4-861a71644d6a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b2b40e-5d8a-4a65-baad-67fdbc4fba5e", "sighting_of_ref": "indicator--cbf3a771-598e-4cb4-ada0-442ece98ac67", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aebf9a9-b81c-4f20-a0c6-9ffdf4072e8d", "sighting_of_ref": "indicator--a8beb08f-da9e-49d6-956d-78cf63488be7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2c2385-5cee-4c50-9cc1-86a2eaed3369", "sighting_of_ref": "indicator--bafc15fe-4fd5-4a9c-959f-0151d8d8cf25", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c336c530-d615-4aee-a827-356194cda266", "sighting_of_ref": "indicator--d0f1e865-d159-4200-85fe-a1d59ea8aae3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5829178-a700-4f1b-a470-d722911bc730", "sighting_of_ref": "indicator--cc29a62c-9694-4f69-9235-39a62ae63508", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e163a4-b484-40cb-b997-5ebae8310bad", "sighting_of_ref": "indicator--8158bd3f-9f4e-478d-b2aa-b0cb3d5def9a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd48815-45fc-4325-aa37-0a87874bfbfe", "sighting_of_ref": "indicator--92ec55e8-7873-42fa-9d4a-50725987f932", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7e47ce-4440-475c-bd9c-53ac73a8d3fe", "sighting_of_ref": "indicator--2c61353d-5569-4601-804b-77e6170448fc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4d0699-4836-4969-a2a6-b706409192c4", "sighting_of_ref": "indicator--b2df11f1-4020-4eec-a11c-86bce2b5856f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1e188d-407a-41a1-9671-36331dfbc3b2", "sighting_of_ref": "indicator--c39dba96-87dc-4620-9d91-083685e5fc50", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4f9896-9928-4164-900e-74fcf3796397", "sighting_of_ref": "indicator--33abb5d9-5f8b-4c44-8ea8-f4504e7323df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96428367-e93c-47d5-afbe-2cdb4ba0a8b5", "sighting_of_ref": "indicator--11be9a8d-b2b6-4716-b0c3-fa972bfc7f6b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7d377a-a6d8-4220-b5b9-346cbed8f153", "sighting_of_ref": "indicator--14f4a4d8-07d5-4c1c-9039-57faf37af87c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ebd747-4aa3-4875-a0e0-c7e676d3b1ee", "sighting_of_ref": "indicator--3f5b4143-a8f7-4e4c-8025-3dfed0da7540", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bd8762-c1e8-4a58-b672-c9acd66c6be2", "sighting_of_ref": "indicator--aec1a6c4-3908-4c63-a6b2-0fecb921dd41", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66863bf4-ceae-4dc4-b8a9-83c0fb01404d", "sighting_of_ref": "indicator--9cebd9b2-e09a-4f8c-8ad0-15e510d1db1e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f611313-edd1-418f-a183-c772b958908b", "sighting_of_ref": "indicator--c937448d-5362-472c-8813-98e832fb6c9a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7d6901-5c44-4b45-b18f-3f53ca4f91f2", "sighting_of_ref": "indicator--60276a30-15fa-4058-9205-2f0af88772d6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f297618f-0844-4193-b219-3584b2f86ea4", "sighting_of_ref": "indicator--bac4ad7e-e91c-4a85-8ab7-c1044a36409d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83461bd-08d8-4818-894f-133a380ea1da", "sighting_of_ref": "indicator--9f36c880-be43-4e35-86f3-0dc55b968cba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d99f86d-95ab-4cb3-a95c-9ae000d94dd8", "sighting_of_ref": "indicator--602d89e8-05e3-4a25-b2de-172ca6e35b59", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e4295a-fdee-4e12-863e-08ee0e82e8c0", "sighting_of_ref": "indicator--310f8885-a60a-40ab-a0f4-2f4dbc0842d7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad2ddef-f8bd-4ee7-9924-3b3a3496e67a", "sighting_of_ref": "indicator--9c13452d-f88c-4a67-9bf2-514610cbe2b4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47c5c00-5632-42a5-9569-e01e2e1cd6af", "sighting_of_ref": "indicator--44b15e41-e54a-40c1-a48f-5955f9bf79ca", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a974c50-5644-4d05-aab5-86be5485af6b", "sighting_of_ref": "indicator--7f419a3c-40ce-4d89-aac1-7afa456ab0e1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a1929e-13bf-46e5-b471-41e56a5accd3", "sighting_of_ref": "indicator--32376ddd-ba71-4485-b51d-62425530fce5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02cea531-6ddc-4a28-886c-031deceb2b4a", "sighting_of_ref": "indicator--e5c8ae8f-06d8-4123-ae6f-298f9dc09a1e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e902ff1-7682-41ed-a7d6-8a64260230f2", "sighting_of_ref": "indicator--ab804ed3-26c7-48b9-bfe0-6a8886c94a51", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63422875-a90d-445a-a5e5-22bbc9ebbb1e", "sighting_of_ref": "indicator--2b00c20c-c849-4968-a001-b9877bc765f9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1fde21-e833-4727-a1c6-ecb6e89ca93b", "sighting_of_ref": "indicator--6c41a0fe-e9c8-44be-8874-a059d4dc4c30", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35edc0f-6c4c-406f-9b70-3be8c8dfc75f", "sighting_of_ref": "indicator--7bfd3b2e-4720-4cfc-9c9d-d5a5e63b767e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a677a82d-5bc7-4159-82c2-5f8128038b44", "sighting_of_ref": "indicator--c9ce3d8f-1394-46b2-b073-fd650738f1dc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4484725d-30d4-4515-8ac5-3f031f676752", "sighting_of_ref": "indicator--ea26a140-c70e-47f2-af20-f4f0e0bdeee1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7271a340-9964-4d31-897c-6e31cf6ae812", "sighting_of_ref": "indicator--c42012f8-6b8c-4c25-b844-4be2ca89308f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b278115-9730-4bf6-9da4-4be3f769b9fb", "sighting_of_ref": "indicator--8be8c0bd-c875-40c0-8b49-40f0e0595759", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c31dab-9063-47ff-a606-b40a49d76c1f", "sighting_of_ref": "indicator--a9d45cb1-ded3-44b8-935b-7a4b65609205", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5789bba-a382-4330-b088-18dba3eb1f1b", "sighting_of_ref": "indicator--4d570a9f-46a2-4e6f-8208-d89131a6ee52", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f25271d-c6bb-486a-860e-bb0f26ebaa82", "sighting_of_ref": "indicator--93d44200-99d5-41ec-a455-8bff07f1b1f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4903339-2c45-4778-9a79-7cc2a29c9ae5", "sighting_of_ref": "indicator--cdc7cc82-53ea-4740-9a6d-0001a50b8e62", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7251172f-bcc6-4c25-bd9b-b892f1eb3716", "sighting_of_ref": "indicator--d392f830-6824-49b0-b97d-a06f7716858d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6301fd57-0d37-4f67-b80b-5c71d1f28965", "sighting_of_ref": "indicator--4c7d4b65-4cd2-4849-9562-e1bafa295eb4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0826d2b-4b35-479d-9d0f-1708b04fbf20", "sighting_of_ref": "indicator--2ad328e9-1913-48fb-ad22-48d1a7d8c0d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a808a1-8162-4f03-a254-ec5f6ac4549e", "sighting_of_ref": "indicator--b7e963b2-b6f6-4c8b-b691-ed5f275a4074", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a83532-9011-440b-81db-980eb63081ca", "sighting_of_ref": "indicator--992ab357-7283-4c75-bcf3-3d753d903fe6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb92dd15-b935-4391-9b89-7f9f01bd5a70", "sighting_of_ref": "indicator--77785ecf-723a-4147-a295-7211b225f170", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f58b20e-8ea1-4913-a852-78e2ddf7ee12", "sighting_of_ref": "indicator--91f7a711-a0f8-4e0b-8ae1-680d42e06b22", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396dc326-2d2e-4c25-a9e0-864a5c37b2c5", "sighting_of_ref": "indicator--f6109645-364b-48b1-aa9a-96c688f478de", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5c4448-79e0-479f-b054-407d89514898", "sighting_of_ref": "indicator--4261bfcf-9e05-4525-ae1a-599560dbbc80", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad41bd4b-8784-462e-b982-3a44ee030591", "sighting_of_ref": "indicator--c99f0c76-4018-413c-938e-8d617464bc21", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea4fcd1-7267-45c5-9d81-919104e22e30", "sighting_of_ref": "indicator--72127c87-8112-4cc4-ba18-179e9638a9a0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70aa6517-51a5-4a74-a17b-9b75d9965866", "sighting_of_ref": "indicator--899b039a-5bf0-4906-a99c-ebf77d0819bb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb907ff0-4952-4cab-a713-a94407b1221a", "sighting_of_ref": "indicator--60ba9158-97c7-4c90-9cf5-59b6472f2fd8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5cfb06-4b20-461f-95f9-f5ad39ba68fe", "sighting_of_ref": "indicator--9e20a56b-4159-4602-92b5-eec35b103119", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdc662a-e439-4319-9ce2-dad8ef1230c3", "sighting_of_ref": "indicator--11c05fdd-d3a4-40df-9648-8aa7a2432d87", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4016e1a1-03ae-403d-a7bf-54013cf851d1", "sighting_of_ref": "indicator--dbb836a6-f9ff-48f5-8f35-99e0f0cf939d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4890be7-1ca5-4d85-96eb-f0498fc4d39d", "sighting_of_ref": "indicator--d91fa75e-d24d-45f1-a911-7ed7093a82ff", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472993ef-a3b2-4a64-8673-fa7707b1c566", "sighting_of_ref": "indicator--d8195802-9525-46d8-a1a2-566e2c5c9de2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e44f7ee-3991-40fe-afe7-abd3f2aeafad", "sighting_of_ref": "indicator--781d24c8-4093-4547-a49f-9cf584659f54", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9914cca-3f9e-4726-baa7-cdb94b279bb6", "sighting_of_ref": "indicator--58fdca6a-412a-4d15-96ef-3793622fd609", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c384ab0-dc29-4782-80f7-59dae241c9fd", "sighting_of_ref": "indicator--503b0f59-2ce3-404e-898b-a17053be48e1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5923f90-e7b4-460e-b26b-b8ece08471dc", "sighting_of_ref": "indicator--1b2f0c78-1efd-473f-9bdc-4c8fea537448", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b2cffa-a3d6-4aef-af65-146cdcb061f7", "sighting_of_ref": "indicator--a97c5459-26f9-4aaa-98b0-944a20a15ed0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48de43f4-756c-4dd3-8464-c3a5a8266c90", "sighting_of_ref": "indicator--fa9477ee-a1fc-480c-b036-ca267056b015", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f19ff8a-faf2-4b28-b770-e47250f0b857", "sighting_of_ref": "indicator--70e45fa2-e8d8-466d-9642-218a36b60f92", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d40264-1d71-4156-9fc4-9e80916cb5e2", "sighting_of_ref": "indicator--8c0b988d-dab4-482c-a24e-5e99f40b9f33", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592926cd-1ac5-4157-92d4-c56d9368b41e", "sighting_of_ref": "indicator--e0042925-2398-40fa-8fcc-b51f17d5e352", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa06d97-2968-4339-9f6f-90271f7def25", "sighting_of_ref": "indicator--f8206be5-0a9c-437e-839d-f8dc6b3ccec7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d86bea-3cf8-4987-81d4-5093a1bb1406", "sighting_of_ref": "indicator--668a75b2-a3a6-464f-9936-2733ce07d5bf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bad1a16-2ca6-4f73-a729-8d0ff8f031c7", "sighting_of_ref": "indicator--c5c2a06d-6348-489b-b969-ddca2e5b1de4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a4cf6c-2090-485b-904d-25ec23621ada", "sighting_of_ref": "indicator--203833a4-ee50-4782-93fc-94979ff991d1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3d9c7b-17f4-4310-979a-013a5fba81c3", "sighting_of_ref": "indicator--1b070373-75cf-484c-a83a-93fda122fe01", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cebfd71-0b79-4f46-a8c1-7d4d13bf8e55", "sighting_of_ref": "indicator--d42f849c-dc18-47ec-8c90-b9c77ecbf5a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9eebb7-1618-4d60-9bcd-5ec905c7b5ef", "sighting_of_ref": "indicator--5c9a45fb-ff1e-46ce-8a86-f1ff52080600", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6960e07-78ea-4a63-a2d4-7bfe971148e1", "sighting_of_ref": "indicator--82a5e8a2-c03b-4fc6-9171-65cd1ad6bf8e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516197cc-50c1-475d-be32-648f548e4733", "sighting_of_ref": "indicator--79ab7f11-6495-46d2-bf96-5050454d0eb6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3e3162-0f1d-495a-835d-5f733cb4075b", "sighting_of_ref": "indicator--79ab7f11-6495-46d2-bf96-5050454d0eb6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbca2f99-d6e6-4148-b1bb-cc5e4ba6384c", "sighting_of_ref": "indicator--2f058e60-a351-4dbf-b90a-dd2ed93f1fbe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a041a78e-07f9-44d4-870c-c2cfe0f4253e", "sighting_of_ref": "indicator--9d48d60f-4d15-459d-a2fd-76ee08776c2b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b288123-196b-4532-ac29-674c9b917e2a", "sighting_of_ref": "indicator--0310607d-2d6b-4075-a213-4c8e9acdd933", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f92ebf-11e5-4765-923c-6ca154ada31c", "sighting_of_ref": "indicator--c1e27cef-1730-42f8-8a48-298b14411ee0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1bfe2b-df1b-43e8-bfcf-b7dd1fa351cd", "sighting_of_ref": "indicator--b7fb8ae6-de4d-4cd6-bd24-a680821b93b2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91fb8fd-31c9-412d-b3e1-86b59ff3dfde", "sighting_of_ref": "indicator--4e320194-1500-4827-abf2-5d575fc88f95", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf30e91d-9cb5-4f84-8e35-0094d8071e5a", "sighting_of_ref": "indicator--27c4c4a0-2b4e-4586-b745-af450d25e5cf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673eeced-b59d-4f0e-8810-5f9536af4045", "sighting_of_ref": "indicator--7526f9b4-26f9-4b20-8394-46d5ca0bb4dc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f419f6e-594a-4a7c-ab5a-098ca609cd3b", "sighting_of_ref": "indicator--2b44b895-8e66-4ffb-a082-6cbdcdbfface", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729299ba-f7e4-40c6-8e78-5b895929205c", "sighting_of_ref": "indicator--a6c6404d-001e-4bfd-b53e-0dd3c6198cca", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639ee715-8d71-49e3-ae50-3cde87e87a3e", "sighting_of_ref": "indicator--406cd23e-a1a4-4515-9965-7346ae604919", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47d1b09-14d7-44f6-8538-99779452ed83", "sighting_of_ref": "indicator--3a0d5a27-45b9-4cb5-9f22-5e5911be5b4d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc9387d-7e11-4bcf-a22e-4aa90713e416", "sighting_of_ref": "indicator--e067a87f-33ee-49e7-aefe-c57d9e5e6e2d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f20200-eaec-442d-bdba-cd9ae37e3b19", "sighting_of_ref": "indicator--d9b148b6-822e-454c-9b11-ed17ad5df4ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb32f48-3ad3-47a2-bea6-8418f35acade", "sighting_of_ref": "indicator--4ace582c-9d48-449e-a1a6-861ee7627c4a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18822f1-be60-41d3-b217-e4bb6a1b1acb", "sighting_of_ref": "indicator--cbb3be96-1023-4178-892f-414ec0b8e642", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cdd7c1-2863-4057-9941-5bb261990ee3", "sighting_of_ref": "indicator--cbb3be96-1023-4178-892f-414ec0b8e642", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f818cab9-ebc9-4e95-b313-c62f61fdde48", "sighting_of_ref": "indicator--dbe57210-f767-4951-a643-ec2d903bd180", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc580082-6147-4f74-aa32-ea1116e1ce9d", "sighting_of_ref": "indicator--dbe57210-f767-4951-a643-ec2d903bd180", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d4700b-a2d3-412c-bcd7-edba8bbb28d6", "sighting_of_ref": "indicator--6ae4186f-fd7d-415d-abcc-ad1732d54266", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4598b01d-0481-4386-a44c-524b707b3941", "sighting_of_ref": "indicator--c6ea7fda-4666-4044-9649-d09c2890ae1a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efdda6b-2cc2-489e-935c-7698a5c96464", "sighting_of_ref": "indicator--c6ea7fda-4666-4044-9649-d09c2890ae1a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2b50af-440c-47ce-aff4-47e45cfab578", "sighting_of_ref": "indicator--66f232f6-e677-4955-b15b-86b320bbf4a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb8c8ec-0dd6-4c0b-998a-644daae26073", "sighting_of_ref": "indicator--76789708-db1c-40ab-b00c-b973c2241080", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f60bba-72b1-413b-9da5-9649e17c1cf3", "sighting_of_ref": "indicator--76789708-db1c-40ab-b00c-b973c2241080", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ca1ec1-e6ba-4d98-ae2e-51ef73ee61e7", "sighting_of_ref": "indicator--b07cd7a6-9bbb-4008-a247-5a56103de063", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fab796-c0c9-4256-818f-3aca7e333854", "sighting_of_ref": "indicator--54371f55-e4fa-450c-b426-fa76f8468992", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c78bbd-3f14-4734-b459-d811607a0786", "sighting_of_ref": "indicator--81035351-b7b4-416d-a61d-f191c5073b13", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e29a6a0-45fa-4cef-bfde-e16e241fb60d", "sighting_of_ref": "indicator--81035351-b7b4-416d-a61d-f191c5073b13", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd70979-f605-4d8f-a7c4-3e0d28095dd1", "sighting_of_ref": "indicator--cf477dd0-b031-4d21-a83f-5189bedf9aec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36f4652-e049-4233-b0ce-68395dcc588e", "sighting_of_ref": "indicator--43241ac6-d81f-4c72-8a0f-338d0f0f03fe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525a1433-c26f-436c-8dc5-544fcd16b7c4", "sighting_of_ref": "indicator--be51b666-5097-45a3-af7f-15599a221ce2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ad1c46-6f50-4450-96b7-65406ae7a6d0", "sighting_of_ref": "indicator--b9768a90-2184-4d7a-9f2d-25a25d01d45b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb24303-ae65-4641-a3c5-47616a2ee402", "sighting_of_ref": "indicator--b9768a90-2184-4d7a-9f2d-25a25d01d45b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0b4c26-984d-46df-9b10-d4ff65b1787c", "sighting_of_ref": "indicator--2f1fd1b5-3b22-49d4-b43b-0fbd946650a7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84ac962-23b3-4011-a136-1da7bae0df64", "sighting_of_ref": "indicator--690aff5d-6c80-47c9-bc09-b15a8b756250", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c77fe8-277d-4dcf-9668-e2c658468656", "sighting_of_ref": "indicator--cf4fb895-a363-4b1e-963f-f77c550f007a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9e1ffc-ff90-45a0-96c6-f1b4f7258cb9", "sighting_of_ref": "indicator--b529e950-f3c5-415d-9547-cb6f77f8b9f0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb6f200-aec8-4978-8af3-e31822efafdf", "sighting_of_ref": "indicator--b529e950-f3c5-415d-9547-cb6f77f8b9f0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d25eed-204e-45c5-8a3d-b4d0c7aed504", "sighting_of_ref": "indicator--d3df376c-f0f0-41f7-b8df-b8690297995a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66107ae-0f6e-44db-a258-f2eb5d2a33d3", "sighting_of_ref": "indicator--7a824f42-b1f1-44fe-95f1-79790dc65826", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede268be-da16-4b54-b700-0e4b845ba669", "sighting_of_ref": "indicator--7a824f42-b1f1-44fe-95f1-79790dc65826", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb10d051-c9e5-4e8f-8ce8-025683f7bbe8", "sighting_of_ref": "indicator--9ea27547-b099-4745-b32e-b01d94aa6bde", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f229f6-9dda-4b30-a9e4-57c54aac48bc", "sighting_of_ref": "indicator--2c582bfb-71d5-440c-ab57-d951abea9a12", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d964ed-7b50-4fd2-8e52-cf3927be5b5e", "sighting_of_ref": "indicator--95f9e2d8-6d01-4d09-a8ba-f9d011cc2ffe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7211bc2-6484-4e0a-aa2d-da0c0b736a94", "sighting_of_ref": "indicator--95f9e2d8-6d01-4d09-a8ba-f9d011cc2ffe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d053dc2d-197a-4a90-a791-9d20a054223a", "sighting_of_ref": "indicator--c07cc8bc-ab37-411c-b33b-ed90e886880f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0706f6b2-daf1-451c-817a-b6f1052e4fd0", "sighting_of_ref": "indicator--c07cc8bc-ab37-411c-b33b-ed90e886880f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd57c358-5b0d-40fd-a6b2-7040c68ad4a2", "sighting_of_ref": "indicator--f8903883-54a0-4e44-836b-78b9d80b721d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953d91b5-622a-463a-9434-03c2ad9d06da", "sighting_of_ref": "indicator--f8903883-54a0-4e44-836b-78b9d80b721d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a563c0e3-3a40-499b-8a4d-47c39f045cc6", "sighting_of_ref": "indicator--0db4e3ab-d017-4638-ba79-63cdde31c048", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13418038-8bc1-4487-b45e-30eb74141390", "sighting_of_ref": "indicator--34d0f942-d2f1-4191-a77a-a0f5831b74c7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbbab7b-1df0-4863-9058-8c82a03b2e3a", "sighting_of_ref": "indicator--d5ac5405-96df-45c8-a6c1-5ca4aa0bade7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899e750a-f561-4f24-8e93-70670677bab3", "sighting_of_ref": "indicator--246a9cc4-3540-493c-a1f5-9b2c7c4dcf40", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cddfc7-441d-4b97-bc7b-d9ad1a7c1eb9", "sighting_of_ref": "indicator--631f70dd-8693-4ecc-8806-03d8554a639e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d437d5b2-e675-446a-b3fd-6f1231457233", "sighting_of_ref": "indicator--67e1723c-2dd8-4013-a145-cc404f32738f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f093f18-daca-4f40-88f8-f90fdd1987e4", "sighting_of_ref": "indicator--d12d5ab5-764a-4a70-9521-2ab569d8abb5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fe88b4-c889-4966-9ad1-33535b031f51", "sighting_of_ref": "indicator--616dd756-5b3f-4b77-aa1d-115f07b5a37f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac46af8-e60a-4629-bc18-17e612010a3f", "sighting_of_ref": "indicator--9b8ada85-c576-45f9-9a05-bccba55db822", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0491f0b0-dcd9-4b92-b27f-eded57fa3dfa", "sighting_of_ref": "indicator--d30f148f-8de4-4405-ac8c-aea52d7eb9be", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda7d06f-c111-4541-a2ec-e36ec1fd3766", "sighting_of_ref": "indicator--ddc64960-2a56-4de9-9d0e-29f712a4e020", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b314276a-7a02-49e6-9351-58f87bbde1a2", "sighting_of_ref": "indicator--8967601d-56f2-4db2-ab6e-7dc9abf1476b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8610cf-4495-4421-b170-aac218d24593", "sighting_of_ref": "indicator--f1496b26-d357-4ae3-873c-edf50c9fa2dd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e7acb6-2623-4db6-819b-7cc43daa57ed", "sighting_of_ref": "indicator--f1496b26-d357-4ae3-873c-edf50c9fa2dd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2cc843-d1f4-4ecb-9bfd-6a503a6cb07c", "sighting_of_ref": "indicator--ef5feff4-d574-4fc3-b1be-7d0885935215", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae185a90-5a82-440e-929f-e1509d99971b", "sighting_of_ref": "indicator--ef5feff4-d574-4fc3-b1be-7d0885935215", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e6bae7-9648-4443-9ab5-2ffeab06049c", "sighting_of_ref": "indicator--c760148f-2506-4ee2-8741-d9eedbdea45c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e63a2b-cf5d-44a1-bca4-c59a1f5e5d23", "sighting_of_ref": "indicator--d1842786-9ae0-46b7-90a1-4e32788b6e01", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8e7696-98fa-4742-b310-a86b9611f14b", "sighting_of_ref": "indicator--ee5abe96-bc1a-42ff-97f2-ac6391d8c437", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61f55fd-925f-48d1-9412-df7dcc5478bb", "sighting_of_ref": "indicator--7629a600-70f7-4de8-8da5-81a341de3c7f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a9479b-4ae1-4e96-9f68-16549a4cbeae", "sighting_of_ref": "indicator--2fbb7747-29af-4e16-8e69-69e5517e8ca5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4fc6b0-7b12-4394-9b48-4aebc5b0b5a8", "sighting_of_ref": "indicator--2fbb7747-29af-4e16-8e69-69e5517e8ca5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3379d8-9074-4760-b523-f0027a2fafea", "sighting_of_ref": "indicator--9000621d-ecfc-4406-9975-6e7f362cd939", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5963ac-cd3e-4e2b-bfa4-60f20c7e0f1c", "sighting_of_ref": "indicator--ff4c446d-b12d-4154-893a-c4fb9b93ce43", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce06092e-1fd1-423d-af39-1fa5f5bfbb47", "sighting_of_ref": "indicator--ff4c446d-b12d-4154-893a-c4fb9b93ce43", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76608fe5-5ef1-4b60-94d0-c6ebf3d91ea4", "sighting_of_ref": "indicator--a0818c47-1994-43de-a399-3e85dbf401ca", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08d4772-ffc2-4ae9-a735-4da60990de2a", "sighting_of_ref": "indicator--5fe9f1ea-a226-454f-ae24-8c9931acc61b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410dcabc-ce91-453e-8643-cb4af5501e8e", "sighting_of_ref": "indicator--71eb8994-ff27-42a1-b49e-c3902e1e4ee0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e40b4a-5e02-4589-be5b-b7c9c009cabc", "sighting_of_ref": "indicator--71eb8994-ff27-42a1-b49e-c3902e1e4ee0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413f52b4-bd0f-409b-a812-10cade87a4e3", "sighting_of_ref": "indicator--91b90b7e-3c49-4f83-b999-418736d66c08", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3e8543-1f11-48bf-a9b2-ef68c1eb106d", "sighting_of_ref": "indicator--949b8654-9f28-483d-8664-a5d503df5a73", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5dd9343-e500-4309-8ee9-c8f7d914faf9", "sighting_of_ref": "indicator--f594f111-2ce3-4262-95cd-170ec6b1153c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aae46ac-d203-4c36-80b5-006ca7546563", "sighting_of_ref": "indicator--97942037-c754-4396-9934-857340adb1a5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668b0f91-1420-416d-8d0d-679d228bc68c", "sighting_of_ref": "indicator--dfe4c0b5-bd3a-465b-8993-c7445906b022", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6105a080-8582-4094-afcb-87c7ac491273", "sighting_of_ref": "indicator--ac2f95ef-cc58-49cf-859f-43f55d9de875", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d5c89d-1d3b-4ba5-89d0-25ce9f6c5908", "sighting_of_ref": "indicator--32a31deb-98a7-4f3f-bd77-e8484f6ece3a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e3415c-f8c1-4639-accf-7d464c68eff7", "sighting_of_ref": "indicator--a88db081-c3ab-421f-a5a6-68d0faeab7cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead65307-d8cb-455c-ba7f-20a87a0d1ebe", "sighting_of_ref": "indicator--a69ebef7-c7bb-4cdd-b107-14cb19dec69d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609e6c41-c4dc-4acd-bfb9-001bc7daf24e", "sighting_of_ref": "indicator--47db01a6-2c85-4716-b0d3-d8b81e222bcc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354c37a7-7165-4ea5-8ce4-23eab88de890", "sighting_of_ref": "indicator--9bd7295a-d2e9-411e-9971-98f1258e3071", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f59989-6ce3-4cee-ad73-d1ac93557a05", "sighting_of_ref": "indicator--0b82ca14-b13e-4871-b9df-65a66c75ec14", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4fe43a-e57a-47b4-832d-2c0c92118f07", "sighting_of_ref": "indicator--8d30e4dc-8557-4ac5-a878-2612caab4980", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce57f8ec-d4a5-47bf-9682-c99fbd02d7ba", "sighting_of_ref": "indicator--11c11163-a3c5-4033-844c-c098c6a48a54", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0990079-9f40-4ea2-bb28-371c0e9b09a1", "sighting_of_ref": "indicator--e72e0c6d-83ef-4d5c-8357-c202055b7f8a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bebc8c0-65bb-4685-aa94-afa4bb11eab5", "sighting_of_ref": "indicator--2b4bb81e-9334-426b-9d35-c7add16a5ee4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8e2473-4be9-4fec-aa0c-dcddc987d1d2", "sighting_of_ref": "indicator--2b4bb81e-9334-426b-9d35-c7add16a5ee4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffb4311-1412-49f0-9320-237039530bb2", "sighting_of_ref": "indicator--2fdb7bcb-be9f-46e7-930f-5f17b38e521b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd2b700-0c38-4679-8a6c-8b9f8f559b22", "sighting_of_ref": "indicator--2fdb7bcb-be9f-46e7-930f-5f17b38e521b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cdaf0a-d9d0-42a5-96de-ec34343ae1ec", "sighting_of_ref": "indicator--c5aeeaa5-5ba3-4fd6-87ba-255485ea3aeb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753a7fff-2e43-49db-9571-eb6ddc02206a", "sighting_of_ref": "indicator--2d04f842-cf75-45ee-9f64-f63007983835", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638ab910-a38e-4709-aa2d-a32668a8a5e1", "sighting_of_ref": "indicator--2d04f842-cf75-45ee-9f64-f63007983835", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e25540-71ba-4915-b314-93561d154346", "sighting_of_ref": "indicator--128c808e-d6be-4759-ba0e-f89a1e0bdf6f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fa7354-fadc-45e5-82cd-37098974423e", "sighting_of_ref": "indicator--128c808e-d6be-4759-ba0e-f89a1e0bdf6f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bd4ce1-ac58-4b2d-984a-418287b4155d", "sighting_of_ref": "indicator--aadfca56-17e1-4368-ad38-4f17f1aec9af", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d3454d-490f-4803-8804-99d469c34f29", "sighting_of_ref": "indicator--3a0f9561-63a4-471b-8f4f-8e4557c3aa15", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06649717-aaac-4c23-a215-4432f97ac7de", "sighting_of_ref": "indicator--642786a3-9266-49dc-a30b-360e8a38f641", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2d5528-0d5b-488e-b653-6d75d0cd2073", "sighting_of_ref": "indicator--642786a3-9266-49dc-a30b-360e8a38f641", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e1b9dd-01bd-4d12-897a-b9640820b7be", "sighting_of_ref": "indicator--83562fcd-d3bc-422c-9310-bdbeb4525adf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7d0f45-9e9a-4bb1-9e85-7274fd7669db", "sighting_of_ref": "indicator--55a12ee0-26eb-49c5-899d-fd9854cd2023", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806f1211-839a-4872-8942-b2f5eeea10e8", "sighting_of_ref": "indicator--2684871e-4135-4ce2-b849-111abadc7e58", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0c06e3-5805-42ec-891a-1057b626f18f", "sighting_of_ref": "indicator--ea385331-d956-429a-a85b-4af363b29312", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfe12bf-6a65-4eb3-889c-b708fa9a6b65", "sighting_of_ref": "indicator--206886a8-7dd8-45f1-b4c7-0e43e133c5f7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390fa030-0412-469a-849f-e7bc62fe7bae", "sighting_of_ref": "indicator--206886a8-7dd8-45f1-b4c7-0e43e133c5f7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f06682b-e5bb-4300-a230-ac290a2a9e9e", "sighting_of_ref": "indicator--eb628b4c-f31c-4db1-8979-b470d2b852b7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad53fe0d-6a2e-468f-b160-7a437c226fc8", "sighting_of_ref": "indicator--f3f4908b-e541-4539-aac4-2fdf64e96da2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20192f7c-5b85-4cea-ae99-4353ad3fe255", "sighting_of_ref": "indicator--8ac3031d-d5d0-46f8-aae8-4c9950031f92", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28217a7-b8f4-444b-bfd4-14489acb73e2", "sighting_of_ref": "indicator--f4793b1b-0b63-4267-a5bf-0a142a4c25e9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14130651-6a3c-4ab7-a9cb-ab58c4f4b778", "sighting_of_ref": "indicator--f4793b1b-0b63-4267-a5bf-0a142a4c25e9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589c835c-d9f1-4d2b-99ff-ffd691e13168", "sighting_of_ref": "indicator--30672d45-2efc-4e0e-841b-b68b23500390", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca23e232-0466-426f-8285-c31ecfcb96f6", "sighting_of_ref": "indicator--a73eaf58-32f3-4c6b-8764-5c9fa2716800", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4070cc8-14d6-4273-95e6-05d505d89243", "sighting_of_ref": "indicator--ef0739aa-fcb5-4f2a-8166-40d26b9560eb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126cf37e-e1ff-4e6c-a2c6-c4c34d8bae34", "sighting_of_ref": "indicator--7ae71c6f-886f-46ad-ae0d-e7ad9cefd683", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01463bc9-eb23-453c-a4c5-20a0f807ddf7", "sighting_of_ref": "indicator--3e8146ac-da17-4f30-adbf-73b52e77ec0c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edba8c8-de7d-47a4-9304-f754f88fb56b", "sighting_of_ref": "indicator--1498e3e9-5c69-459b-89a4-045f1da179fa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98b6a85-fbbb-435d-a6e5-9022f952ca33", "sighting_of_ref": "indicator--ad8b4e37-7dc4-4ddb-b774-6edc0a30f1d7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b677f42-b732-4a9a-9e39-3ae05fed850a", "sighting_of_ref": "indicator--c4f9041a-7e20-4436-b8d4-3287b7c66fef", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec6a40d-d87c-46b3-9eb1-c58eda30f96e", "sighting_of_ref": "indicator--06dcb46a-892e-4765-ae36-966326bf5989", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9caf8320-09b9-4d2a-a366-8a24d818e453", "sighting_of_ref": "indicator--7173e21d-ce0e-478b-95e3-ed78b29d9ea6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108f1db3-4d4e-4fe9-ab35-a1bfa2985559", "sighting_of_ref": "indicator--e640cf43-f1ea-4b4d-9c73-401f7f91e0c9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db587fbe-0416-494a-a074-96ba34a0d82d", "sighting_of_ref": "indicator--db92d5ab-1739-4e4f-8114-0afe2db68d91", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316c84ca-43d2-49a2-b969-3ec19055b6c5", "sighting_of_ref": "indicator--19419559-beac-402c-9254-151b51e24eb4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54983dc8-56cc-4e96-8492-a556b506526a", "sighting_of_ref": "indicator--225b2a5e-e056-45ee-b207-e436295530d7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662153da-f046-4eb8-b51b-985546e9b679", "sighting_of_ref": "indicator--d74b33cb-64cd-4631-998a-e0a51c672bfc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4ca388-47dd-44b2-a557-65b60a9981fd", "sighting_of_ref": "indicator--57977bda-cd2a-4773-8e60-85cfed781d43", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da86d056-df28-42a5-ace9-c485f17d4aaa", "sighting_of_ref": "indicator--7188aec4-cbdd-47d6-bed8-a055853f0bfc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c215c20-11da-4fac-af4b-4d494d9a404f", "sighting_of_ref": "indicator--bf5c5fef-c302-417c-aeea-aa1470f5403e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c17ccf3-aa44-4554-9b11-120292d2e867", "sighting_of_ref": "indicator--3fe18279-ff48-4191-b87a-45c317aa8b28", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a637b61e-d11c-4e73-b023-4a4b823bd3c4", "sighting_of_ref": "indicator--683a1ca6-7d62-4f8e-bc09-746c81eba68e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6133f5f-ffae-49a9-8f71-ae621ca357cf", "sighting_of_ref": "indicator--215e2c67-aae1-455c-8d49-a40bee99bf65", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae50f00b-7dd6-4eff-83a5-058b105d2977", "sighting_of_ref": "indicator--149c24ac-42f9-4efc-9a29-ec279f8c2dba", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9971f85f-07ea-4015-a336-441268db5be4", "sighting_of_ref": "indicator--667fa01c-9525-4bfa-a24e-1dc1fac16f53", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8aff095-cb2d-405a-b391-a988551f42d9", "sighting_of_ref": "indicator--1f8d8bc5-a914-4308-bb25-93eb4f2e31d6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0966a12-ea04-4a9f-8285-72d520e22823", "sighting_of_ref": "indicator--e2b3a515-bd5d-4ad2-a698-18816dabbbed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd02006-2b88-4ef0-8f57-1d5bbafe6eba", "sighting_of_ref": "indicator--4a5f6d51-dece-444d-b398-ce0044eb9fbb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c9475b-1134-4049-b0af-1c9ac72ab555", "sighting_of_ref": "indicator--702c5106-5679-489a-bd62-0f1de6761f0e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1269127-f3aa-4f7d-b109-dbdcb2e87015", "sighting_of_ref": "indicator--91e7c406-ff54-4045-9420-a3fadbeea8a9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe53705-6701-481b-bd18-0f5afcab07c3", "sighting_of_ref": "indicator--79ea255f-4bd9-49e2-9e46-4e8f4b389479", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc70c5c-cd3f-42d3-95f1-b9aacaa7a445", "sighting_of_ref": "indicator--86d073ca-1f99-48c8-b269-742b987f9a50", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e103f5ce-e665-4807-a39b-303246679c39", "sighting_of_ref": "indicator--11b02390-cea2-4c9e-9ad3-e546dfe8a9a2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7a343b-f01c-40c9-bf88-d14b020a7dea", "sighting_of_ref": "indicator--2043933b-1d99-4a80-9cb2-bfb9d9581d98", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f58b6a-4e54-4258-b833-9b887865b449", "sighting_of_ref": "indicator--0868d726-9b05-45bb-8ab7-af8d5f9c9472", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04eca95d-a744-45f1-8945-174d6cc1d4a6", "sighting_of_ref": "indicator--3fddcc3b-3dcd-4019-9151-039d977925fc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89df5c62-b0d3-4445-a31d-0c85873c2490", "sighting_of_ref": "indicator--91340dd9-c77c-4876-a05c-bfbcbe09b1a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d4f5aa-0976-4c46-96ad-30858988537f", "sighting_of_ref": "indicator--0978038e-9cc7-41e1-8774-8c1c0b9d87ab", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad89f75f-3306-4337-baa1-825900779df6", "sighting_of_ref": "indicator--0978038e-9cc7-41e1-8774-8c1c0b9d87ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf8798c-4241-4a6c-9d66-9f2a2ada96a3", "sighting_of_ref": "indicator--6a1413c0-d5c9-46ec-bace-22d5c34ef5ee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf279c8-fd7f-4dd5-80d5-c1b0c5231718", "sighting_of_ref": "indicator--c3be11a9-96ad-49ed-b77e-caa568b5a5aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c37e66-eb3f-40a2-b2c5-526f03238ba2", "sighting_of_ref": "indicator--a2a6c9bc-490e-4c90-83ae-fcab0374637f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5e5773-d183-453c-9b29-692dcc33c627", "sighting_of_ref": "indicator--a2a6c9bc-490e-4c90-83ae-fcab0374637f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3df1e38-532b-4c99-b40f-31943e304136", "sighting_of_ref": "indicator--dd2761d6-1718-4d2e-af48-10b9fc23cf80", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c590b554-1f45-4b38-bc70-1f1a14a7dbf4", "sighting_of_ref": "indicator--dd2761d6-1718-4d2e-af48-10b9fc23cf80", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9eeade-d28a-43ab-8fc7-7409ddeae4c8", "sighting_of_ref": "indicator--f2cec5fb-67b1-48e9-b63b-75d027299041", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333ec293-fbb8-423d-9be5-1b995c07e7ee", "sighting_of_ref": "indicator--f2cec5fb-67b1-48e9-b63b-75d027299041", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccde612b-deac-4a1c-85af-8857b966730d", "sighting_of_ref": "indicator--afe67cbf-b546-4316-a9a8-b048f53d233f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1aaf509-5e13-4174-88ec-37dd8be2638a", "sighting_of_ref": "indicator--52ace60e-136a-449c-9dec-bf67c5cefb04", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ef15a1-e7eb-4a2c-b34b-9d5b75b7c9ce", "sighting_of_ref": "indicator--7797f7bc-7f0b-4823-8e30-2c2efd2c7a88", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e52201-53ca-47c3-86af-3e49c9f52742", "sighting_of_ref": "indicator--b83ecfcf-7de4-4a05-b87c-ebf12f0dff8b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432017dd-da06-49be-af82-b0f23a5fc8bf", "sighting_of_ref": "indicator--9e64c495-540a-4a07-a3ba-00ce455f5b47", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30eaea55-dc05-4c11-b6b5-7a37b44c3816", "sighting_of_ref": "indicator--9e64c495-540a-4a07-a3ba-00ce455f5b47", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbfb162-04be-4996-b96a-0fc0e66d1386", "sighting_of_ref": "indicator--faf0c662-a410-4afc-a2b7-7ac7356d75ab", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66905730-319d-4b4b-a703-07b27d511d6e", "sighting_of_ref": "indicator--faf0c662-a410-4afc-a2b7-7ac7356d75ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0e80b4-fc72-4fa8-821f-8f01795658e2", "sighting_of_ref": "indicator--898e5aeb-7c55-497a-b558-d4e15d9aec24", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57553fe0-0c99-4d5e-9fa9-524b4b3c6436", "sighting_of_ref": "indicator--898e5aeb-7c55-497a-b558-d4e15d9aec24", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3a9570-d223-436e-9af7-00cb67439e3f", "sighting_of_ref": "indicator--428e09b3-18c0-4071-a48e-f8f6126904d9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94456fa-1e22-44ce-80ee-ca26c559fcc4", "sighting_of_ref": "indicator--ceacda3c-92ee-4e54-9e74-fb36ddc1cbfb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d36991-9ba5-47bf-83f4-02e7f25bbbbf", "sighting_of_ref": "indicator--5e990086-9c62-4bc3-b8b0-7e0f635c3113", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e71c4bd-52aa-406a-a96f-f86f9c11ada1", "sighting_of_ref": "indicator--4e69eb89-63f1-47fd-947c-6f5001e4e178", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c47d27e-5c2a-45b9-8e35-67baa0a5af0d", "sighting_of_ref": "indicator--4e69eb89-63f1-47fd-947c-6f5001e4e178", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d23615-569d-4725-a294-62a32235079d", "sighting_of_ref": "indicator--6b66871a-6bc0-4b0d-85be-adfa8a733577", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fa0808-b869-40ad-b9de-6d85d2a491e2", "sighting_of_ref": "indicator--6b66871a-6bc0-4b0d-85be-adfa8a733577", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6364e1-59b5-4f92-bfda-60c9827965c1", "sighting_of_ref": "indicator--ee6ab39e-a685-4028-bc2f-8eec19867631", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebde5f9d-64f0-4757-a835-0d7764bdc3e5", "sighting_of_ref": "indicator--475a5e76-4c6e-46f6-9c1e-d4ca41d707ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee97d2a0-4f69-419e-a94b-ea6882f5f6aa", "sighting_of_ref": "indicator--0051c7ec-302d-42e3-a6ad-d23b6b231d60", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610d390b-3d0c-4f1e-9707-e14a5530a84e", "sighting_of_ref": "indicator--f3de8481-8e2b-49d6-aa7a-bef81ead427c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a0ce65-8ab3-467a-926a-ede575f628ae", "sighting_of_ref": "indicator--0d28b0ad-9fa4-4c47-b1f9-a901400e1db8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2cb75c-461a-45be-b2f9-28bc7576264a", "sighting_of_ref": "indicator--ed934ad4-0014-40ff-99bd-a80bd50dbaab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b05fd56-a547-4c17-879d-fbe9ff85fe67", "sighting_of_ref": "indicator--7b2d59a4-7a07-4288-a373-0e65376e98fe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a24f29-fdd5-449a-9df9-15510f81cb0c", "sighting_of_ref": "indicator--7b2d59a4-7a07-4288-a373-0e65376e98fe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c68044a-7ca2-484d-bd0d-838062851505", "sighting_of_ref": "indicator--dcce81d7-9f9a-4399-b26e-9a8957d335df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b24c50-3c7b-45ed-8a59-9de0d23b6e9c", "sighting_of_ref": "indicator--f91ec5ef-4e90-42bd-9db6-4e1ee356dd3d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18db2239-7a96-4ad3-b5d7-86b6d6adf60d", "sighting_of_ref": "indicator--a1624aca-f1b1-45a6-a630-ee0d51506939", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419eaf98-4c36-4917-ae3c-a414fa721e40", "sighting_of_ref": "indicator--752d8615-290b-438d-b61e-4227f82e7e03", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd0948f-aca9-42be-9d7f-62e0476b4729", "sighting_of_ref": "indicator--f3fe5b0b-bdc8-463b-bf6a-98317f6feeea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930320fc-d7bc-4231-ab6e-5efcc061cef3", "sighting_of_ref": "indicator--924da32a-0f3c-4dfd-abc0-ba4e42bb9c5b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6fe3447-849e-4d4a-896e-a13bfce03913", "sighting_of_ref": "indicator--749c81d0-1e50-4ad9-9624-e4438d366ae9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5a76ad-83e6-4409-a382-4e4a7ce66435", "sighting_of_ref": "indicator--32afb05a-a7f3-44e8-a157-6f7476361746", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88091fc1-469c-41ab-af15-f7b069993cb2", "sighting_of_ref": "indicator--90e3cb34-d5e4-4a44-9ae3-8143809e96aa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bda5fe-3e51-403c-b2ef-66d43f06e32e", "sighting_of_ref": "indicator--0b1910ff-f3ae-476b-80ec-d0406ac16967", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7eadd1-1165-42f9-9dd3-30e5e90b4277", "sighting_of_ref": "indicator--98690dd3-b6ac-464b-86f1-5a220545bcaa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3589015b-1541-418b-b156-2a3dae2cc522", "sighting_of_ref": "indicator--3bba8e65-8079-4431-a071-0cab14cfcb8c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22817f0c-9bc6-4f7e-b3f3-f0061b9e7a40", "sighting_of_ref": "indicator--89280e6d-22d1-4d2d-8907-691d9ec42cdf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e45a345-4368-40ea-877a-968e8b028da6", "sighting_of_ref": "indicator--f10bd44c-40e0-424f-827e-c70927ff9876", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9745701d-9f58-4e3a-9421-a70c5dfa1f7b", "sighting_of_ref": "indicator--14b18bdc-049f-4485-a422-d16c6bc9a796", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d8b591-9f72-47c6-ac19-426d49b2a6d7", "sighting_of_ref": "indicator--215df697-37f6-4503-92f3-efac0bff222b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c6eccb-a123-422c-8a60-4fe317c421d6", "sighting_of_ref": "indicator--e620df40-1854-4e8a-816b-a90addd55c4b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca93fa53-1e21-4fbd-81aa-51d39ee7f8f4", "sighting_of_ref": "indicator--5dec70d9-dc9c-40f4-a3e4-ccb0f02a306b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6edd957-eacb-481e-b3a5-3a216c18388c", "sighting_of_ref": "indicator--4b4760dc-44de-4ad0-86a4-d1687fcb2255", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369de0db-9e92-46dd-b845-7d4e02c07ed6", "sighting_of_ref": "indicator--5e96e750-d6c1-469f-b744-15415bd3e69a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9a37bd-95eb-479b-b996-1632d3d2692c", "sighting_of_ref": "indicator--5ef01c9e-7f02-4b52-adaa-180fea3659f8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4aa554-8081-4a1f-bc5c-541ac551c3db", "sighting_of_ref": "indicator--ec950682-ed01-492e-a377-9656080eda92", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da014f7c-2d56-4934-94a7-a90323c0e83f", "sighting_of_ref": "indicator--0a58a1c4-ed3c-4b7d-a460-abc3ffd499c6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a59679e-0ac4-47d1-b294-c15cb4cc9066", "sighting_of_ref": "indicator--b707a5ba-4366-49ef-a9e1-de630be26164", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b50c13-4735-4327-abe5-81e7239d3ba4", "sighting_of_ref": "indicator--51cf806b-97b7-443f-bb90-6bee6e494a60", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47349876-20fd-45e2-80df-51fa3b0b08c7", "sighting_of_ref": "indicator--09f99ba5-b133-46fd-8314-9df6c846bb36", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68100029-e763-4fb4-811f-ad23d9bf2ae4", "sighting_of_ref": "indicator--455c2eff-4b44-4ae5-b891-0cf7e056af54", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3baa5c04-4b2a-429c-a6e6-4ab4661f1f46", "sighting_of_ref": "indicator--e8fc274e-32da-43ac-9151-185f6404275c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f91cf4-75c0-4900-9b8e-b52035c4bf84", "sighting_of_ref": "indicator--440ec9f5-afc0-4d74-8e9a-25be3b782685", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28229b5e-b597-4a95-8595-f35f7274c81b", "sighting_of_ref": "indicator--bbb884dd-3b00-4eb6-8e7e-4ec5f8c1139e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d4f44a-56e1-463e-be7f-7f3a3ba2319e", "sighting_of_ref": "indicator--bbb884dd-3b00-4eb6-8e7e-4ec5f8c1139e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd04e5e1-a8de-44e2-a594-28caa7f8c7d0", "sighting_of_ref": "indicator--9b1f1db5-b50d-418c-98c5-0de61dcc81f0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc03050c-8434-4fa1-a3c0-d31049c15b7e", "sighting_of_ref": "indicator--9b1f1db5-b50d-418c-98c5-0de61dcc81f0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3449709c-0b47-443b-ad85-2caff4f2aa0a", "sighting_of_ref": "indicator--a2beb04e-7d1a-4533-8229-e8c09eb854ec", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed96e454-5fd7-4aaf-b999-1b9833e97055", "sighting_of_ref": "indicator--a2beb04e-7d1a-4533-8229-e8c09eb854ec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3920c1-a663-44aa-abe9-37731feef17a", "sighting_of_ref": "indicator--e6881425-eb6e-4645-8aa1-43fd3038927e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a443df92-57e3-4b86-82da-a878eccec733", "sighting_of_ref": "indicator--e6881425-eb6e-4645-8aa1-43fd3038927e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ee0ee6-da9a-4fda-910e-23c982bafa9a", "sighting_of_ref": "indicator--2f5f05b0-61e0-4398-bd94-c8f460997e84", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4a37eb-919f-4bef-b173-f3f9d0691c50", "sighting_of_ref": "indicator--2f5f05b0-61e0-4398-bd94-c8f460997e84", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173d6bfe-0f70-4b68-bcc8-0a6690a9677b", "sighting_of_ref": "indicator--0781aea8-1f55-47cb-a5da-a615995a6eaf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144082e1-967c-4509-9a56-f95334d49417", "sighting_of_ref": "indicator--0781aea8-1f55-47cb-a5da-a615995a6eaf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9013c18-4d16-4249-89f6-41ab91ac35da", "sighting_of_ref": "indicator--659883a8-c9a4-42d2-a647-3019c4498033", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df00fcb0-e3b1-46e1-abb4-2cae1186bd79", "sighting_of_ref": "indicator--659883a8-c9a4-42d2-a647-3019c4498033", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2e6e0b-956c-4d80-91f1-33e2a031f3e5", "sighting_of_ref": "indicator--2500bf87-8aa0-43a3-8a43-9e355eab5a9d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11820226-a39a-418c-855d-b2347f1b62a8", "sighting_of_ref": "indicator--2500bf87-8aa0-43a3-8a43-9e355eab5a9d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f050c6e-22af-4b0f-8bfe-4fd193afe44a", "sighting_of_ref": "indicator--0f117d21-4919-4d96-9ff0-d3ed0631e412", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fae6718-5fd5-4d8d-b2b9-f8bb2c9b2d3e", "sighting_of_ref": "indicator--e161b63b-1f62-4900-b687-bcbe86e1aae7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce11388-d582-4bf1-8a75-c6e5317e5d82", "sighting_of_ref": "indicator--e161b63b-1f62-4900-b687-bcbe86e1aae7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aece768-18ac-402a-bd5d-ad5885e4409c", "sighting_of_ref": "indicator--40300e99-e71d-45cb-bf2e-ba8b0c280500", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7006753-e24d-4bc6-b804-155eefa44b71", "sighting_of_ref": "indicator--ba15186b-2645-44cb-9e73-bb755a558d33", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da165683-022f-48f7-95d5-5ab886397a91", "sighting_of_ref": "indicator--6b77bf0a-240b-4b3c-a932-0b47885a11cb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8027643-6c44-43d9-b002-ffbac286b9f8", "sighting_of_ref": "indicator--6b77bf0a-240b-4b3c-a932-0b47885a11cb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a85fdcc-f423-49f6-9b9e-be546a560406", "sighting_of_ref": "indicator--c557c493-21c7-4941-b58c-d69cc11da019", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fc0745-2ff7-4f2f-af45-7687cdccedc3", "sighting_of_ref": "indicator--c9e4803c-e804-40fe-89f6-22e67a7999f6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44977fc-80cb-4de0-9d3e-9aa9ae0ea2ef", "sighting_of_ref": "indicator--96bb8572-bbcc-4246-a587-4788b74e402b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6886aefc-c00e-40c8-b955-f59761c7ff23", "sighting_of_ref": "indicator--3cae564a-bc0a-4b1c-8cfb-e4af2d1dec44", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e66c657-84a8-4bb1-9661-392e200c3d6d", "sighting_of_ref": "indicator--3cae564a-bc0a-4b1c-8cfb-e4af2d1dec44", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f39e20-5e77-49d8-90b8-56580ae642c0", "sighting_of_ref": "indicator--c1612fe5-b3d3-4bcf-8de4-0310039b9338", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b66bc4f-4f7b-4056-bbd6-5f3ff7f7328b", "sighting_of_ref": "indicator--c1612fe5-b3d3-4bcf-8de4-0310039b9338", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01720be-4a0d-4b0e-8955-931a8d378a68", "sighting_of_ref": "indicator--1db5f910-157b-44e2-a819-179912dd2534", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b021df-d00f-4470-bb2a-d503459584e7", "sighting_of_ref": "indicator--3c3ae8c5-4105-4e40-b7d8-66027c651de2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381edc21-7cc8-436a-8888-937494bbdf0e", "sighting_of_ref": "indicator--3c3ae8c5-4105-4e40-b7d8-66027c651de2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c428d8fc-ff2d-410f-9c79-c449367d3854", "sighting_of_ref": "indicator--3e8faee0-3c95-43b9-9bc5-af40fc7c8c58", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efa51bc-25e1-4797-afb9-4571e8106709", "sighting_of_ref": "indicator--13b4fb10-69f1-4278-b04e-1c02f9580cd5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99d8755-ed6e-4ebe-937f-c0e1f478b2ed", "sighting_of_ref": "indicator--13b4fb10-69f1-4278-b04e-1c02f9580cd5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee160092-ffe0-4881-af44-560838c29eea", "sighting_of_ref": "indicator--342908d5-b886-4981-99d4-b5d11ad8f94e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c1d9ff-36a2-4361-b988-a1e841163157", "sighting_of_ref": "indicator--342908d5-b886-4981-99d4-b5d11ad8f94e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3ae9df-87f5-4fe0-a92b-42fa4dfae022", "sighting_of_ref": "indicator--0799ee34-7505-4d1b-a097-919c85e458ad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1307e886-9bb5-4237-a2ca-7988a4ca7355", "sighting_of_ref": "indicator--ee776b59-e10e-40d4-821d-da0517b8832e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6124b428-50e9-4d39-92bd-cb0687898a3a", "sighting_of_ref": "indicator--7f6eaa44-2722-4784-b3bf-d52df029b8a6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b107ab-41d5-4415-ac8b-49de8a8e7ccc", "sighting_of_ref": "indicator--e7ccba58-8c8f-46b1-aa88-307754b57225", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991b97ac-1745-407e-b88d-bb5eb706053a", "sighting_of_ref": "indicator--e7ccba58-8c8f-46b1-aa88-307754b57225", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60b81c7-db6a-4699-b524-0596eeb3497e", "sighting_of_ref": "indicator--35c0c722-145c-4c95-a14f-526f502cefd4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a6f968-ff4b-4027-8f9e-307568387f46", "sighting_of_ref": "indicator--35c0c722-145c-4c95-a14f-526f502cefd4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73edcbd-6941-4ab9-bf93-a13d795f5f11", "sighting_of_ref": "indicator--b2dff67e-2ae0-41fb-82ff-692c0787ec2c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4908129b-1e0d-48da-bab3-a8cac638d244", "sighting_of_ref": "indicator--b2dff67e-2ae0-41fb-82ff-692c0787ec2c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807a1c3f-ba81-4c01-bae3-c875be377ffc", "sighting_of_ref": "indicator--49523f47-95ae-4781-ac93-cb7746fa8274", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964bf6a7-11fe-4814-baac-04529d29b13e", "sighting_of_ref": "indicator--49523f47-95ae-4781-ac93-cb7746fa8274", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c613cd5-2f1d-47b5-81ef-df50f1895b4b", "sighting_of_ref": "indicator--241b3954-35ab-444d-bdd1-fbb51970cdca", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587fc1d1-94e8-40e6-bf3f-2b2845635117", "sighting_of_ref": "indicator--7a3f5590-7f53-4aae-a46f-1bc9d844410e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1329229-9b7d-44dd-b248-55764bb29788", "sighting_of_ref": "indicator--00e67503-6662-4377-b3bf-2b7ed142de94", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58635aed-f571-4081-b9e8-36cfa1c2cdce", "sighting_of_ref": "indicator--60094638-b577-4eaf-9fe9-28b126602fa2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5964e87-7a50-4bea-ab28-1fe6d7b27a58", "sighting_of_ref": "indicator--779b4523-3ebf-49f9-b32c-74e73019fa6e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d188019-eb5e-4599-a0ef-dcf2a81eb59e", "sighting_of_ref": "indicator--c0d95460-3563-4772-9c86-42315cc54f8f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16157a6-1eae-4e4f-a337-5ed0930bc692", "sighting_of_ref": "indicator--65f06149-4485-435e-bdb6-2e06fee786ca", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86a953f-6720-4d81-b98c-c1beb0896961", "sighting_of_ref": "indicator--0fda08df-8396-4a90-abc0-b001aa5e1951", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a76fc6-7409-4f57-bcf9-c48a2133f6c4", "sighting_of_ref": "indicator--0fda08df-8396-4a90-abc0-b001aa5e1951", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c064058f-f6d5-4005-a2ee-b41d1dd81586", "sighting_of_ref": "indicator--f1ebfd34-380b-4234-9e7f-e9afca5b2c20", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d35123-c8e6-4cde-979d-1679585f1e45", "sighting_of_ref": "indicator--f1ebfd34-380b-4234-9e7f-e9afca5b2c20", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b0d6de-304a-4a67-ac4a-ca6dfbdb49fe", "sighting_of_ref": "indicator--d21f59cf-8630-4c36-add0-b0e8e1ade74c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0fda6a-14a0-4f88-a4a4-9acd7a656096", "sighting_of_ref": "indicator--91bf897d-170d-427b-80b0-763ea5f32f55", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972e3b98-9a1a-4356-a507-0c70d29595d9", "sighting_of_ref": "indicator--91bf897d-170d-427b-80b0-763ea5f32f55", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5916e480-067a-4435-8da1-a31d9b8ad5b8", "sighting_of_ref": "indicator--7fc47d0f-ce6c-4477-9a01-390a0316f533", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702887ff-c00f-4df5-a908-aab86216b9cf", "sighting_of_ref": "indicator--df7413fd-9022-4763-b9f0-bcd3b915f7d4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4305cb48-c559-401f-b9a2-ff6904c4966f", "sighting_of_ref": "indicator--c1ce2bfb-d148-4be5-acd5-5054a815d156", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0346b8-1e94-4a04-ade1-a9ca4ce9f62d", "sighting_of_ref": "indicator--2d0d8e2a-89b3-410c-b436-df8b31f0aa9b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6972dc8-903e-4081-9d7a-f9478d707d15", "sighting_of_ref": "indicator--f6c411e4-8260-45bf-a112-49ef9f282cca", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be06baa3-fb70-4b6d-82be-c724f3f6fa77", "sighting_of_ref": "indicator--de409b43-fa4c-4cb7-a047-c83270de6c7f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776ede15-73d4-419e-8114-29a53bfa2d2f", "sighting_of_ref": "indicator--de409b43-fa4c-4cb7-a047-c83270de6c7f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcb9821-3f5b-4483-b078-76c233985bf0", "sighting_of_ref": "indicator--9b8d01fd-560b-4d14-ab55-09b75c366cb9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc80525-28da-4757-a351-11141b9aceea", "sighting_of_ref": "indicator--9b8d01fd-560b-4d14-ab55-09b75c366cb9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22bb610-c639-448b-962e-b04ed2dc8843", "sighting_of_ref": "indicator--de1d53a1-019f-47f9-983b-0629b1f2a11d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfed717-d40e-4963-97d0-724039fbd341", "sighting_of_ref": "indicator--de1d53a1-019f-47f9-983b-0629b1f2a11d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13b0b3f-2471-4361-a6e7-acb3a34a2e31", "sighting_of_ref": "indicator--9c43d046-9ddc-4e60-8ed9-959e1293f88b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3654e8-cd09-4309-90bd-3d53958dd959", "sighting_of_ref": "indicator--9c43d046-9ddc-4e60-8ed9-959e1293f88b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e613b14f-33b2-483a-86b9-d98439af9fef", "sighting_of_ref": "indicator--ccd3212d-e1c9-49a3-8f9b-35275fb2875f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a5d518-0eb7-441d-a198-b3d47911dd62", "sighting_of_ref": "indicator--ccd3212d-e1c9-49a3-8f9b-35275fb2875f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d1e53e-ea71-48e2-ad7a-1a7dc688735e", "sighting_of_ref": "indicator--c6cc0769-0744-4724-8158-b1420d6c479c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f92800-6a18-4de3-9c9d-1835ff594a0c", "sighting_of_ref": "indicator--c6cc0769-0744-4724-8158-b1420d6c479c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc0eed7-f2fe-4b84-8c3c-63912f24917f", "sighting_of_ref": "indicator--c6bba349-8ff0-4828-95b7-7669a1892c36", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bc2069-179c-46d4-80a0-2eb64dc6dfdb", "sighting_of_ref": "indicator--c6bba349-8ff0-4828-95b7-7669a1892c36", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992236e0-abc9-42d7-8f1d-63ca0aa77079", "sighting_of_ref": "indicator--9a33b9a6-b558-4100-bc80-92f1fc2ab12b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04759f8d-bbdd-4ac1-9802-aaf73bc312a5", "sighting_of_ref": "indicator--87e2b4b1-cba2-4ed4-ad2c-77fd6509eee4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60d02bd-d7fd-42eb-b0b3-575e59b9db32", "sighting_of_ref": "indicator--87e2b4b1-cba2-4ed4-ad2c-77fd6509eee4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb11202-766b-4310-a007-aa61b292ade8", "sighting_of_ref": "indicator--d11d87e9-13d8-4965-91b9-b64ca5f04d00", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29689ec8-1474-4ef7-bdc3-608de23ef7cb", "sighting_of_ref": "indicator--7576a4db-3f26-45ce-9432-49d83880a23f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba6fa63-62e3-451d-8557-2e29530e1c2b", "sighting_of_ref": "indicator--7576a4db-3f26-45ce-9432-49d83880a23f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05e781d-cf9b-48ad-b209-0f7cac47fe60", "sighting_of_ref": "indicator--2afe844f-cafe-4020-9974-0cd5355f8c2e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64056110-dd7c-4983-84ed-4153a2d7977e", "sighting_of_ref": "indicator--2afe844f-cafe-4020-9974-0cd5355f8c2e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847e3a06-c02c-401e-90c0-df3a28891bdb", "sighting_of_ref": "indicator--f536cb54-738b-4814-82fd-5f44b87932a4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c036bab5-5415-48d0-9a05-3247724fe06e", "sighting_of_ref": "indicator--b2ba4305-ed3e-4b2d-9c30-0aba578ce622", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d216e393-e4aa-4a3b-966d-43dba412ed73", "sighting_of_ref": "indicator--9dfdd805-494b-4c55-99f1-f37774581553", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9e1123-d98e-4449-a2fa-08576331d88f", "sighting_of_ref": "indicator--661910c1-1cba-4b51-aaa4-8b0e10387ebd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19812eb7-d74f-4370-8c22-837a78c1a3d6", "sighting_of_ref": "indicator--075c6449-6f77-427f-a92e-fb0351f4e397", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe08dd6-6d31-4cdd-80da-e498f495a094", "sighting_of_ref": "indicator--187f5828-fa70-4e98-ad4c-3fee3d8e6f3f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b00922-c3eb-4f4a-9380-e2582e2b03ae", "sighting_of_ref": "indicator--fed1cc66-1377-4bea-ac2b-5f62566e818e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939d7707-3577-4bcc-87a2-9f84bea40e3e", "sighting_of_ref": "indicator--cf065a64-cbc4-439f-a618-999d68e73877", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf58d70-8fed-4fa5-be54-e203b39fd95b", "sighting_of_ref": "indicator--73cc05e9-fd2d-4177-8eeb-3cdc836cb996", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d685cc4b-fc30-493b-bec9-7c36ffc2aa67", "sighting_of_ref": "indicator--73cc05e9-fd2d-4177-8eeb-3cdc836cb996", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617d15ca-0816-4718-99c6-340c44bcb64f", "sighting_of_ref": "indicator--925bcee7-f610-41fb-a57d-d7262d148e3a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3975ba4-6abd-48f3-9754-fe008455acb0", "sighting_of_ref": "indicator--733bf799-9139-4911-b73a-9fa586c3e8ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc444cc-e5b6-4e97-80b6-a7abdd8b6693", "sighting_of_ref": "indicator--d6b71f4e-9e0a-4022-b7d1-af1f9f131597", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c05541f-fb50-4aa2-a1ce-41f7d317236a", "sighting_of_ref": "indicator--ea4cb4a5-23e0-472d-b9de-5d7d411b4eda", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47b3d85-108c-4773-8a53-c94a12491a0b", "sighting_of_ref": "indicator--ea4cb4a5-23e0-472d-b9de-5d7d411b4eda", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d67ff1-b7d4-4af4-8a24-a7c75c8dc2ce", "sighting_of_ref": "indicator--5d8f00a6-cfb7-461e-9137-efe40b115960", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aaadef2-e834-490c-84df-15a9236c303f", "sighting_of_ref": "indicator--5d8f00a6-cfb7-461e-9137-efe40b115960", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7c53e7-ae1e-459b-851c-8a6af5eecd52", "sighting_of_ref": "indicator--0f9683e0-d7c9-4c0c-894a-5a1adb6a863e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dad5c64-79b5-4781-b575-876a97b0baeb", "sighting_of_ref": "indicator--bb38e4a1-f948-42da-9e04-bbd15c399fcb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9640add4-57a8-479d-bbac-d50020b0058d", "sighting_of_ref": "indicator--bb38e4a1-f948-42da-9e04-bbd15c399fcb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d679a4f9-fadf-4c06-bce3-891e416507d4", "sighting_of_ref": "indicator--86ff611b-1d91-4190-80a1-8c0c7616afdf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdc1992-a4c7-4952-8cd0-a6119ac96d9d", "sighting_of_ref": "indicator--86ff611b-1d91-4190-80a1-8c0c7616afdf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2208c6-4d55-49e6-92d9-8c2e04b929c2", "sighting_of_ref": "indicator--e1d2106e-aec1-4b6c-9434-33195fc8a8d5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65399a86-3335-4067-94a8-f59c254783e7", "sighting_of_ref": "indicator--0c44e9c8-4a5c-4354-a43f-9e573c272632", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32082d34-f942-4175-ac29-6e2a056b7b56", "sighting_of_ref": "indicator--0c44e9c8-4a5c-4354-a43f-9e573c272632", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09a61e6-f180-49a2-a6ff-ab4e1dd5c4c8", "sighting_of_ref": "indicator--c1f35e06-9ea0-48c1-8546-a3428ee27024", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74f8e0e-bc63-4630-bd85-138bb2cfba84", "sighting_of_ref": "indicator--c1f35e06-9ea0-48c1-8546-a3428ee27024", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0381bf-3b96-4a37-850b-3025f8920935", "sighting_of_ref": "indicator--1491741f-2c16-4e47-991c-6993a9541c11", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdadc669-8b1f-4b80-ba6e-7196cc1dc578", "sighting_of_ref": "indicator--1491741f-2c16-4e47-991c-6993a9541c11", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddac69c5-9d4b-444d-afbc-49b0f3f21a9f", "sighting_of_ref": "indicator--7fef23dd-7dbe-46d7-8b0e-04dae24f71a3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b27805-3f91-4f80-9790-0bda11c2edc3", "sighting_of_ref": "indicator--7fef23dd-7dbe-46d7-8b0e-04dae24f71a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3feda95-4a85-4cd3-9f6f-b5034a60832a", "sighting_of_ref": "indicator--341762a6-cc2c-4e59-b401-b647e0adb219", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8410166a-2e7d-451e-a68a-924b5b9f61ab", "sighting_of_ref": "indicator--0745c958-6769-4ecc-a163-f9991d8764cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d5850f-3ca1-4c2f-9dcc-910e354d2fe6", "sighting_of_ref": "indicator--bb48cdae-0343-4e17-b87e-cc87f2a5b280", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd33c0bb-d604-45ad-b30d-487c9d732be4", "sighting_of_ref": "indicator--49b16c6f-4086-436d-ab75-c5c0c12de628", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db947fcc-1176-4162-9a5b-6f3523c2a308", "sighting_of_ref": "indicator--49b16c6f-4086-436d-ab75-c5c0c12de628", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e53102-3c83-4315-ab5b-53fe94ab60b2", "sighting_of_ref": "indicator--e59fc152-6b3c-46e1-9a4f-3d4e22cab3ad", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cda6e0-d8e4-4037-9807-1d47165312c0", "sighting_of_ref": "indicator--e59fc152-6b3c-46e1-9a4f-3d4e22cab3ad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b43f43-49ea-46b1-b23e-810553d2dfb0", "sighting_of_ref": "indicator--fbf54b30-96b3-4e12-8a26-8917efad45a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3570ef-4a94-49cc-9346-83aa7a88397a", "sighting_of_ref": "indicator--ba3b10a9-a884-4e38-aa92-0dd0134eabed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9481434a-b0cb-4c6d-b7ab-c11eef7e6453", "sighting_of_ref": "indicator--d446e652-8d49-473a-9fea-c05108320692", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8ca2e1-7a6a-41d7-8ce1-a0560ff4ec5b", "sighting_of_ref": "indicator--d446e652-8d49-473a-9fea-c05108320692", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab235811-c3ea-4ff0-909d-5d379d23876a", "sighting_of_ref": "indicator--2b0f0491-21cb-416c-ae82-b8584f47a8b2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da228b40-8558-4da7-a248-556ca99972ef", "sighting_of_ref": "indicator--2b0f0491-21cb-416c-ae82-b8584f47a8b2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a5a3dc-dc97-443e-aa8c-f86c0baec976", "sighting_of_ref": "indicator--680e9fbe-3c4b-408c-bd9c-e792da343ff2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5afa0e-df1c-465a-82a5-4ff95e068434", "sighting_of_ref": "indicator--680e9fbe-3c4b-408c-bd9c-e792da343ff2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12250b65-b69d-4de0-a935-e3461894cafc", "sighting_of_ref": "indicator--8b2a6a2e-6bdb-4d25-afef-a9d68fb77766", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c28014c-9746-40fe-935a-fb5554bc0add", "sighting_of_ref": "indicator--1babb4b5-79a2-49d8-aa3c-eeca2f3f85ce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedbb97c-e619-40bc-a4c7-b32589ea0e66", "sighting_of_ref": "indicator--23bec19b-eb55-4a8a-ab56-4de51bf4aee3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86766b41-8bc0-432b-b9b0-966c633add77", "sighting_of_ref": "indicator--f143d554-e984-40eb-9ecd-54a348e3b33a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6306d295-3dab-4ce8-bb98-16702e8b0a2b", "sighting_of_ref": "indicator--08b08e16-296e-4f6b-8d3f-9d6013cb9782", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a91732-7f83-4b2b-9c6b-1885ef68799b", "sighting_of_ref": "indicator--0478dd6b-d995-41be-8dd7-84eef6bda95b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d21482-2f2d-468d-9cc5-1a4aea891178", "sighting_of_ref": "indicator--206fd50f-3bf6-4bfc-a0f4-5407e8e55b95", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37e0fa2-151e-48b3-a817-daced6670ae1", "sighting_of_ref": "indicator--6843a983-ae32-41b9-916b-45162421fad1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5aff3a8-62be-4d3c-9783-f237d95a9172", "sighting_of_ref": "indicator--f6b5f2c0-1c47-44d1-935f-2f92c792e5e5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db66b701-878b-46d2-9fe2-aac4d7fd8817", "sighting_of_ref": "indicator--ab5ff1e8-6fe2-4049-be55-b783ba857e95", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f18fc0e-5ddd-4af3-a6ea-fe31792b5f1b", "sighting_of_ref": "indicator--ab5ff1e8-6fe2-4049-be55-b783ba857e95", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22d7631-94be-4d58-b7f8-279ce79ebb72", "sighting_of_ref": "indicator--fd25e7ce-83d4-4e74-bc24-b675b478ba46", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285b5656-1fac-474a-bc56-89741f64994f", "sighting_of_ref": "indicator--44af3d16-90bd-4406-94b1-1d46bfbd3a75", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf83744-bbbc-4e0f-a482-6533adfb4366", "sighting_of_ref": "indicator--a4e556e1-7a9e-4fe6-b02b-8114508e0bdf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d412bd-c700-4a33-bb82-5a99f55d2502", "sighting_of_ref": "indicator--a4e556e1-7a9e-4fe6-b02b-8114508e0bdf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3ab49c-1a0e-4331-8107-55f376f7b20c", "sighting_of_ref": "indicator--de05116d-ce25-4c9b-b6ef-1dfd96b99302", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a291e7f5-f6c1-4d7d-9075-fb13d166f262", "sighting_of_ref": "indicator--0ba7ad78-61a4-4c4e-b2fd-f7e687f7aa6a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8baf727-ee8c-4c7f-a0d9-ad0622a8769c", "sighting_of_ref": "indicator--8dd2a7fe-c728-43f8-9d79-92f8222dfdfd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4240f14-60ec-49f1-bfe6-849b263df0a9", "sighting_of_ref": "indicator--8dd2a7fe-c728-43f8-9d79-92f8222dfdfd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc80cba6-54a5-4f9d-a14e-469312c25ad6", "sighting_of_ref": "indicator--d87cea7b-661a-4598-ae10-87946835a9c8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238378c6-fa70-417c-85ae-4e50916fecb1", "sighting_of_ref": "indicator--d87cea7b-661a-4598-ae10-87946835a9c8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71325796-4a50-43f7-a22b-85c920268111", "sighting_of_ref": "indicator--117a5bbf-52d5-4365-b8f6-292df3de357b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b1d1a6-7e87-4529-bcb4-f3c5a3d530a8", "sighting_of_ref": "indicator--117a5bbf-52d5-4365-b8f6-292df3de357b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac98f176-bdf3-4308-bce9-604d3314714e", "sighting_of_ref": "indicator--5b3a8087-2c71-42f2-8faa-ec31205ebcaa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c145af-8a6e-4b5b-8881-e1f0f993c75f", "sighting_of_ref": "indicator--b79996a7-e541-42b0-a131-112e0975827d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9ef160-ac73-4e6c-86ca-f7eac2d0f05d", "sighting_of_ref": "indicator--10e93e24-baa2-4517-aca0-048d06ff539c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b183c00a-c27e-4f10-a35b-a3817ab1820a", "sighting_of_ref": "indicator--10e93e24-baa2-4517-aca0-048d06ff539c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e30ff5a-de8c-40b8-a693-3135eaf5e481", "sighting_of_ref": "indicator--7e932468-0cde-4373-b591-850978200c90", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9f996f-5369-488a-9703-92d4b50b3399", "sighting_of_ref": "indicator--16e61295-ee99-42d0-97c1-d86aca2345f2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31465cfb-1d98-4367-9707-0f79e830e6f2", "sighting_of_ref": "indicator--e8ad77ef-0438-4be9-84ef-aa5512a33812", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7febd0bb-e6c6-4b40-8138-c2c5dff45ee7", "sighting_of_ref": "indicator--57a7668b-18b5-40c4-84ab-d10aeaca0ce9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5255c3d0-b3af-49f6-b03d-8eb6b9944986", "sighting_of_ref": "indicator--76f6d197-cf64-416e-840e-e9bd28b0644c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019472e6-3092-4e51-a349-730ce59a0b0d", "sighting_of_ref": "indicator--a2f21d16-e704-4d3a-88de-6ae782c8d05a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4903bf3c-b7f4-4550-a55e-dba10435a92c", "sighting_of_ref": "indicator--237e02d9-53f6-4418-8547-5f5b5370ba23", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b55942-2bba-4c72-b4a6-64cd24cc9005", "sighting_of_ref": "indicator--4b70dcc7-f4bb-4ab5-98b2-2aacc55ca88b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bbdd6e-173d-439c-b743-ad7f5854c622", "sighting_of_ref": "indicator--c884709c-7fc4-43ca-9692-105f14e06f35", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507420c7-b26e-4e17-a1a6-10088f86cbd1", "sighting_of_ref": "indicator--c884709c-7fc4-43ca-9692-105f14e06f35", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9878858d-896a-428e-b2e1-1d4f43f943e5", "sighting_of_ref": "indicator--0d0777ba-3566-4b57-92cc-18fbfdc4d4d0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8adb25-709e-4b48-ae6d-98e61c3c41e7", "sighting_of_ref": "indicator--0d0777ba-3566-4b57-92cc-18fbfdc4d4d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22227c61-b025-4ad5-896b-9342c63e2032", "sighting_of_ref": "indicator--6088563f-ee86-4529-bdc3-48af5087f876", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64060ff8-49a3-415c-84aa-f8b6b2a6f152", "sighting_of_ref": "indicator--e303c87f-8a59-4e9a-8031-1ad9950b1263", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88f8980-3c57-4411-8718-be6af1998e77", "sighting_of_ref": "indicator--78b7e734-d318-4936-a68c-408d7e1210ad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd14ed7-5220-4170-a416-f499aaa152cb", "sighting_of_ref": "indicator--eb1fe457-6905-4a87-93fe-d60435fb3cee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ea01d0-377d-4554-895e-6e4c235bcf17", "sighting_of_ref": "indicator--a50b3b0b-1116-4d2d-b00b-88d823940ce3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7714f60-6c56-41b2-8ccd-ec6c76a86fc7", "sighting_of_ref": "indicator--a275c228-9ae8-4a29-a0e3-f2e45c8a5cd2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc9ddb7-eeb2-489f-b4b8-d8028fe81998", "sighting_of_ref": "indicator--a60714ae-201f-4edd-adba-8a9d8c94e8ec", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5125ff-1ba3-4cdc-b7ea-18d915aa4230", "sighting_of_ref": "indicator--a60714ae-201f-4edd-adba-8a9d8c94e8ec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bb412a-01fa-4c64-a75b-2565d4f324fb", "sighting_of_ref": "indicator--f42f6e69-8ab4-43c7-9f15-107344e4ed4f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9e9324-3b6d-4462-9efc-aba26494264c", "sighting_of_ref": "indicator--f42f6e69-8ab4-43c7-9f15-107344e4ed4f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7342c0-8396-411b-911b-c461bd4c57e6", "sighting_of_ref": "indicator--fcb3171b-b8fe-4e51-ac4f-935a8d4de010", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf86cf3f-b1b6-4284-917d-75e180a7a845", "sighting_of_ref": "indicator--fcb3171b-b8fe-4e51-ac4f-935a8d4de010", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ff8b03-1ebf-483b-ab0a-54e6d94d3db1", "sighting_of_ref": "indicator--0bd856d5-b0ad-4283-9501-82cb0f21f035", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba78c2c0-c9af-4b7a-a535-09743a12c18f", "sighting_of_ref": "indicator--72b11601-b897-415f-bfdb-8d08975ef0f9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aeb9c24-43e2-4c6a-b897-4fca667453fa", "sighting_of_ref": "indicator--23000f27-9e6e-4a58-a070-37e7d1ca9724", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1296f12a-5338-41e2-9b78-6ae41df79965", "sighting_of_ref": "indicator--425cbeba-0b12-44a9-9b5a-993f29cad0f6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2636e9a-9c3a-463a-8d89-2410408595e3", "sighting_of_ref": "indicator--425cbeba-0b12-44a9-9b5a-993f29cad0f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858c04ac-7e22-48d4-9629-56952beb156a", "sighting_of_ref": "indicator--688ff738-afc5-44b4-b1f7-868486143ff9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df8f090-5986-4e4b-bf22-99549645abf5", "sighting_of_ref": "indicator--688ff738-afc5-44b4-b1f7-868486143ff9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a9062d-e3a3-44aa-967c-cce561b7c6ed", "sighting_of_ref": "indicator--f81bc9ae-c7d3-4e53-9971-bcef04400195", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45571e8-adbd-47be-a4ac-9db6732a8a4a", "sighting_of_ref": "indicator--fa42c603-b82a-4ea9-ab21-759b80be7f5b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc60426-74cf-4645-830b-9b693709bd6b", "sighting_of_ref": "indicator--cd423276-6d2d-43ba-9c96-d4d06b9ea3d4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f03239-3e80-41bf-9ef7-7cebbbfdd252", "sighting_of_ref": "indicator--2e478a31-b07b-409f-bc8b-859ff53013e6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d156813-7057-46be-bae8-dcad95b13c30", "sighting_of_ref": "indicator--2e478a31-b07b-409f-bc8b-859ff53013e6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe40188-99b4-4453-b389-b11666321b55", "sighting_of_ref": "indicator--1b5993ee-fc24-49d5-a1a8-7378b760ec55", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbb11c3-f8a9-453e-9271-a0481565720f", "sighting_of_ref": "indicator--c711f94e-e160-41f1-8762-4667b7ec674a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c86ed68-9322-419a-b649-1656d7f3ca95", "sighting_of_ref": "indicator--c711f94e-e160-41f1-8762-4667b7ec674a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076f9801-ca8e-40ff-9355-463863d3a333", "sighting_of_ref": "indicator--c10d79c2-055b-4119-8414-cb8fe2d7540e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60436360-052d-4d08-a10c-5fc9205ffa70", "sighting_of_ref": "indicator--949d4902-de11-4084-bfd6-f3f50a6f01a2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ffb510-e09d-4fa1-8313-dac83cb5eb13", "sighting_of_ref": "indicator--7993ad2e-20c9-4a5f-8759-91f6cf31f003", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59520eba-fac3-4514-a7c0-1478ac86f6db", "sighting_of_ref": "indicator--2440aa74-a88d-4d03-b22a-921e245e6218", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9558da2c-0587-42bc-a0ef-d1f6380f2d2a", "sighting_of_ref": "indicator--2440aa74-a88d-4d03-b22a-921e245e6218", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf2694b-54ac-439d-a114-9c1ddb0627b1", "sighting_of_ref": "indicator--ba2a04df-4222-47d3-b93b-06e0096d218c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5022c0b-e1ca-435c-91b4-edb5390df6cb", "sighting_of_ref": "indicator--5953e57c-28df-4f22-9ce9-2bf623436f65", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188fec47-0e82-43a4-b28c-de4672e75b86", "sighting_of_ref": "indicator--169dc043-8b43-4559-9b9d-e291c8f766fc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2784106-ecb3-44f1-8714-6a7918c732f7", "sighting_of_ref": "indicator--65e0f9c2-6a71-4907-acbd-362cc1d33bf9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4b7fa4-b455-4a7a-8ca6-a572c5651be5", "sighting_of_ref": "indicator--7cf80a42-3a52-4efc-bf0e-4088d5168772", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa24a11-bf28-4484-9e70-a95608d79b96", "sighting_of_ref": "indicator--a0e2f1b9-3ab4-4505-b11a-c75f6dfa9eae", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3edd0c5-33e9-48ed-99ef-f4fe0e464280", "sighting_of_ref": "indicator--a0e2f1b9-3ab4-4505-b11a-c75f6dfa9eae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26528be1-241f-43b1-bfb7-d5887a177bc6", "sighting_of_ref": "indicator--0f55530b-cc2f-410a-b9cb-b33fef98ea81", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53568705-6b36-412c-b72a-348510075bf7", "sighting_of_ref": "indicator--0cab0bec-db43-4737-8502-6d8bd4edb38a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e16625-55a6-4f59-a727-16ff8e94d565", "sighting_of_ref": "indicator--0cab0bec-db43-4737-8502-6d8bd4edb38a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc57049-acb3-482a-b72d-e7d90bc3ca4a", "sighting_of_ref": "indicator--2a2ef45b-7690-44ab-a5ec-45b313e1e54b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324a78c1-68c0-4173-a1cb-d8c4a5f5ceeb", "sighting_of_ref": "indicator--af4dee84-12e5-4194-92a8-9492869e0f7e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ef2f3d-95e0-48a8-9ecf-202eaca4ec17", "sighting_of_ref": "indicator--7342a537-a1f4-4a43-8217-64d2fb332822", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5133eb-a037-4ed8-ae4d-0c34229ec521", "sighting_of_ref": "indicator--7342a537-a1f4-4a43-8217-64d2fb332822", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8781fd-355e-4655-9eda-99fc5ce2898d", "sighting_of_ref": "indicator--abfd1373-c5f3-44aa-9902-7b79c10baccd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbf2ec4-7b5f-498e-8029-41f92b725016", "sighting_of_ref": "indicator--6dd2b8f2-9a57-4ecb-995d-c6d62f268f0c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e33162a-09bb-4af3-ba6f-107d66ff3415", "sighting_of_ref": "indicator--2579c35b-f4be-41e5-ab93-f1f7d5cc5678", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fac336b-68ae-4ebe-bddd-9a968a99d3b5", "sighting_of_ref": "indicator--d65b7667-7690-430c-8a24-986802890bf1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec66ca2-ad53-40a6-aa18-a94118c08778", "sighting_of_ref": "indicator--a3c8982c-b016-4b0c-a9ff-151e269488a7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f111c6-d64e-4142-84bd-b83fa933a3cf", "sighting_of_ref": "indicator--3362123f-1b7e-4153-806a-8349bce63524", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccfe030-81b5-41d0-b119-fc361f8f0469", "sighting_of_ref": "indicator--991b44e2-8df3-45bb-8c0c-20be54e3ca29", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a8268a-b671-4b4c-aff2-9ffecc07a5f5", "sighting_of_ref": "indicator--5a175cd2-3559-46a7-b05b-90e8cbc1851d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8fe338-ab8b-45cb-9a1c-3ba52def7a98", "sighting_of_ref": "indicator--51e811da-f7c7-45c8-bc99-860d5370a70a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acaac91d-2910-4ebf-9290-98e2275aee5c", "sighting_of_ref": "indicator--421e2e29-c090-4012-825a-7985500ee7b8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55cb9df9-12b6-4f17-8bb5-429aec7c7ee2", "sighting_of_ref": "indicator--243dce9d-9ecc-4ba4-9928-00c538abd0f7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16170408-0921-46bf-a57e-e664db6d6717", "sighting_of_ref": "indicator--243dce9d-9ecc-4ba4-9928-00c538abd0f7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6448a150-f126-4c45-bc37-1fe087743b5c", "sighting_of_ref": "indicator--c00c1108-6f73-474b-b7d6-a4e3c623cddf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce99aa7b-24ff-47d9-af03-27a94fee6d7c", "sighting_of_ref": "indicator--c00c1108-6f73-474b-b7d6-a4e3c623cddf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be83aa80-a188-43aa-a33e-102c70ee5dae", "sighting_of_ref": "indicator--3464eab2-26b8-4074-9c47-8808c5c08242", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55d8acb-0625-484b-8543-2d087f848dff", "sighting_of_ref": "indicator--1be7773e-d24e-440b-bdab-e5c0717a9274", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d194af6-3056-42b1-8456-ae2c380eebfa", "sighting_of_ref": "indicator--1be7773e-d24e-440b-bdab-e5c0717a9274", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86086f11-1b84-4374-ba65-da83996c3e19", "sighting_of_ref": "indicator--b52ec24c-349b-49c1-9cec-0b82dcd70793", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1decb71e-10c2-454c-930a-8e5a522f4832", "sighting_of_ref": "indicator--7341e3d7-c5df-4608-84d4-a37e2efc16c7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2de081-48a8-4ab2-b3b7-0a6b99961325", "sighting_of_ref": "indicator--46204a4d-0cb5-4240-8918-265be57cf6f9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde410e7-522d-422e-a54f-7d75bf7eb535", "sighting_of_ref": "indicator--27a4ca50-e9cb-4861-a76f-64788b9873dd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9cfe0c-bead-48a2-936e-3761e490ebd1", "sighting_of_ref": "indicator--e5bf3a60-216f-4b60-a3e5-a132c81722da", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17d779f-597d-4abb-af21-396aa80e1088", "sighting_of_ref": "indicator--bbaff1c2-fa65-4dc8-8ef1-b86d599fd09e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60755b6-e512-41b3-a178-0f57ff7a38d1", "sighting_of_ref": "indicator--8276ba8f-84b5-4ef0-a371-85cab2d61f33", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a1643e-1126-45ae-9220-c956ebe8c3e3", "sighting_of_ref": "indicator--21362a4c-f573-45ce-b67a-cd8103b1b9b6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b178ca57-237b-4773-bfbc-3011793d7b41", "sighting_of_ref": "indicator--d6be400b-6e1c-4d28-8492-ceb5c286d99c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5987a0ff-fd64-42fb-b5d4-083250b13920", "sighting_of_ref": "indicator--920fba3d-a52c-4fb0-ada5-ec3b02cdbf99", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a7b2cb-dd66-42ec-8b1a-b85384ce9fde", "sighting_of_ref": "indicator--6381caf1-ccfa-46a2-a3f1-75cb6710af0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a440a531-4a3d-4777-982a-3492c203ba9c", "sighting_of_ref": "indicator--78883309-b78b-4ac3-87a1-40ad2d6c5b7b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a2de92-088a-48fa-95ef-cbf1f65a94cf", "sighting_of_ref": "indicator--c2749881-929a-4feb-96cf-e30f31ce1940", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9098aee0-bb02-4b54-ada9-1567d4aa146d", "sighting_of_ref": "indicator--7380b0ad-910e-4df4-8d83-35ccacd39046", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bddee3a-1e4d-437e-abeb-ffb173b3e950", "sighting_of_ref": "indicator--7380b0ad-910e-4df4-8d83-35ccacd39046", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb0ca9a-3f63-4016-98d6-fb09ec702bf8", "sighting_of_ref": "indicator--d630ba61-d058-47a6-92eb-0156c5d7ef91", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8287b32a-c4dc-44e5-8ab6-ee5eb3b5f5d2", "sighting_of_ref": "indicator--d630ba61-d058-47a6-92eb-0156c5d7ef91", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3485966e-04c7-4476-ab9a-9e7259fb55c4", "sighting_of_ref": "indicator--f5775818-e78a-4342-bcc5-acc06d862c97", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1883f8f8-f3c8-4554-a61e-dcfc5ba6dea5", "sighting_of_ref": "indicator--15946c98-fc73-47bb-95ae-3d515ffab319", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27825e6d-0998-4e1d-a5ca-1f3ea702c599", "sighting_of_ref": "indicator--51978cc5-a519-418a-aed7-dcc6c7713c0d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e775e9-1f02-4c77-a999-8ec1c9266108", "sighting_of_ref": "indicator--51978cc5-a519-418a-aed7-dcc6c7713c0d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51db71b1-b299-4a40-ab26-47140b5c8757", "sighting_of_ref": "indicator--cf005621-eea8-4a26-a72f-5af5b9e1048c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dba812a-eee8-4d10-8502-698cdb137ca7", "sighting_of_ref": "indicator--82d9345a-3a90-4fc3-babd-c471dcdeb37a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fc9579-f009-4e8c-b2ed-921e2e875642", "sighting_of_ref": "indicator--7a114ff3-0d18-4cff-9bd0-07158a7b7590", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94eb57d5-9413-468c-a5c2-395794cc341e", "sighting_of_ref": "indicator--9c3783ab-7e47-47bc-85c3-72e19ec4c9c4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd6b86c-efa9-4608-a494-12e9af999338", "sighting_of_ref": "indicator--8c2176e9-1c87-4bb2-9eed-055b04de1db7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe2907b-8e40-4100-ae45-05132d5d861e", "sighting_of_ref": "indicator--1608b302-6169-4824-a74f-eb691628a3e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143aaa93-c088-468b-bcb2-03268d878cee", "sighting_of_ref": "indicator--f4a27064-8385-47e7-bbaa-7a951e42b751", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef58edb0-511c-4df1-aedb-4c69acfef523", "sighting_of_ref": "indicator--7291951f-ec56-47f4-85fb-ce7bd9248713", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff3f822-93a9-46e3-a622-cfadba394021", "sighting_of_ref": "indicator--30d1f121-f994-40ac-aa5e-a16a56405db1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a474e0-d93b-41e5-b122-ac44319e66b4", "sighting_of_ref": "indicator--4cce0920-d92d-4c18-a1af-94a4d1b502f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537cdd33-462e-42bf-a65b-8b26543b2848", "sighting_of_ref": "indicator--b59089eb-74c1-4fdd-aa73-483c04d557ff", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a71e95-2d55-449d-b4a5-2ff194adbb45", "sighting_of_ref": "indicator--aaa2cf6d-10c0-4fa9-932d-5a85f96a0ab5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d9c338-b6cf-48cd-a984-66365b593494", "sighting_of_ref": "indicator--c99abd14-56c0-4d67-b159-6b9b129528f1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7a43f6-356f-4629-abdf-9dea8b45cf90", "sighting_of_ref": "indicator--64f68652-a6cb-4890-a7b6-7de77041a2be", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee34613f-a37f-4688-8805-2dd70636d193", "sighting_of_ref": "indicator--6fb24b1e-2f0d-473b-8c60-fd4efa637951", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017a6d9d-7351-4214-9bd5-dc7807e3c992", "sighting_of_ref": "indicator--cce0e1f3-1987-4218-a5d3-35e6cd5a839f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77784f7-6775-4d55-bced-9cbc87bec6c1", "sighting_of_ref": "indicator--cce0e1f3-1987-4218-a5d3-35e6cd5a839f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d9a5cd-8dff-43da-9ce6-73985d5466ea", "sighting_of_ref": "indicator--9dcf39f1-2d23-4742-942a-79048116786e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9c8246-07d4-4733-bc4e-c5fa81695434", "sighting_of_ref": "indicator--56159176-10e7-41dd-9da9-3f592be32411", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2b1206-b0b1-4390-8f95-9282d35b6659", "sighting_of_ref": "indicator--e7591117-86ce-4b86-9980-7c0300c16bbd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2091480-ccc7-4f23-aa61-9d14742e0e70", "sighting_of_ref": "indicator--4b4741f5-a86c-4b17-a72d-70a0f1b62e07", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b1761f-8221-4f8f-b3d1-9ab7f6b9420b", "sighting_of_ref": "indicator--226b5ae5-ad2e-47f8-9a30-499352a59ce8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340a3214-5045-4a0b-ba8d-d8828fa1d81c", "sighting_of_ref": "indicator--ccfcd5f1-f956-42bb-b674-1eb506ebad24", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5747058e-4afe-4701-ac6f-3731ff58e76a", "sighting_of_ref": "indicator--0804eaa9-ffb4-4035-a764-d4a57e542063", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0174fea-1a4e-4ab0-aaaf-52200226dfe2", "sighting_of_ref": "indicator--07c3f6c0-f7ad-4b8c-ac4d-6d5387d2bea1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71df91a3-a0d1-47ed-b1a7-5c735b339d0b", "sighting_of_ref": "indicator--2360d05b-0179-4010-9890-3217bb2230d7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ebd0c2-b67c-47f3-87eb-3898ffc501d7", "sighting_of_ref": "indicator--9657c13b-7c2a-428d-98b2-4d89bec138d9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97782ba5-fc4f-4a76-b5c0-2c24a94c9295", "sighting_of_ref": "indicator--5ab44809-f5d6-49d8-9bd5-04f246baf53f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f855c4-1e94-40a4-aaf4-8efabab70a0b", "sighting_of_ref": "indicator--e4e818d5-4b26-4c44-b878-c327f304a43d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10db23c3-6fdc-4921-8b00-e93dc0f089b8", "sighting_of_ref": "indicator--250dba80-9b5b-43e3-827e-cd5c5e5a68b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a16928-6154-4f5f-a680-82acec2a211e", "sighting_of_ref": "indicator--d6657c02-98b1-48b5-bdb0-79c8c5178f96", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b37589-8d73-4861-84c0-895a08e97121", "sighting_of_ref": "indicator--d6657c02-98b1-48b5-bdb0-79c8c5178f96", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde22446-67f4-4263-b435-0d72627ace36", "sighting_of_ref": "indicator--8e9c430d-0992-4f5d-8a27-ccc22d04181a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936bc7ff-5ff7-48b6-ade5-56492288779c", "sighting_of_ref": "indicator--a7a94a2c-5d4d-4c99-b6b3-3e116a4d44a9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4d96e3-f0dd-42ad-a9df-8757db1eb930", "sighting_of_ref": "indicator--a7a94a2c-5d4d-4c99-b6b3-3e116a4d44a9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77a20d8-f368-42bb-b3b4-b0b507f43f22", "sighting_of_ref": "indicator--5877e072-59f4-40c5-8432-68823fb43358", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8c4be2-147e-47f7-84a1-f0752eaf481a", "sighting_of_ref": "indicator--5877e072-59f4-40c5-8432-68823fb43358", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37af5e13-0597-4c8c-b2b1-6ba3e465024c", "sighting_of_ref": "indicator--a39bb2cb-7074-442e-8025-db7c94330500", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3001cd-1239-442d-a1b1-48fe5c1d2b39", "sighting_of_ref": "indicator--a39bb2cb-7074-442e-8025-db7c94330500", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70619a5-eccd-4212-b317-686a78cd25df", "sighting_of_ref": "indicator--bc4a918c-9391-4c73-9ae3-59d0e83ab464", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffff3367-5353-4d34-a826-e3c33cd4f82a", "sighting_of_ref": "indicator--bc4a918c-9391-4c73-9ae3-59d0e83ab464", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6f8681-a5e9-42f1-9467-dff156b38ae1", "sighting_of_ref": "indicator--7b6c4ac6-f352-4252-b4e2-44f2f2e7293a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258247c2-9ed9-4921-a2b4-e62ffa1f3dd7", "sighting_of_ref": "indicator--a0f23f92-6eb1-4e5f-9865-3bda8edac932", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbfc8d6-e0fc-4697-a992-eed16d9e5fcc", "sighting_of_ref": "indicator--39dbfe63-3f96-41ff-9a04-213ad8667350", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37893dae-c91f-459d-9c8f-22a85beadffe", "sighting_of_ref": "indicator--7cc8f48e-e983-4c4e-b28d-608451af8211", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79c4020-2ba1-4979-8b4a-c5c9b39f28b6", "sighting_of_ref": "indicator--7cc8f48e-e983-4c4e-b28d-608451af8211", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432fa50b-35df-4634-bee5-959ff365b832", "sighting_of_ref": "indicator--f3bbf38b-da5a-4871-a287-a972cfa63cda", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43b3f62-69d9-4fc2-a496-a796a57382af", "sighting_of_ref": "indicator--f3bbf38b-da5a-4871-a287-a972cfa63cda", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c0d886-0441-45d6-8c81-9ba3f9ed15da", "sighting_of_ref": "indicator--61c4ea1b-0ca2-413b-ae07-db157135d8cb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a165e839-d048-4b8e-813c-39426510c818", "sighting_of_ref": "indicator--61c4ea1b-0ca2-413b-ae07-db157135d8cb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f3df25-c33f-42b0-9b14-5a189f2857d1", "sighting_of_ref": "indicator--3be09f17-2ecc-4533-96a0-ca977cee88b0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396bdedb-47b6-4e66-8332-8243e523a11a", "sighting_of_ref": "indicator--3be09f17-2ecc-4533-96a0-ca977cee88b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65da7d77-cf2f-4a8f-8cf3-d6b0aff71880", "sighting_of_ref": "indicator--447223f6-8863-4407-907c-3b180a61f4cf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61582a63-d5bb-47d5-92c8-64a0bf871752", "sighting_of_ref": "indicator--447223f6-8863-4407-907c-3b180a61f4cf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6f0cf3-d783-4da1-a74c-5749c2eac92c", "sighting_of_ref": "indicator--ef535462-c25c-4a40-9db9-ac1877b3a6c4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92dffe14-251b-4159-a518-62fcfb77eb41", "sighting_of_ref": "indicator--f3cfe0c4-b767-469d-bf20-f7e803912d17", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deae0c18-61cf-4ddd-9379-42da2b3f1954", "sighting_of_ref": "indicator--dc9cb6e6-697b-4d7c-b872-0af72db60184", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ab4049-47e6-4548-948e-2366890e2375", "sighting_of_ref": "indicator--56658e04-c557-40e3-9200-4afb34e91c84", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bb7c56-0689-4756-9c5b-1f9f32d57207", "sighting_of_ref": "indicator--24df364e-484f-46b8-b2a0-3a0236887348", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f016b32-058f-4aa1-bb8f-d13de6700aa3", "sighting_of_ref": "indicator--95fec48c-ec10-4b80-b5e7-9210e28a1a4b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f758c94-7b0a-4720-a26f-a3a76b0dd0e9", "sighting_of_ref": "indicator--f50122ba-f4e0-450d-ac2f-f798fe6366f9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9567991-bd12-4f59-a771-78a37485abba", "sighting_of_ref": "indicator--75068aa6-fd14-45ff-b23b-ac9c43ca76a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d2a18f-a384-45bb-972b-8ecd0821dd16", "sighting_of_ref": "indicator--f63891bc-b07b-42d7-aca4-e196e404bad9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92aa7539-2344-4c77-a019-a0b0d67e4d68", "sighting_of_ref": "indicator--aa48c679-9418-4d97-8d2d-80f4928abe38", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44540b93-db06-4ba2-b81a-c0a6624ed4ef", "sighting_of_ref": "indicator--679a1026-80f6-4f2e-8bfc-54857f52d44c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44449117-b21c-4c76-8d38-280408ab8c10", "sighting_of_ref": "indicator--f4ce1a2c-be21-4525-91ae-687031e41dbb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12c1bb0-ab75-46d0-8879-02e28d586d90", "sighting_of_ref": "indicator--5f624c89-5829-46fb-b6c1-5b6d3e426742", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da944fea-8569-4423-a1c6-434801868f5b", "sighting_of_ref": "indicator--d8f871ce-befb-4df3-877c-dd74815e1e46", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb8e4b5-b51e-44c7-a481-3da7f156a850", "sighting_of_ref": "indicator--12eb750e-7cb0-4f91-80a2-926739cc58e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21706920-12f4-4bbc-a152-c71672f3f864", "sighting_of_ref": "indicator--923f00c5-f171-4d2b-90eb-570c1f1d7cff", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553352e9-7b6a-47d6-a474-3322c9df7a0a", "sighting_of_ref": "indicator--d9ff62c4-410e-412c-9ae8-ba9a1c036de5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554eab67-cf92-49fd-93cf-33ded80be4d9", "sighting_of_ref": "indicator--7c5647e9-a3bb-439b-b1dd-f0c029cef9a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9972c967-81b2-480c-8921-8fb5737f5562", "sighting_of_ref": "indicator--6aa7957f-37a9-48f0-bc9e-242675286e6c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a925a6-6aca-4522-9136-b10031a2f80f", "sighting_of_ref": "indicator--dd14fdae-e7ec-49b4-aa17-a8d2ffdf1160", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14c738a-4bd8-4010-a8cf-ab81a9a7ec64", "sighting_of_ref": "indicator--3f7977c6-a2a5-4f41-a059-c5be09d538fe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77924020-bf6f-4daa-a247-d96e507dcd2d", "sighting_of_ref": "indicator--3f7977c6-a2a5-4f41-a059-c5be09d538fe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9fd212-700f-425b-9ef9-7631bef307ba", "sighting_of_ref": "indicator--b5da27cd-307d-4800-b9f5-d2670f88c700", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0561eb14-7015-47dd-acc2-210963e7525b", "sighting_of_ref": "indicator--b5da27cd-307d-4800-b9f5-d2670f88c700", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b5716e-c520-4cc3-8224-53ea82e6a828", "sighting_of_ref": "indicator--3f96e3dc-bb2e-43bb-9089-e758d67873d2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cba0b5-44f0-4c5d-81b6-ef3536037a97", "sighting_of_ref": "indicator--3f96e3dc-bb2e-43bb-9089-e758d67873d2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4323ce-6c4e-4977-8655-5d4b6672030b", "sighting_of_ref": "indicator--844e04cd-528c-43bc-8e5b-f230db786908", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18620d5a-b8cb-46c3-84c8-2b9a844f7ac0", "sighting_of_ref": "indicator--11248893-56e1-4140-8251-d4b7cbc18b83", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84f4551-6527-4e33-8365-8d1969a4e85e", "sighting_of_ref": "indicator--db132fd1-12a4-4156-9acb-70807066df8c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9263ab32-0cd3-4b6e-8094-749ecc10c201", "sighting_of_ref": "indicator--db132fd1-12a4-4156-9acb-70807066df8c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b32fec7-70b7-4533-8c5d-da374c1a468a", "sighting_of_ref": "indicator--f2d07446-def9-4492-92cb-72c3044f944c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b5e102-6594-47a8-857e-910bc8bd8c77", "sighting_of_ref": "indicator--d96c88eb-2804-4287-b8ed-e82d5e419ca2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be399189-e55e-436d-959c-77ecdf639493", "sighting_of_ref": "indicator--3afee9d1-3f57-4554-afcb-8aa04a149956", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1b7897-9cbb-4f35-a283-9599a9f08c62", "sighting_of_ref": "indicator--60eec486-8b29-4b0f-b226-1d2363022bd4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d47d258-dad2-4814-8217-05af2422d91c", "sighting_of_ref": "indicator--8fe80002-c32b-428d-baac-a4f6da334a85", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babd8df3-665c-4bf5-91b7-c1e35107bc84", "sighting_of_ref": "indicator--3e70d3f0-c68a-48b5-861c-a20200a91b9b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b2f2d1-81c1-49ac-82c7-e99bc75c844f", "sighting_of_ref": "indicator--4abd7ee4-7c6a-47ee-9b3e-7039ad57a16b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0351968-cc6b-444d-8a07-2e052a3aa952", "sighting_of_ref": "indicator--da71efb8-9593-403b-9cc2-fbe40f6a5192", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85908920-a9c4-4f4b-b14c-54134c7b413a", "sighting_of_ref": "indicator--3bf6d34d-5d59-425e-94a3-3f28b6cc11fc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0834e433-b0ad-41f4-8cdb-efa2367ebeed", "sighting_of_ref": "indicator--dd0d2163-a5d2-4266-afa6-357860a3c5bd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036676d8-02c1-4efc-b282-5547e31837b0", "sighting_of_ref": "indicator--d9471c5e-095f-44b1-92f8-63ce5f2510ef", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f23376-ea17-4496-bfb1-bb78d70a740d", "sighting_of_ref": "indicator--1b9ffbbc-7eeb-47d8-a238-9a4784a19b51", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b35154-2cd3-4460-8c98-a4f2ee3252f1", "sighting_of_ref": "indicator--56cdbe66-af2e-4a5b-944f-75f9fcb6caf3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d6ff7a-f257-42e5-9932-8063431fe63a", "sighting_of_ref": "indicator--56cdbe66-af2e-4a5b-944f-75f9fcb6caf3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6100baa0-cfd5-4c47-bfe4-2f4c133e1b1b", "sighting_of_ref": "indicator--c1f1f796-150b-4019-a93d-6a55826191d8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da8848a-3298-4c97-b114-e7e39430ce95", "sighting_of_ref": "indicator--c1f1f796-150b-4019-a93d-6a55826191d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d36df6b-7e77-43e4-94c5-a0cbd9a72091", "sighting_of_ref": "indicator--54a4ccb2-9882-440d-a38b-475e84baa746", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44655a2c-25a1-4446-85aa-50153952b221", "sighting_of_ref": "indicator--6dd0e6af-08f9-44ad-b03d-b3348ea8c10d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccd3aa5-4342-4154-b9ce-154d1d494716", "sighting_of_ref": "indicator--18c3a9da-86a3-4d91-bb9f-1fdfb6cb5155", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5593f2df-0fbe-422e-b15d-f5e6d0da421b", "sighting_of_ref": "indicator--18c3a9da-86a3-4d91-bb9f-1fdfb6cb5155", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02549184-657c-407d-b072-6c95579b633a", "sighting_of_ref": "indicator--e9df5358-9833-4941-b0cc-aec92943ed71", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f081e2d-de71-456f-94ef-8953cb42708e", "sighting_of_ref": "indicator--614c905a-6823-4738-9e74-952fbca4eaae", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9b6b3d-7c57-4d37-8dc7-f7fcfb473513", "sighting_of_ref": "indicator--614c905a-6823-4738-9e74-952fbca4eaae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c530e39d-d2a1-496f-aeee-4862da2944d3", "sighting_of_ref": "indicator--ebd30fbb-fb6c-4f34-82b1-c093ad22101c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019299c6-d453-4b0d-b5be-03bdcfeb909b", "sighting_of_ref": "indicator--0fbd6ad5-89b7-47af-ad4c-8d453b1e05a8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d58bc7-29a5-43c0-84cf-baeb347e7bc9", "sighting_of_ref": "indicator--e6922ee8-8021-4849-8fff-3c1cfe5f4a53", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31677841-a501-4a1b-b13b-01c748481041", "sighting_of_ref": "indicator--8b156822-1bd9-48e1-806e-6851eb62a017", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591f54d0-7bf5-4405-82a6-da8dc75b711d", "sighting_of_ref": "indicator--8b156822-1bd9-48e1-806e-6851eb62a017", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff79c26f-7bfe-4153-a536-db164e7134db", "sighting_of_ref": "indicator--b0488c49-d22d-474f-a792-c64ef5920887", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7047ff4-c767-43cb-90b1-44278fc171e0", "sighting_of_ref": "indicator--b0488c49-d22d-474f-a792-c64ef5920887", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2329c64-0b68-45ed-b05c-caab85171954", "sighting_of_ref": "indicator--ae4c005e-2f4b-4b17-9376-d0f75f682b3f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575e5755-f614-4798-bb90-9530cd04ea86", "sighting_of_ref": "indicator--ae4c005e-2f4b-4b17-9376-d0f75f682b3f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcebfa72-6a74-4298-a170-94a67c0af18c", "sighting_of_ref": "indicator--06f45192-9660-4ec1-a015-9c30d560addf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60aae0fd-6484-4b46-829b-72127e7dd251", "sighting_of_ref": "indicator--cc42c35d-6535-42d4-a4c4-692c0319d21f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf6cc2a-4b7c-490e-bb47-01b058d4cf29", "sighting_of_ref": "indicator--cc42c35d-6535-42d4-a4c4-692c0319d21f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69711b92-356b-429e-ae6b-243e0ce45efd", "sighting_of_ref": "indicator--a56bc13e-f418-43c7-bafd-daa25a9027cc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93675b03-3fa7-4dac-bd89-5c38a19d6fb8", "sighting_of_ref": "indicator--a56bc13e-f418-43c7-bafd-daa25a9027cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf2481b-ee18-436f-9db2-5876ca8b7eb1", "sighting_of_ref": "indicator--6638c387-e708-422d-9ace-4490daf839fd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5d8afe-95f2-4bdb-9473-d04cb20a6624", "sighting_of_ref": "indicator--6638c387-e708-422d-9ace-4490daf839fd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c6237b-6233-46e6-9fef-05a3eae11024", "sighting_of_ref": "indicator--8dfe17de-ad8b-4d34-b3f2-542cf6892561", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3d71fb-2b78-4ef8-a854-0c0f85146117", "sighting_of_ref": "indicator--a935b50b-2653-4647-8e89-4b5901ab8e58", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40dc1cf9-e8f2-4f1b-8afa-097ade4584a8", "sighting_of_ref": "indicator--7fa0581f-e042-4724-8a30-923b641f412f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7600ce9a-81f5-45be-9089-6cdc0b251e62", "sighting_of_ref": "indicator--512760e6-d56e-4a3c-9cfb-0a2d0ff46608", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51cff88-fea0-40db-8dfd-59fa1efbbc9e", "sighting_of_ref": "indicator--fc7b4ff9-25c1-47ef-a47c-ea1bdd7f2382", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e34b5c-a83e-4aef-accd-6d31eb45595c", "sighting_of_ref": "indicator--3c7633a8-e8ab-4b76-b43a-0aa143a39603", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85533d4f-b751-47e3-bc66-46d0e44cbe9a", "sighting_of_ref": "indicator--e54fde9c-7feb-4be9-94ff-135d64450b4e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc2b2aa-4999-4029-8728-6a1e725ea378", "sighting_of_ref": "indicator--73bbf8c7-21ea-4224-a8d4-91a5a5b4b310", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f5e67a-0171-4cf9-935c-8ae7a2ac78c4", "sighting_of_ref": "indicator--ebf83d1d-22b2-408b-883f-1e5b9ee643af", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a9c127-7f57-4835-a72b-9454b04b4cb3", "sighting_of_ref": "indicator--bcb7e99e-0329-48e7-ab17-ccdd49e781fe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50bc735-280e-4a10-8865-4827f8b75563", "sighting_of_ref": "indicator--3ad999ee-e1b9-424e-a4e1-90ffef844f55", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951ceee0-1cb2-43d7-92d5-d42cb6635481", "sighting_of_ref": "indicator--2e00e9db-5d53-4fb5-a97d-5ee67e82ef49", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a0b8ae-225c-4479-ba82-c26f2a310c74", "sighting_of_ref": "indicator--8169d6f6-620d-4c14-93d7-34567a3000d5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d513874c-e154-4543-862c-82dc0c831e17", "sighting_of_ref": "indicator--e2993911-efa8-4b75-9096-93881def7979", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e5af3f-2760-41f3-84b0-7c5f37534f55", "sighting_of_ref": "indicator--b1dd0db7-eb82-459d-9f17-b02029a3c390", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135e3b6c-3f08-4c55-84f6-4161b716f74d", "sighting_of_ref": "indicator--17188a54-3846-4dfa-8630-40130ec3ca43", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6089517e-b944-4e84-899d-0b6f932fc7f4", "sighting_of_ref": "indicator--5581059d-0205-4cf2-89e7-f65782ffd748", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42e829f-5e3a-4910-8b64-d060df08114f", "sighting_of_ref": "indicator--59792b9d-1a4b-49d6-bed5-eb30206d538f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67cd727-b7e1-48d2-9460-ec406d4a4ebb", "sighting_of_ref": "indicator--6e613ca0-170e-4328-9e52-07cf7fac97cd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4257f317-dfaf-4132-9dc9-8dd2d78ecd31", "sighting_of_ref": "indicator--6d330cf1-b958-4f4a-9fdc-ac2f0c8d43d7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42f59ce-62f5-43ce-9bf4-500a3a0221b8", "sighting_of_ref": "indicator--cb2d109c-285c-401f-8ad2-23cdd59d1dce", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16884a0-151b-48bd-b520-6d78de3d0b2f", "sighting_of_ref": "indicator--25d815ed-f980-471b-83f8-186a953488e4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113b95a7-9f5d-4f53-a7ab-865d3f3c765f", "sighting_of_ref": "indicator--a61f1e1a-c47e-420c-9bfb-ac50f4b04ff6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f09abbb-6f8d-4e53-82fc-455acbf5f7dc", "sighting_of_ref": "indicator--e12c0327-59e9-4cb6-861d-7f0d43d1fbe8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dae6bc1-ae19-4692-9e72-93bbccef1a67", "sighting_of_ref": "indicator--a8f3aeab-b352-4de6-95f7-f2ff432258c4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67b5568-318e-46a6-96e4-6653ac1865cb", "sighting_of_ref": "indicator--9ee06537-d8f1-44ed-b487-1dc3ab7a8465", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b40b3f1-5f73-4f14-9781-862174c5d997", "sighting_of_ref": "indicator--67255786-f7ef-4734-ada4-9d9f517d507d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e49d21b-8f6f-4929-a06c-16eeec6d092e", "sighting_of_ref": "indicator--1298d259-eac6-4c83-b0d2-b6809afc0d53", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40052636-13fd-4c4d-bc28-acecbdfacee0", "sighting_of_ref": "indicator--16fbe207-52c2-402b-91ce-fb3c68c57be7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340f385a-0bba-47f9-9613-3254a1eec865", "sighting_of_ref": "indicator--e0a4dd48-6100-40fb-bd7c-da2d25ebcecc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68235648-bf2c-4212-a04f-bfa422dda9bd", "sighting_of_ref": "indicator--2c9adc70-95ea-4fe8-a827-57c17f16a880", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d309fbdf-075f-4836-a0ff-ad40993d9e98", "sighting_of_ref": "indicator--bd55a1b8-afff-44f9-bd1d-9d4123bb102f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2798a98f-ba43-4a45-871f-0e68629c0f79", "sighting_of_ref": "indicator--8ca34209-05be-4f72-a588-31e18b0fa6bf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcabcf64-56d8-49bd-bcab-5b6942f2a2f1", "sighting_of_ref": "indicator--ea4df71e-31f3-45b5-8146-e88975ef0d0e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c254cc-e3d7-44f1-9f6f-5010f5f6e6f7", "sighting_of_ref": "indicator--045d7d6f-4b1d-4d33-8078-01c6b81be8b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71440a39-7476-4853-a77e-dd9ec4fb65f9", "sighting_of_ref": "indicator--8524dbdc-acae-4276-86c8-fa7c00ba4f31", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0383a6-89d9-4a97-bfc5-05e57e10239a", "sighting_of_ref": "indicator--8d509174-73ab-4be7-8d16-2df76dc38ce4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25827f95-57ac-431c-a868-c3688a14299e", "sighting_of_ref": "indicator--cab678ba-7aa9-4ba2-9b3c-f21e6428e46a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455788dd-4977-4fc4-812e-40543d1e8352", "sighting_of_ref": "indicator--52caf118-3434-4ab2-8c5c-79dcc3d2cee5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4caef2-d5bd-4814-85a8-ca26f151a5f6", "sighting_of_ref": "indicator--b948d396-9e32-48d9-a155-bfa5022f8601", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e664376-c4e0-4cf0-80af-86489c0b2158", "sighting_of_ref": "indicator--24d67939-f583-4fbb-8afd-43b857d1b28d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de984d4-52fb-495c-91f4-9dac45be8389", "sighting_of_ref": "indicator--53fdef51-ac0a-48cb-8cfb-6add2367ed94", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9317b9bb-7340-4ab4-a573-54ee66b59657", "sighting_of_ref": "indicator--b3a08b0e-eef3-49f3-a8b0-6a03e837bcf0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e71137-2c8e-458b-aecd-e6b07960a856", "sighting_of_ref": "indicator--39e8c18a-b6e0-4c86-89e2-5c19cb43f907", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8fb275-aa69-4f83-8c03-6eba6f6074fe", "sighting_of_ref": "indicator--1ae2f1b8-1cfd-4c83-9656-6dfa5977bee4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a8f2b3-35f2-4813-acbc-71598e5f885d", "sighting_of_ref": "indicator--285d7507-d95c-4997-a00b-c1d51c50e966", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8721b4e6-e304-42d3-808f-79cf65b0ae6d", "sighting_of_ref": "indicator--1148e49c-3adc-43f6-8bcc-e68e1deb9c5d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c13d507-7962-4721-ac7f-14d3b4017ef5", "sighting_of_ref": "indicator--b0bc660d-55c2-4281-8bd0-a6b48b7a96bc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcec3b0-3282-472c-b45c-36b48b80c4cc", "sighting_of_ref": "indicator--151b1b62-91aa-4ca1-9495-1da96835c643", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd60d66-8e1d-47e8-b895-3c4f847de1b9", "sighting_of_ref": "indicator--ff7d9ee5-5ab5-4b07-8c96-d55390fd83ef", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252677a6-941b-424d-9ced-5d463bb0e69d", "sighting_of_ref": "indicator--8ed80431-d2cf-420f-bfa2-62976182e842", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72559006-5837-45a5-a3b1-319bc214a8a5", "sighting_of_ref": "indicator--64a601f9-c93f-4a17-83b5-92b61a4e14cb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c497750-5338-4c73-92a6-02293d547d3d", "sighting_of_ref": "indicator--7c1999b0-3288-41b4-a0b2-8d8c7338e80f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05135967-024c-4c8b-8d62-3d1e1b7d634b", "sighting_of_ref": "indicator--c73f933f-02c4-4102-81f6-cfd255794b46", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1b87cc-0be5-47b9-be11-20fa912bc5bc", "sighting_of_ref": "indicator--333139b8-9a95-4ca8-8f91-417896c50a84", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef90188-c4a8-4c69-a9f8-efcd2de06e03", "sighting_of_ref": "indicator--871c6611-b2c9-4bac-8c51-99d2fbb979b5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe893604-7f80-4ed5-b2f8-412298d4aebe", "sighting_of_ref": "indicator--096c8bec-22ee-46a8-86e7-4db5edac2d27", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1783298e-7bf2-4442-b0a1-250bd992abf2", "sighting_of_ref": "indicator--9a9ec345-88f3-4140-baf9-0b8d4b77387e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ceecbaf-3595-4127-a564-3493903d7aa2", "sighting_of_ref": "indicator--6c57281c-d94b-4043-94e5-28b1e836c29a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b9e64f-4baf-4534-923b-4887895ef53b", "sighting_of_ref": "indicator--e780a3ad-6a8e-49af-88af-371fd07f2a93", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce7a806-04ae-4ba6-a763-9321900396db", "sighting_of_ref": "indicator--5d66a909-f780-49ae-ad08-26239cb9f669", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa280493-d44d-457e-af15-c9503ea38168", "sighting_of_ref": "indicator--4f3b031d-8cef-4dbb-a33d-53316ba8342b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf4ab6f-d1e7-496e-996d-ae245f7886b6", "sighting_of_ref": "indicator--f50d8186-4bfa-45e6-896d-34bf85b9bdb0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c331d34-b1d0-40be-80f8-4cdb8c54db7e", "sighting_of_ref": "indicator--c98ddf16-d01d-43dc-8550-d5f92a81f264", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38137560-6e0f-4492-b98c-b53d0f177aba", "sighting_of_ref": "indicator--820f3c47-293d-4967-9ee4-c0732ff0342f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2df9281-3200-4ec3-a7ae-612d5d162f2b", "sighting_of_ref": "indicator--4791b9dc-cc24-4bb1-bb39-ff31d55ab00c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4ee918-64d0-4a76-8af5-7b0dddfa8158", "sighting_of_ref": "indicator--af534dbf-9be7-443e-b76a-5d618dbcde7c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1912b7e5-52e7-46fa-b8b5-612f3d87b89e", "sighting_of_ref": "indicator--8d52a40a-ac4a-40d5-bf11-a6456cd227f0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5f3c90-cb22-43ef-b763-9ec026d5cb29", "sighting_of_ref": "indicator--9f77c6b9-74f5-4eee-ae3c-46dde02ce421", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efed9d6-1b03-42b2-b9dc-6d67ab38c6b8", "sighting_of_ref": "indicator--ca2b71e4-3dc4-4b56-9659-79ea19a80360", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf656556-07eb-4f0b-b3ef-5b3452d7e71a", "sighting_of_ref": "indicator--3eaffd4e-0e72-413c-9e4f-1e128a3a6066", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a5ea0b-14b2-404b-82b7-7e4050208300", "sighting_of_ref": "indicator--dbf7fb55-345f-4a3a-a04f-90285356cfbf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3e4d6a-7ec2-42e5-b13b-12a5f28e3a86", "sighting_of_ref": "indicator--85f1944d-7e01-4bb9-be9c-28e1d10faee9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed335485-0ed2-4725-92bd-d1076b10e2a2", "sighting_of_ref": "indicator--669d2190-dacb-479f-a4c6-9b7325d06d3a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428d9880-2c3d-461b-bc0a-0f983059f381", "sighting_of_ref": "indicator--f982a35b-cca1-4be0-900c-cc7cd9c4f6bd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58062d2d-8a31-4aba-a615-b391b9f02d82", "sighting_of_ref": "indicator--c5cf97c4-8851-4e53-8e95-8f3f36c0f6d8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c3d8a6-d00d-4ebe-ac86-0781e0890be8", "sighting_of_ref": "indicator--c96c17d1-2b81-40ed-94bf-cdef79660570", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e539b8-70f8-4a44-ade9-8e28bb5f4da3", "sighting_of_ref": "indicator--da084ce3-eae1-4615-bd57-ca120a5a32d7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d54180d-37ed-4719-8f55-58170925e2f3", "sighting_of_ref": "indicator--da433d48-8335-453b-89fc-ec6a3a022223", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6c77e6-59f4-45dd-a904-8b2d0d19666a", "sighting_of_ref": "indicator--4614fd66-4e8c-45bf-8134-819f4203633e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cc7e9d-d16c-42bc-a0fd-0710f69787cd", "sighting_of_ref": "indicator--b30737f3-218a-4adf-9fec-1dbe5b932a4f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3216d843-8533-449b-a04d-4145c90c187a", "sighting_of_ref": "indicator--67c3112c-8e9a-48e3-8416-b6d2d95172ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d99ece-28f1-46eb-aafb-1496667ce9c1", "sighting_of_ref": "indicator--cbe3b928-395d-4e46-80ca-4964c59ceed3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d6e16c-9257-4073-ade7-9436f43952d9", "sighting_of_ref": "indicator--fe65b9a4-233c-4cc5-8c5c-cdb1fdbfbab6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc1e059-5d5c-4735-aff5-715e4738d58c", "sighting_of_ref": "indicator--ab447307-c470-4d13-b6fc-c4fa2c333f16", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcacfb8-37aa-47d8-b9a8-bbf2831227f2", "sighting_of_ref": "indicator--ab447307-c470-4d13-b6fc-c4fa2c333f16", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4e6129-3958-4a81-8211-3b22b54734b0", "sighting_of_ref": "indicator--19421721-db77-406e-b8f3-d4f8209ed824", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98feadb0-ca39-4c8d-b0e2-1499ddc370cc", "sighting_of_ref": "indicator--19421721-db77-406e-b8f3-d4f8209ed824", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841d2796-53f7-4a88-b14e-7ff0c812b0a1", "sighting_of_ref": "indicator--617d46aa-1298-45e3-8d00-9ddc50ee2106", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758a1b02-2228-482e-9ad9-51aa71028612", "sighting_of_ref": "indicator--617d46aa-1298-45e3-8d00-9ddc50ee2106", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2049cd19-2036-452b-8593-012b0ab82184", "sighting_of_ref": "indicator--0ec21465-9793-4cec-a663-b04a68efa58f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e9c862-e166-4225-870a-4c704c542c2c", "sighting_of_ref": "indicator--0ec21465-9793-4cec-a663-b04a68efa58f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1623f7ca-7870-40de-aff4-ae8612fe537f", "sighting_of_ref": "indicator--663041ce-d76d-4511-8387-e71ee97b5d80", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0981fb93-cb10-4bb3-bd7f-861e6c7ff1d9", "sighting_of_ref": "indicator--663041ce-d76d-4511-8387-e71ee97b5d80", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b7b87f-7574-47c6-893f-33cb08df86bb", "sighting_of_ref": "indicator--8255b0e1-6732-4b76-95b0-12bc690c94ee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8493fd-eb51-4c00-be1f-1f4d199314ac", "sighting_of_ref": "indicator--88428958-394c-4755-b60d-eb16f58504d9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d87337-fd9d-455b-8956-3c70568e2ab9", "sighting_of_ref": "indicator--24bdca99-6838-4114-b7a2-b1ea28589fc0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dce9e50-7ac6-45c1-ab0d-558b8416a2e0", "sighting_of_ref": "indicator--1d0c04e6-988d-490e-811d-ce998dd4f7f2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0eeefe-0b6e-447a-933b-a90d87733804", "sighting_of_ref": "indicator--f6d47fcb-47cb-41d0-bd06-1dc52b06a79d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f10144-a695-4979-9bf8-7ab98041670e", "sighting_of_ref": "indicator--62156cf7-f224-479f-b466-ad3cfa93dbee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2d07f2-7158-4e14-af0b-370338bc3718", "sighting_of_ref": "indicator--0a7287eb-5902-4544-bceb-d6757e0e9189", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabb8030-4569-4198-8ea3-90807fc57837", "sighting_of_ref": "indicator--135f2f3d-9a2e-42cc-bf08-54df97cfaf73", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8b996c-3e57-4163-8009-3991161ac2b5", "sighting_of_ref": "indicator--801184c0-4ea7-4951-a98c-87e7df263863", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea835d66-9b64-4ed8-aa93-ebfccda9ecce", "sighting_of_ref": "indicator--160ccd7a-1282-4133-a9b6-7144830c3d88", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd40ce83-0a35-49f5-84b9-430cd6988797", "sighting_of_ref": "indicator--9b98d368-3509-459f-bb26-ebfc8ab562c8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da054033-0eb0-433b-827a-fd88c4c5082c", "sighting_of_ref": "indicator--a478ce17-5067-4631-bbbc-86cc0d15a421", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f86e5c-26ab-4c80-a444-f071fb507a2e", "sighting_of_ref": "indicator--d3002244-7f4e-4e7b-a677-41a03f60e7e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce71a6d-4e0c-4032-9a1e-f261718cf20d", "sighting_of_ref": "indicator--09ec9065-3317-437d-b4df-cb53e711f7dc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2dbef89-3a8d-405f-8d4b-f17b39bbd808", "sighting_of_ref": "indicator--d7654fec-7b55-43e4-9f43-c7d939d39713", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968f81f9-1db8-4f17-9704-9a18838859e1", "sighting_of_ref": "indicator--18f10936-bfcf-4fd8-b56a-55ee3de0137a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649c9398-6d84-423d-918e-5caec1639e1e", "sighting_of_ref": "indicator--0fd0fca3-854f-488e-a351-30170ed206a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b014a0-d254-45d0-9de8-a7b05eac8543", "sighting_of_ref": "indicator--76b9467d-738c-4973-bce3-0eacc8cbc189", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd42246-6299-4b82-bfdc-04af25375b6a", "sighting_of_ref": "indicator--f83556e8-16d3-482f-be42-043d3853fd35", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7784b0-6bde-451b-ae79-bcbef82146e4", "sighting_of_ref": "indicator--f83556e8-16d3-482f-be42-043d3853fd35", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1529d7de-73b1-4906-86e4-5ca646cef4f5", "sighting_of_ref": "indicator--0f975d58-c0a5-4b71-96e3-27a276abc53b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cf7dc3-1b49-45af-a05d-9e0e38d370ba", "sighting_of_ref": "indicator--405021bb-087b-4700-9dc0-92e085aa78b9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bb0120-8fdd-4b90-a02b-0811123e0474", "sighting_of_ref": "indicator--405021bb-087b-4700-9dc0-92e085aa78b9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec451225-34f4-41ed-9149-ff19049a2ae8", "sighting_of_ref": "indicator--b7203f3b-7b52-41e6-bb23-3765aaf0e23a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83c535a-dfba-43c3-8529-fa8f3ba2d9a7", "sighting_of_ref": "indicator--9e1f6a93-1e27-4e4c-8a79-e2058a44c105", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f9ebcd-e231-4d0f-bd00-6aeb460074e0", "sighting_of_ref": "indicator--b687d10c-765c-4a39-93bd-4cde8588b0de", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8a9a1e-678f-410a-8464-2d4b34b98e2e", "sighting_of_ref": "indicator--003594d8-ed4e-4afe-bf51-1fe64ec6ce6a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e43b694-c25c-44c2-afb8-d13a5f69c7cd", "sighting_of_ref": "indicator--8c340ab9-b1ce-4680-a54a-91391042a832", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9952465e-950d-42e1-ae48-5ef84b3b67ac", "sighting_of_ref": "indicator--ec4375b4-df9b-4807-8dfb-4db55408d235", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b064051-af0b-492a-b9c0-ada773278eb3", "sighting_of_ref": "indicator--751a4d4b-7c40-4e15-9fb3-6a5ca6bd9692", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee8982a-20b2-49c0-9045-8abf183704e2", "sighting_of_ref": "indicator--115ac065-b404-47cb-ab66-5037ad7d9a78", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965dd24a-afde-49dc-8ead-ddf1198cf59c", "sighting_of_ref": "indicator--e3d65a09-9edc-4b28-a06e-cca71bc1d113", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d38bdce-7946-45a7-a7a7-bb439a55182d", "sighting_of_ref": "indicator--e3d65a09-9edc-4b28-a06e-cca71bc1d113", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887e5a28-5a3b-485c-a0c4-39fb9c73b9c4", "sighting_of_ref": "indicator--fa066b59-6ebe-4905-b06c-6c1e68fdf524", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae80104-da87-470d-9af2-0f8606c940fd", "sighting_of_ref": "indicator--6d8cf292-9ba8-48d6-9cc6-22bbdad129a0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db051d5-f404-446a-8936-9830c5b4fef4", "sighting_of_ref": "indicator--15c20151-be2b-4499-a586-8b7b15ae1c0f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd2f338-9720-403f-97cd-d6329fe20b18", "sighting_of_ref": "indicator--3b536eeb-8d5b-4f25-b28a-0bbda22320c9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5d5be6-d7b3-4244-a150-21f7acbbaa40", "sighting_of_ref": "indicator--1a71922d-f32f-4fd1-bb29-67a071fc9103", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bd50d6-7e10-444d-a5d7-be9b16c65e91", "sighting_of_ref": "indicator--e617fad6-2f63-4434-b27a-385d41e4ff5f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36a606e-b076-468a-bd4c-41329bebc157", "sighting_of_ref": "indicator--6f7c18cc-2023-4b4a-8957-a3adc84733fd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19be1b33-090a-49bb-8ad6-e6ac9e1542fa", "sighting_of_ref": "indicator--797fe5ce-a499-4eac-abbf-1a136ceb3fbe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68670aa6-6306-4ff0-9a16-f69689931fdf", "sighting_of_ref": "indicator--f8d7dd49-af5d-42d8-ab57-22ea111b92c6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752f9788-5bf4-414d-87a8-4f511b3d56f7", "sighting_of_ref": "indicator--603134be-c1c6-41b8-99d5-7ce07ce8122b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b5bc83-803f-4fa2-a22a-f486e3aa19b9", "sighting_of_ref": "indicator--4b8c60ef-4776-49ed-b3b1-61e6a7ec27ba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bde92a-6e7e-48b6-87a8-17db584eb8b8", "sighting_of_ref": "indicator--e2a82d91-331f-4463-afe1-8f76b15c6ab8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb499501-bf63-4fed-849f-a6fbc95f5440", "sighting_of_ref": "indicator--e2a82d91-331f-4463-afe1-8f76b15c6ab8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e71572-86e0-4360-9f99-f76e2bf72c67", "sighting_of_ref": "indicator--65612b1c-10e0-4e1e-82b7-883289e68d71", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b94aaf-63cd-484e-9e14-5e10c36186c4", "sighting_of_ref": "indicator--3946beab-6222-4d4d-ab4d-8faa84142734", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f351340f-6b5a-4d2e-80e1-53af0b025139", "sighting_of_ref": "indicator--edb29dcb-be9d-4de2-a3ee-743ceec1d1a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2304b493-fdbb-4929-b127-38d3690133a7", "sighting_of_ref": "indicator--9510b222-23b0-40c5-ab40-d839dbafb1d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e705850-1afb-40c9-a568-9017e3e11ba7", "sighting_of_ref": "indicator--74d87bb6-dd76-4b64-b67d-acf6daae86a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8588d750-bd4f-4b79-bfaa-b0f6b739e70a", "sighting_of_ref": "indicator--ce89a79d-b1e0-4851-b317-a8028ad16984", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232af4c4-6a99-4ab4-8569-4147f5df19d3", "sighting_of_ref": "indicator--8b66ad60-2cd9-4582-bb54-7c469642324d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5968e0-1d9a-419f-a015-b37af8f520a9", "sighting_of_ref": "indicator--96326bfc-a0fc-470a-8f0b-f961c0735221", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b07915-b447-4faf-9c49-86293bb42271", "sighting_of_ref": "indicator--b46403f8-20dd-485c-be1c-8b1cd4f4b2bc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf30799-f4ec-4f38-8c14-64221b8d3aec", "sighting_of_ref": "indicator--c95ba7a2-b7cb-4a8c-a6c6-3d7933ea12ed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cc5ad1-f541-40c2-bf19-7f794831e4a3", "sighting_of_ref": "indicator--e8bd92e5-38a0-4924-aebc-d713e4e5715a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ef2cda-1198-49d2-bfdd-26acdcd322dc", "sighting_of_ref": "indicator--32dc8e5f-9145-4e1a-a6d2-fefb72e693d5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7af1ff-fb92-467e-a52c-39e0b7fd9ff7", "sighting_of_ref": "indicator--32dc8e5f-9145-4e1a-a6d2-fefb72e693d5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f0e6c5-6093-4f6e-909e-787de739cb0a", "sighting_of_ref": "indicator--ee8ade81-0e0d-4c94-bd13-a3186fd306a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e507e4c-1d88-4b49-9587-4462c8a08273", "sighting_of_ref": "indicator--49daa4ea-1571-4ed4-b2b7-7cc28c8bdb0d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8728215-7fa6-4219-9302-43f0f58c6edc", "sighting_of_ref": "indicator--49daa4ea-1571-4ed4-b2b7-7cc28c8bdb0d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12964045-f22e-456d-9518-ffd894067407", "sighting_of_ref": "indicator--9a6c20c6-2fa7-4932-b240-fb7bc5e69b40", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866e2fbb-102e-41ef-b0a5-55898875f437", "sighting_of_ref": "indicator--3c3e1f87-ac91-4c85-879d-4107b4d4edd2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8e0ae2-6834-447e-95fa-13e5aa515d70", "sighting_of_ref": "indicator--3c3e1f87-ac91-4c85-879d-4107b4d4edd2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abec567b-ccfe-47c5-a441-78975ade46e7", "sighting_of_ref": "indicator--838baa4a-73a1-400c-afd2-0db485ee6ca5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f352eeca-84c4-4492-9027-580ee15f30f5", "sighting_of_ref": "indicator--838baa4a-73a1-400c-afd2-0db485ee6ca5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c135a0-2f86-4bdd-a4cb-6947777fea8f", "sighting_of_ref": "indicator--e04d2f86-39f2-445d-8b2f-8be25ea11c9f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e1aa0a-142a-4da2-bb32-a655b89e3ea1", "sighting_of_ref": "indicator--e04d2f86-39f2-445d-8b2f-8be25ea11c9f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57b81d1-b7b8-4a2b-b093-ed12f794f02f", "sighting_of_ref": "indicator--c3e463cf-ed6a-464e-b881-ab3510c7f095", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e540712-1344-4db7-a2a2-07adb51f96a3", "sighting_of_ref": "indicator--b125bdff-e1b8-44e1-8507-09e23659b783", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cee50d-3950-4905-a2a3-b12881b2a927", "sighting_of_ref": "indicator--d5a4201b-84b8-4550-8674-3329ab4f33d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44334c9f-ee76-4a2c-a1a8-f4602a554aaa", "sighting_of_ref": "indicator--9be9092a-06df-460b-9436-534dca636ed5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d639f787-4a01-4eca-ac80-c8d7bfaf612c", "sighting_of_ref": "indicator--0705afc5-6b59-4698-9695-d1d0d53c1ad6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80158565-ade7-45c9-90ea-98a794cf4bab", "sighting_of_ref": "indicator--ee8b2d8e-a0a9-44a4-9a49-5246da281ba7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5edff5-4326-439a-8394-1b0b5e9daeb1", "sighting_of_ref": "indicator--5781bdbb-3549-4c73-9be8-7bab6349f4b9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee2e612-2783-4517-8613-7315c203cae0", "sighting_of_ref": "indicator--dcbceca7-74af-44e2-be9c-ec5b6053d9e5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05198322-5cc7-4434-805d-5e7769eb8120", "sighting_of_ref": "indicator--a73719e2-9d56-4753-88d0-fd37e74e90dd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583fb0f7-2681-4d6b-a251-48d719004208", "sighting_of_ref": "indicator--2c0976ff-a2ba-4520-b2e7-51d81f4fb055", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7644c486-0ee6-4efc-a241-667c6f7218db", "sighting_of_ref": "indicator--fa23007e-3527-4372-8c4d-b357ddb170ed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195d00a8-99e3-42fb-ba8b-e538ad468fd8", "sighting_of_ref": "indicator--76e281bd-60ed-453a-8301-43424fb823cd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d24a71-b330-41ae-9c58-2e3bb03b8896", "sighting_of_ref": "indicator--0cba6be2-e24b-49a8-8e6d-8705bc2e945e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a128c9-e919-40a6-b3ea-3bd4ffad0f7a", "sighting_of_ref": "indicator--a5096c09-08e3-451e-b18a-aa3872a1db5d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd67584d-b973-4bc0-b96b-ae190d195870", "sighting_of_ref": "indicator--a5096c09-08e3-451e-b18a-aa3872a1db5d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258b060a-f665-44a0-8b80-d8f9a100bdd2", "sighting_of_ref": "indicator--f0bfd013-cd9f-4d7d-b980-912a9da23e59", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fffd119-d36d-4a0f-ac1b-fae3991ea8cb", "sighting_of_ref": "indicator--f0bfd013-cd9f-4d7d-b980-912a9da23e59", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92f5378-06a1-4ff3-b521-934b3dd66128", "sighting_of_ref": "indicator--e406da93-6319-412c-9387-ee0f495e26e4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9a8886-674b-4a42-a393-bce64ef5c8b9", "sighting_of_ref": "indicator--703fe5c8-0d4c-40d7-88ad-b8482c9eb838", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a531242-1855-4feb-81fb-1d726b00c62e", "sighting_of_ref": "indicator--a3ee6447-091d-4336-b082-2b573019b50f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b0d423-d2e0-4f4b-9238-1dcbcb8de9ae", "sighting_of_ref": "indicator--6978ba27-a1d4-471d-827b-a4f09defec4e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296cd4b3-cdec-4cba-b40b-f95183eeecd1", "sighting_of_ref": "indicator--5b855207-cc22-40e7-8e8c-802bf0cc6821", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81add88-5bb4-403f-9fb8-5b2258f53bc2", "sighting_of_ref": "indicator--e6e01e7b-591c-42cc-b805-baa7236335be", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1acb5e3-8e91-442a-b0bd-bdcdcf1c99af", "sighting_of_ref": "indicator--73170cf0-930c-4bc2-8f58-885d35a7d8ff", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928d0e13-372c-47b8-978a-4d0df51ba730", "sighting_of_ref": "indicator--35e2048e-bf8b-4e3d-a211-a9ac6eba98d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fb077b-f49a-4f7d-9bed-ce89cdf7bcf6", "sighting_of_ref": "indicator--6586ea85-7fa8-413e-90d3-15fa676d6ebd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cda261-a143-405c-8b33-cd52c2c71842", "sighting_of_ref": "indicator--f1c16309-dd1a-4c3c-953a-457cda5d7113", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77f467e-8c61-489b-b734-d996f724604b", "sighting_of_ref": "indicator--519db23f-f4aa-40c0-a6c0-1fba31f39bab", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552dd8fd-fcf9-43e5-9340-c73ff8ea9276", "sighting_of_ref": "indicator--519db23f-f4aa-40c0-a6c0-1fba31f39bab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d86cef1-fb8b-4eb9-8aeb-f90e87ca6a60", "sighting_of_ref": "indicator--d03e9c8d-594e-4bbe-80b8-ac6298a3f8c0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e597dc6f-4221-4abd-99b6-4baf941fd110", "sighting_of_ref": "indicator--fb430fd3-7dfd-4bc6-9f4b-b8fbd040409b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad74cc14-bd6c-4798-94f3-74e1c6bc2a42", "sighting_of_ref": "indicator--36bace8c-eb57-44ef-9b77-4c7c9bf1d3cf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ce2e45-df90-4799-9bc1-39760165959b", "sighting_of_ref": "indicator--25ea52aa-c167-4ff3-8fe8-0e1f2a4cb2bd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4fc47d-5cb5-495a-af03-58e6b4b6bfae", "sighting_of_ref": "indicator--25ea52aa-c167-4ff3-8fe8-0e1f2a4cb2bd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40923e55-f6b0-431f-baf9-7d74f841f556", "sighting_of_ref": "indicator--e19e743c-ff20-4442-81ca-5017c7cea020", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0707a5ec-0726-4fa2-9c76-df7f49ae0d76", "sighting_of_ref": "indicator--f6349cd1-5b64-43ff-99a8-1cbda433a4b4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7995d74f-e2c5-403b-a849-941e2cbef714", "sighting_of_ref": "indicator--2f8d8b72-d77c-4256-b7a1-0a6bc0b0b22a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0c7aeb-342d-48ad-a55a-0569c8cd0fc2", "sighting_of_ref": "indicator--e1cb123a-4c0e-4c7f-8a5d-b4fa4b5b05fc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bdb0ed-564a-4861-85d0-4304af15d02b", "sighting_of_ref": "indicator--0ccb3446-7880-4f70-a9ec-25338177e60b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3a7ba9-6c70-4f27-baf0-5374a9390219", "sighting_of_ref": "indicator--0ccb3446-7880-4f70-a9ec-25338177e60b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfbd9d0-22f8-40ea-8b79-24d46717d3e3", "sighting_of_ref": "indicator--f5ab8ea3-800a-4015-86f9-496db42347ab", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4651d95f-92cb-41a4-b60f-914a0c670c5b", "sighting_of_ref": "indicator--f5ab8ea3-800a-4015-86f9-496db42347ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73be33d6-79ec-44fd-9b91-8a8e37c45afa", "sighting_of_ref": "indicator--a93fb4bd-25de-4ac2-9a3b-3d89779cffbc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec6c850-9c80-41ee-93b9-f1da5c7cfcb2", "sighting_of_ref": "indicator--ac5d619f-ff86-49a5-acde-7e1bb922bc89", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da8fa1a-5593-4b59-8a69-54ceda4d5450", "sighting_of_ref": "indicator--6cd7a4ee-4337-43b1-8f38-2173d6bf157f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0971e3f-fa66-48ae-b529-65e5bcbabeff", "sighting_of_ref": "indicator--5b213b37-9408-4936-88d4-dbccc3583ff1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795b404f-cbb8-410b-a625-3905f77a470a", "sighting_of_ref": "indicator--9514e99f-ce4d-40be-bec9-b5be2468c73e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740ac488-c836-4b0d-a8e1-65a306d27bc1", "sighting_of_ref": "indicator--8649342f-cda1-41fd-ae47-c0914b2bc467", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d49042-c81d-4c78-aa21-99bf05363517", "sighting_of_ref": "indicator--9dfe8b52-f222-4a47-b10e-6d5c63ed0e77", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a0e043-3fa7-44e8-9e0f-cc45ea26c1bc", "sighting_of_ref": "indicator--e8d99162-a735-44e4-b603-61e0a3e7d792", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d226ad0b-9ac0-4ed3-bd29-87e8b63a06b6", "sighting_of_ref": "indicator--e8d99162-a735-44e4-b603-61e0a3e7d792", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d412f6-1751-4124-9f7c-b97ce40d2e0d", "sighting_of_ref": "indicator--5ed039a2-67cf-4a38-9cbd-0d9c03ed592a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e90dec-bbf5-426a-8aa5-0e75e5ece754", "sighting_of_ref": "indicator--5ed039a2-67cf-4a38-9cbd-0d9c03ed592a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6799b150-9ff8-412e-8804-1c98715689b9", "sighting_of_ref": "indicator--f9c1ffa7-a9b8-4665-834d-620485f3fb8a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b447e27-0822-4eba-92b3-05cfa5fb1f71", "sighting_of_ref": "indicator--ebf957ac-cbd2-429c-8b13-c72e71f66b4b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05834015-4779-4c02-8402-e947166a0a9b", "sighting_of_ref": "indicator--5ee4487e-649c-4cc3-bdd3-20b0239752eb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfc7f84-7717-4c88-a055-714816b29d7a", "sighting_of_ref": "indicator--5ee4487e-649c-4cc3-bdd3-20b0239752eb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ab8ed0-a6d9-4a92-86a7-c6181272d4d3", "sighting_of_ref": "indicator--208e598b-b24c-4676-9056-4a59105e77ef", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0958599c-ef7b-47f7-80b3-44930d23b41c", "sighting_of_ref": "indicator--c958afa9-fce0-4815-925e-3174fb54b8a1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd1c2db-9827-4917-a36c-6b10c8f67975", "sighting_of_ref": "indicator--c958afa9-fce0-4815-925e-3174fb54b8a1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd07e2e4-60b3-4436-9a3c-02daabda8c36", "sighting_of_ref": "indicator--cdc5658c-a582-4a2e-a38c-a53eb0b400db", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d0bb80-f64b-4fca-b1a2-f50bcb3667de", "sighting_of_ref": "indicator--cdc5658c-a582-4a2e-a38c-a53eb0b400db", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adc39f0-2547-4005-9726-426c7b491047", "sighting_of_ref": "indicator--9c76fc33-e5fb-4223-b840-143737e4061f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e66ef26-d96d-4fd8-b03c-86483b142e50", "sighting_of_ref": "indicator--d04c9089-370b-404f-b869-0bab8b49181a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3303d3-6884-4832-a5a0-9d45e53dbfea", "sighting_of_ref": "indicator--87887ca4-d41e-4cd3-a3f9-b460526e1656", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945923f6-9e88-408f-90b0-338679732f8f", "sighting_of_ref": "indicator--87887ca4-d41e-4cd3-a3f9-b460526e1656", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b969529-c0bc-4431-bec9-28bfe741239a", "sighting_of_ref": "indicator--2662102a-f109-45dc-a6d3-eeb472c1e469", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b9b849-b3de-4896-93f7-c28c59cf8c6f", "sighting_of_ref": "indicator--75076cf3-33d1-4264-9223-73c7169fdd0e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d6be57-836a-4fd0-85ad-715c2b0de103", "sighting_of_ref": "indicator--407bd31d-09df-449f-b513-6a78b927b0d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9a8edf-06aa-42c7-a74b-dbf594450f95", "sighting_of_ref": "indicator--19d31223-97b6-4b96-99ee-f613eb69605b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797e912d-3b9b-4b03-b174-2941bf1d6391", "sighting_of_ref": "indicator--527ca16d-760a-4299-9695-967008577065", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfb01f8-8c64-4061-8e1d-2a046d04fc4c", "sighting_of_ref": "indicator--094fbfdd-ffae-483b-b4e2-4b1c7c2fa515", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cc21ad-ee59-431c-8e62-a2a24f641027", "sighting_of_ref": "indicator--094fbfdd-ffae-483b-b4e2-4b1c7c2fa515", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf94b600-7e57-4b9c-84dc-b75f014f4080", "sighting_of_ref": "indicator--e8252244-e8f0-4b3a-9587-defbc25df2ac", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39372ef-188e-412d-8ac1-5a22a49daf2e", "sighting_of_ref": "indicator--e8252244-e8f0-4b3a-9587-defbc25df2ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc338e78-36a8-44f5-a518-0b2d5af0ab19", "sighting_of_ref": "indicator--ea94c509-74ba-45a3-8de9-5890111137d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac9d0db-a3fd-49ff-82a1-f8a436d1cce2", "sighting_of_ref": "indicator--4556823f-75d8-4114-a29a-c241d80a7ddc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39aabaf6-f60e-4d3b-8689-ec527305d427", "sighting_of_ref": "indicator--075203d1-7134-4c77-b56c-3f02665531ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69e5c35-bcc7-4fd7-b928-d1782bcb8094", "sighting_of_ref": "indicator--5d62139f-7b4f-4501-9d87-04b67d14efc0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651a1c10-4360-46eb-925f-ffd9f08d73f9", "sighting_of_ref": "indicator--2b354e5a-0993-4290-84f3-4685b5c1c83b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1be3762-5654-465f-9bcb-e9243b9eb428", "sighting_of_ref": "indicator--fdfff651-493b-495d-a552-6159e16c037b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d07bfe6-e429-430d-9790-116fe94e1349", "sighting_of_ref": "indicator--fdfff651-493b-495d-a552-6159e16c037b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e517e636-0c69-4168-a638-db2aaf826a65", "sighting_of_ref": "indicator--8308ac9c-ca9e-4a83-9156-343f076f4d03", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098f45a9-14ba-4ad1-a443-a70c7b665f67", "sighting_of_ref": "indicator--75644f65-6e37-48e3-b8ba-aeb0fabb3094", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab962c9-be00-4483-8958-73674d9e4791", "sighting_of_ref": "indicator--9de02f3d-5a2e-451c-a53f-7dbf7fb1cd0c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9af1939-d7e6-4870-80f6-0c8bf3e58e47", "sighting_of_ref": "indicator--18b55f26-c701-4fea-8a4c-2d7e3f2a49dd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20ca7f8-ccfa-43d3-bd81-5c133281f21b", "sighting_of_ref": "indicator--ce1b47b9-d2cb-45e3-b21f-8b06f3300a86", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91d426a-a7f9-4518-9172-bd8db552c7f9", "sighting_of_ref": "indicator--1a821b69-b3f7-41a4-a12d-1231c8792853", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cbedb0-0140-46dc-acd7-6ac65af8d993", "sighting_of_ref": "indicator--8193b265-9103-4aba-8687-efbd24e717e6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de252943-48bf-49ad-8efc-0e8285c7abef", "sighting_of_ref": "indicator--86ea0910-5686-4df5-bc48-60d07956e7b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309bca2d-5dca-4dd5-ab24-ab52453fc7bc", "sighting_of_ref": "indicator--ecd12d34-b9f3-4bc2-a869-82196d928045", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776adb9d-bf6c-4fcc-bde4-e5ce3102e823", "sighting_of_ref": "indicator--a9b71ce5-0758-48ce-b3a3-a431f9a09399", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a6c386-57e0-4383-a781-b070917ae3b5", "sighting_of_ref": "indicator--b8911e65-919f-48d8-8207-867764e741e7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e65432d-c0e7-4fa9-b32a-09e066338c91", "sighting_of_ref": "indicator--189a1cfa-2bae-4483-b391-12e2a7cef901", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff242fda-e007-4ece-806a-2cb431df53a8", "sighting_of_ref": "indicator--47f3976a-2910-46b8-bbbb-90c4e9662647", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e58dd47-4a93-4b81-8312-33f486db2b94", "sighting_of_ref": "indicator--1d75ded2-90fe-42f2-a25d-12fa4fb04b35", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f91385c-6e0a-4649-b95f-9f8c5ca4a386", "sighting_of_ref": "indicator--4223ed06-6ccc-46c2-add0-f020ebfb6c43", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9daee89e-bdb9-4682-b291-51086d41caa2", "sighting_of_ref": "indicator--74befa29-fb34-4321-9565-2be63bef4931", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c902c5d2-ada5-4358-8c71-9918b61eef15", "sighting_of_ref": "indicator--7b095779-fcd7-4f86-bc99-78e898a18d2b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5ee94c-2935-4fdf-81ed-114c809fb875", "sighting_of_ref": "indicator--188aa14b-066f-4735-b764-134c0b6c6227", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f089e9-5c0c-4f43-b324-aab3aee8c4f6", "sighting_of_ref": "indicator--188aa14b-066f-4735-b764-134c0b6c6227", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b773844b-dc36-46b6-8dd7-0ca6208b270f", "sighting_of_ref": "indicator--3f69e7b0-7b7a-4b4e-af55-a5896cde7638", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f96a9a-4b2e-4e86-9a5b-b1c60af233d5", "sighting_of_ref": "indicator--35457438-b3ad-4428-ad71-3a404feb921e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1e543f-5430-4301-b74e-e000c37d7bbd", "sighting_of_ref": "indicator--ca428f6d-3a93-4455-8596-2b724a6bfa7a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c310b96e-a24a-4a32-9970-ed53b314bb30", "sighting_of_ref": "indicator--181a405b-9966-46b9-82cf-f0e491bf10a0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1620890f-6fcf-4cdd-ad0f-9a78ab887302", "sighting_of_ref": "indicator--181a405b-9966-46b9-82cf-f0e491bf10a0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2b4aff-524b-41e8-b815-696a315549fd", "sighting_of_ref": "indicator--b7906486-50d7-4fa9-8470-644116abdcce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e95e97-6af2-4879-9aa9-b53921112ef1", "sighting_of_ref": "indicator--4edc5ce8-eceb-4175-9082-fba8d0ae3895", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b955f4-4bb4-4e00-be39-bb31896c4aad", "sighting_of_ref": "indicator--592e2634-1efc-49b0-9b66-4c7bcdb9c150", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0feff1-6c3c-4a76-bcbe-6152c758f763", "sighting_of_ref": "indicator--592e2634-1efc-49b0-9b66-4c7bcdb9c150", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c22715-9b7d-460d-90b7-e29bbe473818", "sighting_of_ref": "indicator--d42430d4-d4d2-42a2-98d7-cd51311a1fd4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84393095-93f5-42ec-a758-af89c924e858", "sighting_of_ref": "indicator--bec45cd4-bfeb-4fdc-a87a-e161d6ffa723", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd111eb-14c6-4566-bfa0-44c7cfd80ef4", "sighting_of_ref": "indicator--7d4420f5-ecc3-4b49-8691-b3596de742b4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a9a8a9-795d-4cdd-869a-8b083b7d5989", "sighting_of_ref": "indicator--4bc6f474-d716-4505-81b0-881d3a20def0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c84059e-101a-4a03-953b-cb71012bed3f", "sighting_of_ref": "indicator--cedbbc54-469f-4b9c-aaad-00be0c2068d4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588abd2e-58fb-4c54-9f85-936ae2ebb787", "sighting_of_ref": "indicator--1c7fb14a-43cc-4ad1-bb57-a3c4d4f0a929", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf9fa4b-b4df-4f04-b2d8-608edf035bff", "sighting_of_ref": "indicator--083a8240-8a0a-4484-928e-4ee40fc63b07", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a55ce1-9c81-419d-9505-71d00cebd5c8", "sighting_of_ref": "indicator--df880ce8-5eb1-4624-92b6-361e5782959b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d34452f-e550-4518-8fa7-ae8bc66d4002", "sighting_of_ref": "indicator--1c24435e-b61f-4e27-b0f2-6037f85b78be", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d78040-7287-4f64-9f17-dfa25e9cca16", "sighting_of_ref": "indicator--63c548e4-c47c-415d-9ee3-b803fd4a6ba0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349c1735-2e6e-4c0c-8e39-f4c596a38bf8", "sighting_of_ref": "indicator--dd902e72-6428-4eee-add3-f46749151d38", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe1953c-a783-40d6-b8f9-5a81ecaea9e4", "sighting_of_ref": "indicator--9ae998f9-c934-4a17-b192-cfc3bc3f8fad", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4f7da2-e132-4647-8b8d-844668845a2a", "sighting_of_ref": "indicator--35a48c39-2918-49c1-baea-1cd2a32295da", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf656559-47a5-42a6-8689-6867df000cd7", "sighting_of_ref": "indicator--c5eeb706-68f4-4bce-a7b2-515d393de02a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdb8437-c4d5-48c6-84ef-db9f410fd0ec", "sighting_of_ref": "indicator--3e45d94a-8b5c-43bb-a398-68ed2d9b0cb6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc45fa8-3cc5-4a80-a045-390d1bf6e5a8", "sighting_of_ref": "indicator--007e68c2-0f69-4d77-9dfa-9f74530005bc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d47378-beab-468a-9d78-0e43f37570a4", "sighting_of_ref": "indicator--dd319aa7-3622-410f-81ca-e3d48084de31", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa1f120-1c39-49c6-bbb3-6948a61b5dc8", "sighting_of_ref": "indicator--dd319aa7-3622-410f-81ca-e3d48084de31", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd624194-55dc-474f-b6f0-72c648ba9ffd", "sighting_of_ref": "indicator--2dadcbd9-b654-41db-9f2b-1b05c8d67c46", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69afd0f-3102-4107-ba06-c94f3fbf6a8d", "sighting_of_ref": "indicator--5f723636-40e3-4871-a4b0-c8bcbf07708a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af32a381-2734-4345-8f01-2cc40ff000a1", "sighting_of_ref": "indicator--789c5253-909e-4a0f-aea9-501ee42fc193", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5765e0c3-f81f-49a5-91ca-388085fcc7ea", "sighting_of_ref": "indicator--c811ff61-7e72-4a9f-a2c2-d28714f45b6e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd319d12-ca4d-4378-995f-bc3fe75f8a16", "sighting_of_ref": "indicator--c811ff61-7e72-4a9f-a2c2-d28714f45b6e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cfa6ce-e935-458b-bfd7-c0efb999ba6c", "sighting_of_ref": "indicator--218bddbb-3369-4f7f-8fb7-675ca2b77c12", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b412b52-3b6c-4391-82fd-ade657d59ab9", "sighting_of_ref": "indicator--b7b08735-8207-4e9a-98e8-27334471de1d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e265b1a0-88c2-4bb2-a33f-d93682be9f62", "sighting_of_ref": "indicator--29317850-af6a-4541-8806-04e947f8ec1e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0d5c5d-7e8e-463c-b263-7eb6c59510c2", "sighting_of_ref": "indicator--e0b527a9-c2ce-4e1d-a63d-98d97abae820", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e423c33c-0570-49c3-ac56-458bc7301567", "sighting_of_ref": "indicator--8529bb6a-9da7-4b61-9cc7-6fcb4747ab10", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d640a137-c963-437d-a53e-bf7a9c2ecce2", "sighting_of_ref": "indicator--ace134ba-eb6e-49c0-871f-980633a76a74", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b2bf86-a9f9-4b94-92c4-3f751b202856", "sighting_of_ref": "indicator--bdc5cf17-1b36-44d3-aa06-0d0e66afceb1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff21756-4a60-46df-9416-13ae99b9d351", "sighting_of_ref": "indicator--3d3e3c9f-cf82-40e3-9583-2bf7693f972c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7112bddb-90a7-49b4-a096-f121e9beda28", "sighting_of_ref": "indicator--1ee8fd10-e87e-4002-9855-e4abe1a7226a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de114d3-d33b-422c-a3f8-5212046e0760", "sighting_of_ref": "indicator--8be6e484-2adb-4822-abb0-1416ec311fe0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5754fe0-3f9a-4a5a-9147-acf8fc5f7d07", "sighting_of_ref": "indicator--f1bd2745-ad93-4bc7-a0c6-9a3b3f609ed7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b205140-e1ef-4235-a59d-3c264ccbb12c", "sighting_of_ref": "indicator--ea8ad2ca-85b3-45a8-b45b-d35fede4d561", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65a5d98-54b7-4d55-8f31-d871878ea726", "sighting_of_ref": "indicator--e8f9a064-b0ec-4bc6-84ed-2910f47108db", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c43c6ce-d95c-4e96-be34-4edad17b0c3e", "sighting_of_ref": "indicator--d680e40b-8751-4226-8e32-905a413c6840", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8c27b4-a6b3-49ed-a1dd-a543dae3edad", "sighting_of_ref": "indicator--d680e40b-8751-4226-8e32-905a413c6840", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c933c094-1975-4954-81d1-6cf21157601f", "sighting_of_ref": "indicator--15f8de97-d54d-4e2f-885b-4c23aa2d2acf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6200a72c-4b83-400e-9143-75f03be2a6e3", "sighting_of_ref": "indicator--49dc69b7-707b-4514-9b5c-cfdcbb5ae08d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c5af93-f676-4940-b622-414099bdc85e", "sighting_of_ref": "indicator--1f63628c-2308-4e7a-897c-d7aa922d6988", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb735ef9-8e94-4414-b536-8b15ae745184", "sighting_of_ref": "indicator--e191630b-6510-4add-bf30-667fe25f4e6c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ae5427-132e-499e-9e4d-b6b97479436f", "sighting_of_ref": "indicator--bcdf9edc-446f-46b6-8be4-526b3687785b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530676eb-7196-417b-9d5b-1a8449b9072d", "sighting_of_ref": "indicator--49039d08-1bd9-405e-ab9c-bff621ea773e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55534bca-d802-469d-be91-19e1bd3b0121", "sighting_of_ref": "indicator--1f9de64d-0ad9-4964-8cc0-0b40f51b451e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b48154-88a7-4f22-8b83-8895db2d8fc8", "sighting_of_ref": "indicator--b840b384-bb2b-491e-9a3e-fdc217dc719a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28429c67-a95b-4f92-8b9e-cd6cc4cf1909", "sighting_of_ref": "indicator--c5719a5f-6da0-48fc-86f0-2dd0d0a8ef4f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de8bc4d-3631-42d5-ad41-3355792ddc0b", "sighting_of_ref": "indicator--3e84717e-4a46-4436-811c-d37320108f21", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d36d11-7d6f-4913-8411-5f86c6424866", "sighting_of_ref": "indicator--b98189b4-0fa6-4dac-8cc1-d7032228a731", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531dea5f-7319-44b7-aee0-bc7240f2be1f", "sighting_of_ref": "indicator--ed3b83b2-9b6a-4fdb-8423-18cd8def0302", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e32c39-7607-492c-9973-3038e78caf24", "sighting_of_ref": "indicator--ed3b83b2-9b6a-4fdb-8423-18cd8def0302", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adab5575-eccc-45b4-b9fb-429b56bf09e1", "sighting_of_ref": "indicator--6ec993ca-597a-455b-941e-7ed35226ade4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5ca6aa-3d88-46b1-bbca-f2cc0e0525f0", "sighting_of_ref": "indicator--705b3d1c-1494-4290-adf3-a1590c80ff73", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc6e55d-5b90-4fd8-afee-27d3298f3f58", "sighting_of_ref": "indicator--705b3d1c-1494-4290-adf3-a1590c80ff73", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba78669f-429c-4bfa-9f16-c4534acd08ae", "sighting_of_ref": "indicator--e5aeeab4-bb77-433a-875e-dcf9f299bdfa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbbec6f-d4cd-466a-9f1e-f65cbf74f11d", "sighting_of_ref": "indicator--e5aeeab4-bb77-433a-875e-dcf9f299bdfa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea95fbb8-b271-457f-a005-30d7ed7b0cf2", "sighting_of_ref": "indicator--914bce26-a925-4d3d-ae94-8fb24a9ef3ba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c402c754-dcfe-4b1e-8698-ea417ab2c34c", "sighting_of_ref": "indicator--fc3f74a4-7f30-435e-a599-746fe435e3d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190ee64c-60d0-46a6-8655-d82b1bb029f0", "sighting_of_ref": "indicator--cd671687-7c22-4b7b-8b44-ec7cd024872b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1eec679-ca62-4360-bbf8-89ce7a3c1130", "sighting_of_ref": "indicator--cd671687-7c22-4b7b-8b44-ec7cd024872b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903c58a7-dc99-4d85-9316-55246638efe3", "sighting_of_ref": "indicator--9a68ff38-1b55-49eb-bdb3-62c17882c20f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aec7028-87ef-438d-99ed-3f70d375db5b", "sighting_of_ref": "indicator--e01cfc25-eb28-4a2f-9534-d671e562282f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42bb511-a739-4656-a946-864ff3aadb65", "sighting_of_ref": "indicator--e01cfc25-eb28-4a2f-9534-d671e562282f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabbe276-fa15-45ba-91b5-7447dd6be488", "sighting_of_ref": "indicator--74a06bf8-361b-4e84-ab12-9c07f5c8690e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639cfaee-7b3f-4e39-a8ee-32d091eb225a", "sighting_of_ref": "indicator--74a06bf8-361b-4e84-ab12-9c07f5c8690e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7478a4-c868-4940-8563-f9efadf945c5", "sighting_of_ref": "indicator--4efd4a96-6a6c-4997-8b66-f2d17044ccae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28be410b-4aa1-4f34-9468-f6b4c4a9b6ec", "sighting_of_ref": "indicator--57ae076a-8828-4cbb-a811-ef7237781f35", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c7728d-0ad3-4024-b01b-906c27656365", "sighting_of_ref": "indicator--4255b1e9-c94c-4a8f-931b-f65b4b219c6a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfb6f66-62ab-42d2-9cd3-a1a553198443", "sighting_of_ref": "indicator--d0b167cb-1907-4fe6-a61b-a82cde95046b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f5c151-8502-4314-a95f-8119b0c97d72", "sighting_of_ref": "indicator--d0b167cb-1907-4fe6-a61b-a82cde95046b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd4a0df-93d5-4968-bc16-10d3f1f8de45", "sighting_of_ref": "indicator--c7b1a643-d978-477a-9e38-37e779d40ac3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96160c9d-22ad-475d-bcfb-1714d884d97e", "sighting_of_ref": "indicator--c7b1a643-d978-477a-9e38-37e779d40ac3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c43146-4b24-4ea1-855f-75a95168e644", "sighting_of_ref": "indicator--13c89045-6acd-4611-940f-58164d8b2b2a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0aed017-458a-4228-8dc7-7aae3615c884", "sighting_of_ref": "indicator--b12e7a92-4192-4472-835a-819e83c95f95", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879c4158-ce58-4804-90b4-70da14dcd7ca", "sighting_of_ref": "indicator--c3d59e76-c3ad-4f71-b76f-eb98857b2168", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa45e27-d428-4fc4-9bdd-0e18c0fecc02", "sighting_of_ref": "indicator--c96b8add-65ae-4c13-9f02-7136aabf3e1e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91c463f-0785-4513-818f-ae28aba50e1a", "sighting_of_ref": "indicator--05f18e7e-e9ce-4438-9269-3a8e52edf9f0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3479fc7-3ecb-4570-a790-e6704d7de1bf", "sighting_of_ref": "indicator--af795c3d-9e85-4c68-b05e-6cdeeee17d33", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9113f6-648e-4877-855b-3256b170fab8", "sighting_of_ref": "indicator--af795c3d-9e85-4c68-b05e-6cdeeee17d33", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1565c5d2-e800-416e-b52a-2c8d6ef84dd7", "sighting_of_ref": "indicator--420be1d1-f439-4027-bba6-1f2fcb0f8842", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f86a12-5627-46d2-ae92-e3cc271405c8", "sighting_of_ref": "indicator--14fedc4f-7c29-4586-bf18-fe162eb9657b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018ad683-8b93-4ecb-84c1-88811e35cd43", "sighting_of_ref": "indicator--ee513d15-c2a9-43ca-a868-b2c7c7ec34fd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e2327c-e52b-4c08-9bc1-922189c108b2", "sighting_of_ref": "indicator--af8b3ffa-29fe-4c41-97a5-51eeebb9be60", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabc3efc-17ad-40fc-9535-aa77ac6682ec", "sighting_of_ref": "indicator--af8b3ffa-29fe-4c41-97a5-51eeebb9be60", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5233b867-393e-4936-aa62-82e57557cbc5", "sighting_of_ref": "indicator--ed0c7cf4-af60-4e22-a5cb-70ede5f00e3d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c9a926-91ca-4a66-9e32-aa773c7e6a61", "sighting_of_ref": "indicator--0e402e3b-e336-4d1a-b5f7-ef09f3ef45c4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c818698-9526-47ac-a854-7bb0d6b3cb15", "sighting_of_ref": "indicator--4971279a-51e3-4ba1-8475-68cc62451888", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cb0dbe-8a7c-4fce-ad00-bdc4121caf8f", "sighting_of_ref": "indicator--4cbc2f63-6691-4222-83ec-23026651460e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688af809-a469-489e-a840-54d01d281f93", "sighting_of_ref": "indicator--c35749b0-19b2-4bff-a5f7-821c1e3cde8e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7438145a-1eb8-434c-8fa0-f7cf8e1472c2", "sighting_of_ref": "indicator--6cb6bce0-bbf5-41a1-a9e3-b85c2bafb046", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5d2e3f-3c33-4f9a-b5cc-01fcb0b03691", "sighting_of_ref": "indicator--9347050f-56ff-464f-8bdb-d666f62fa5c6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b25b3a8-ead4-4db5-acd7-e72e1e5bdf22", "sighting_of_ref": "indicator--9347050f-56ff-464f-8bdb-d666f62fa5c6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534cd7d7-474f-4c6d-9800-5f23cfd75596", "sighting_of_ref": "indicator--e9b00ad4-0bb5-4d83-bf73-dd6c604de460", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f441d7ae-f8da-49cc-817d-99bbbbc66b05", "sighting_of_ref": "indicator--fe063751-3a43-41b9-b631-f123dfdca1b7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173abffc-db7a-46fa-9ad5-407ea23b4abf", "sighting_of_ref": "indicator--b8703b12-da4f-49a7-9513-d4d430482b0b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb73507-d90d-4439-9d61-6c95af62b582", "sighting_of_ref": "indicator--cd771193-52a1-4374-a4fd-a84e70494522", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cea596c-8924-4e49-92e9-a58b1e0e77af", "sighting_of_ref": "indicator--cd771193-52a1-4374-a4fd-a84e70494522", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0740e3e8-df7a-464f-8b51-750c6f7f1a1c", "sighting_of_ref": "indicator--c506d5ee-53cb-4eac-bc60-d46a74f43dcc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86a49dc-118f-447e-94f0-02da39f827eb", "sighting_of_ref": "indicator--dbbe8022-e3f4-43a9-afd6-45c1649ac31f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683e28b6-16fb-4248-a326-e0d7e548fa30", "sighting_of_ref": "indicator--01c90cbe-0963-4671-a637-8392818fc2c1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866ed284-466c-4e89-aeeb-4ebd568a834a", "sighting_of_ref": "indicator--eafa3009-385a-43ee-90eb-baf8d19bcd8b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b50c914-1b6e-4305-a208-7d9e9d1fd93f", "sighting_of_ref": "indicator--1600d1fd-dcad-4571-ae51-a4f307907ab7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5f3abe-c902-41bd-9120-f3593ddb73d1", "sighting_of_ref": "indicator--a1a2f2ad-0127-4b1d-9f2f-5f6335b77f74", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e60b95-e1d7-4fee-91d9-3c11ffc3d273", "sighting_of_ref": "indicator--5fd10445-aea6-4918-9b35-eb4cfadd67e3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f27c5fc-60ec-4c63-b54d-af2bc51204d3", "sighting_of_ref": "indicator--74b83046-52dd-45fd-a291-07ebb64b2cdb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ddd77d-291a-4a7b-b3cd-f72b2af87492", "sighting_of_ref": "indicator--ef9b6fb0-6cf0-4af9-a5ea-aacb624270ea", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44972d68-aabb-469b-83b1-7fe70f772990", "sighting_of_ref": "indicator--738009f8-cc7b-4a70-b712-146b7c4211c1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2724b29-7494-4fc9-93db-50c24bd86587", "sighting_of_ref": "indicator--7401c376-12a0-4a47-a3b7-2b5db27e64e5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b52c05-41a4-4408-a6c9-e42f312d87c9", "sighting_of_ref": "indicator--5fbb06ad-845e-45f0-9a09-c1236c9775e3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653ac2ac-46a2-4df1-8240-2d466aefb4af", "sighting_of_ref": "indicator--5fbb06ad-845e-45f0-9a09-c1236c9775e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e155ede5-c58f-4cd6-94c5-d03387470bc4", "sighting_of_ref": "indicator--5253af1f-b130-4d9f-a52c-cb8f357adfb8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4594ff-d3ce-4408-bbcb-a59c3b126a04", "sighting_of_ref": "indicator--1eb2176f-a912-463d-9a1b-5dbb8329daac", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22adc5d5-d584-401a-9783-a4c100c6ef52", "sighting_of_ref": "indicator--1eb2176f-a912-463d-9a1b-5dbb8329daac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd608fd7-63ea-4e0c-9199-cda98c474d75", "sighting_of_ref": "indicator--891fbe75-0c45-4b0f-b31f-7f7b661b487d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8646ce40-9e6f-4f5d-9ee0-839a86f9c6d4", "sighting_of_ref": "indicator--891fbe75-0c45-4b0f-b31f-7f7b661b487d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5a87d9-b662-49b3-9a8a-179067a8f8ae", "sighting_of_ref": "indicator--2ecde77a-118a-419f-9063-99be785cf214", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a271f5d-829a-4163-89b7-33723927d8ff", "sighting_of_ref": "indicator--2ecde77a-118a-419f-9063-99be785cf214", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d86974c-040e-479f-bc38-b8c64601ef96", "sighting_of_ref": "indicator--1eaf4c64-99ac-4f6a-bae4-643b1364c51a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4f207f-f869-46e1-ac93-19a0785661e2", "sighting_of_ref": "indicator--1eaf4c64-99ac-4f6a-bae4-643b1364c51a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e8782c-752e-4536-8343-ce9eb937eea6", "sighting_of_ref": "indicator--d9e38c38-121a-4257-a0bb-321832c52040", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9209f8b-6bd8-4be7-b355-4042d1c28d9f", "sighting_of_ref": "indicator--d9e38c38-121a-4257-a0bb-321832c52040", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fed6459-063c-44c0-a66b-1f31fc7da478", "sighting_of_ref": "indicator--73998237-626d-4c6c-b287-c1d1ff9154bf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da014bb-717a-436a-b89a-0e6b231aa8f8", "sighting_of_ref": "indicator--73998237-626d-4c6c-b287-c1d1ff9154bf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b413e204-d402-40de-9642-11b04b2485cd", "sighting_of_ref": "indicator--206537b6-54b5-4ee1-b100-5f30b60fd446", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1e22c7-f1bd-49e1-af85-cf10c81fcf0c", "sighting_of_ref": "indicator--245ee9c4-4651-48a9-ba48-30f568109dae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d981b15-a4fa-4269-b15a-de2892f06117", "sighting_of_ref": "indicator--140bede1-f4f5-4211-b29b-c405ca214d08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56e76fc-2529-4c23-8266-9db822142ee3", "sighting_of_ref": "indicator--275521fa-9256-4c1e-be04-8c3d528e6494", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549f1e81-4609-4de9-8944-0d3d1ff97841", "sighting_of_ref": "indicator--5a129ca9-79ee-45c7-841b-8b863633858d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ee457c-a775-465c-8e41-f92b3d124e72", "sighting_of_ref": "indicator--5a129ca9-79ee-45c7-841b-8b863633858d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f668e6fd-5da1-4895-93f8-03b308a208d0", "sighting_of_ref": "indicator--87afbf5e-2e82-4f9d-ab95-c0beea90cedf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3baa8428-989f-4d2c-950a-6904707f2002", "sighting_of_ref": "indicator--0cddcfa1-fd86-4992-bbad-f85db98f18da", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04204de7-e664-466f-b600-b93060bb8774", "sighting_of_ref": "indicator--77db69fd-9ac8-472f-819e-457c5821693e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2218ac-4b3a-400e-9475-73c0c64567de", "sighting_of_ref": "indicator--ef2d4dfc-7633-4a13-b0fd-68fee8e3675e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ad69aa-9c1d-4a44-850e-df22d51cba2f", "sighting_of_ref": "indicator--b5a533e1-d0f9-4381-824b-2ab44abc6934", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1de46c-05eb-4349-81e6-e7ba6e8ee016", "sighting_of_ref": "indicator--e638774e-92a6-45c7-9bb9-1f40e0a28f00", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9181f20a-7013-4f81-a6b5-b4a23ed6fc68", "sighting_of_ref": "indicator--03319455-116d-4333-8a78-fe45922bd158", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64c5600-5db5-4546-b825-f8bf8b17bf34", "sighting_of_ref": "indicator--50d7737d-8953-470e-8308-9df962e2408a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf55079-d1bc-4005-ba43-868c3f5530f1", "sighting_of_ref": "indicator--5e104ae0-c890-4856-b2cc-f03b0c56e44d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b302433-f242-42cd-8cd1-3276eb91b20e", "sighting_of_ref": "indicator--5e104ae0-c890-4856-b2cc-f03b0c56e44d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605017d1-a426-4562-9d78-e0bc7ca97a85", "sighting_of_ref": "indicator--93be6697-1533-41fd-96f3-2969971ba869", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915a6562-8f3d-4464-b88d-4919315241fa", "sighting_of_ref": "indicator--4105e402-1573-4429-9089-1e5038495a3f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc85e219-e3ce-41a6-9526-b02d92648da8", "sighting_of_ref": "indicator--dbfd42ea-b5f4-41c5-aa56-ac597f7e4e1d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f664061-c61d-4c1a-a34b-3c7de19f8ee4", "sighting_of_ref": "indicator--bdc1683f-3f08-4b88-b703-237090739011", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ef3c1a-3dc7-4fee-b8b7-3e6414f2c28f", "sighting_of_ref": "indicator--bdc1683f-3f08-4b88-b703-237090739011", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9cc5cb-816b-4fda-8f4a-1b96c28e1f6f", "sighting_of_ref": "indicator--22ef98fa-8b78-48a9-8832-b4d3ad2ff038", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbc4bb9-cc5b-4051-828b-e44dd0d31f90", "sighting_of_ref": "indicator--22ef98fa-8b78-48a9-8832-b4d3ad2ff038", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31ca836-7e0c-42c3-9411-ac6d015b2ca0", "sighting_of_ref": "indicator--ccef1707-6c18-49ce-a592-0e7301ecb3ce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7db326-81ea-4a74-8e26-f293ae860dd6", "sighting_of_ref": "indicator--476228b4-dd21-471a-8ddc-a67c5ad1871d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05354261-dca4-4f71-a024-193fc8e693e9", "sighting_of_ref": "indicator--e20c6d42-717f-4be2-addc-659d63dc6270", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bc4c3f-a2a3-4556-96b3-020aaa017865", "sighting_of_ref": "indicator--779623cd-0a78-4637-a442-97b9292df59f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14a25c8-cd3a-430b-aec2-b919935ac048", "sighting_of_ref": "indicator--779623cd-0a78-4637-a442-97b9292df59f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cbce02-076d-4bcf-b06f-97cd66800ad2", "sighting_of_ref": "indicator--c86e73c9-9312-43cb-a3c8-80a73100db55", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ada5628-7c8c-4015-aa06-0207e90cf2e6", "sighting_of_ref": "indicator--4892ed7c-d078-4386-9a62-7717145e4dd2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35215646-6c1c-422e-9dd1-7b2f6e6eb8ce", "sighting_of_ref": "indicator--569a32c5-a5c7-4bd8-98fe-a93c6a0ac8af", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea198bc-3d2d-47ce-94f7-b7936b5536bf", "sighting_of_ref": "indicator--569a32c5-a5c7-4bd8-98fe-a93c6a0ac8af", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3040d94c-d43b-477c-b193-ac64e0494c25", "sighting_of_ref": "indicator--1860d793-863d-489f-aa8b-431755201bbb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7154300-bfb4-4f2f-beed-a46e13cd895e", "sighting_of_ref": "indicator--a06436f7-be6c-4641-965c-8b75f7baa4a6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1435686-7451-49f3-a9fe-64cd7cdfb2f7", "sighting_of_ref": "indicator--a06436f7-be6c-4641-965c-8b75f7baa4a6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71935b7c-e6e9-4392-a445-517a75cb74b3", "sighting_of_ref": "indicator--0c6fb789-eb5a-4c5f-b696-c4eb94999bea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5513c83d-1bac-4ebd-9a21-76dd118c8bb2", "sighting_of_ref": "indicator--8d0fb35b-8b2d-421a-a97d-b9201b16944c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f22f0c0-e9c9-4b59-8b7a-372c180fda24", "sighting_of_ref": "indicator--23815256-cbcf-4b3c-880a-9092614a4bcd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db683ca-530d-4442-a5ab-baf04f6da264", "sighting_of_ref": "indicator--5e742dc1-85f4-409e-8306-2e397b4a04a6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a22c99e-3c34-46d1-8c75-00cba897a4d0", "sighting_of_ref": "indicator--29c9dc3c-a34c-4856-a23e-169183b03a99", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49b2e15-8e1d-4135-b542-7c848572da6a", "sighting_of_ref": "indicator--c5635bb1-f2e4-4791-aea8-d6376de2732b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a426f97-b25d-4b26-8d99-b1aac46ba9fe", "sighting_of_ref": "indicator--48fbdbb8-441d-4823-82fb-8928a258c3d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f6c50c-53d5-4d0c-bf06-a37ec728fe12", "sighting_of_ref": "indicator--34c3de75-a3e0-4151-8ad2-8d202d828ff6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f663ce7-052e-416d-9f4b-4c24a48d16f7", "sighting_of_ref": "indicator--03bc3746-4804-4b1e-9acb-ffe6f130faeb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d80f3a-cfda-4807-8806-27714fea4d6e", "sighting_of_ref": "indicator--910fb000-4bf8-4894-937f-79512f126b47", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cf1472-45cd-4878-b053-535cfa0cd6fd", "sighting_of_ref": "indicator--f122b236-141a-4288-af62-579f0b1509d2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78004e0d-3d08-47ff-8aca-20f66d893ce6", "sighting_of_ref": "indicator--19c9a53d-d27b-4fb4-bf25-369b505b3445", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c0b4f2-03d2-469a-8ea7-2ac8dcac8b9e", "sighting_of_ref": "indicator--4489adac-49fc-4f95-b09e-7da84d728b6c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff43477-07ba-4c8d-aa32-8fdcc04c18c9", "sighting_of_ref": "indicator--0cce31f0-acb2-4e95-8c8e-6e84d8737796", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4f8814-e4db-42ac-bc01-81281b8166ad", "sighting_of_ref": "indicator--c3f17a68-a602-4e0f-8c69-51636491a4c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e044ec-45d6-495c-9c29-df9b7ae12ce1", "sighting_of_ref": "indicator--42280be2-85e3-4494-ab22-9bfcea4d34f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6099a7-05b2-4998-977f-9c9263dc87d5", "sighting_of_ref": "indicator--609278b6-9859-43ec-8042-7b163e30bc5c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de287e90-11ce-4406-aaec-cf29119020f0", "sighting_of_ref": "indicator--67500da1-4fcf-4279-9ad9-bf7163fbcd9d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d994adf8-fa39-4364-8fd4-4073550a4a29", "sighting_of_ref": "indicator--67500da1-4fcf-4279-9ad9-bf7163fbcd9d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe57dc76-3887-406c-a559-a17a15c490e7", "sighting_of_ref": "indicator--afc01848-6439-4ad5-90f2-568d3cff937f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d720fd72-239f-4116-a86e-9296da64c11d", "sighting_of_ref": "indicator--ec8f31f1-381c-4edc-a145-2edf8807c592", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedce2ee-6f31-4948-89c6-9febc9ce9ee1", "sighting_of_ref": "indicator--0261fca8-4e3a-452c-a4a5-9c4f6157cdad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a80715-abc2-4548-a165-c1796247db45", "sighting_of_ref": "indicator--a56ac409-8638-4691-adf3-04ed66372876", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa998a93-2795-4e5e-9dda-d351a15e58c8", "sighting_of_ref": "indicator--0c6135e7-84d3-44c1-a0db-51b54bf9070f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530456c7-1775-435b-847a-4c8ae91dfefc", "sighting_of_ref": "indicator--4a86115b-eef2-4904-b3d0-ebf8118d07da", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2e4154-e490-4e6e-b1c2-ceca36c8a631", "sighting_of_ref": "indicator--4a86115b-eef2-4904-b3d0-ebf8118d07da", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4212ff-9948-4930-9d42-4c5c36320184", "sighting_of_ref": "indicator--cba2314f-e838-4e83-aab4-fe4720d4a326", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c3f9a8-bad1-4f1f-9fa5-fa553810f7d0", "sighting_of_ref": "indicator--61021c1c-3832-4dab-9d5f-c348879bf26c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44118b3c-6e41-40fb-b9e0-4431686f75d7", "sighting_of_ref": "indicator--61021c1c-3832-4dab-9d5f-c348879bf26c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c46e64-711d-400b-9f07-dec54167ade4", "sighting_of_ref": "indicator--bc0f0369-726d-46ea-8272-407284696e72", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0695a961-aab0-40b2-98fd-170468ff6d73", "sighting_of_ref": "indicator--bc0f0369-726d-46ea-8272-407284696e72", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c76e08-7b58-4aad-acc0-3e759c2e472f", "sighting_of_ref": "indicator--98cbfdd3-42eb-46ce-ae11-2e0978d00489", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db78351b-9575-41d1-a549-2aa7b8cd359d", "sighting_of_ref": "indicator--bfc2f78e-360b-4a2a-9157-0b0971a106f9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d9781b-ed42-49df-9028-c0acf154d38c", "sighting_of_ref": "indicator--bfc2f78e-360b-4a2a-9157-0b0971a106f9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3d80ad-4eec-46bd-845c-e638f6cee920", "sighting_of_ref": "indicator--d0b158a2-d747-4e0f-920e-123428b77a18", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfd9ba2-2c8c-40de-a343-8c2b237ad8cb", "sighting_of_ref": "indicator--dc5c7264-b248-4f9d-a1e5-1a15c8a8a3c7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4361792-3f87-48a0-af84-a393b9f044d3", "sighting_of_ref": "indicator--dc5c7264-b248-4f9d-a1e5-1a15c8a8a3c7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24328e78-1053-4ce5-865f-077765317827", "sighting_of_ref": "indicator--2b45d29c-0283-4070-8df0-0dd3f856b932", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7224394f-44c0-4047-8a65-36e6e79d8e99", "sighting_of_ref": "indicator--2b45d29c-0283-4070-8df0-0dd3f856b932", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d910bfe7-7efa-42a4-b9ac-2313abf3fe5d", "sighting_of_ref": "indicator--cd99c87d-e256-41cc-905e-2e0c40f242a3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8638bfbd-f12d-4465-ad5c-48af658954aa", "sighting_of_ref": "indicator--cd99c87d-e256-41cc-905e-2e0c40f242a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9882f1-9e0a-4803-bc99-a0cf54654312", "sighting_of_ref": "indicator--f10aa8ed-09c6-4654-bcbc-254ccc16d245", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7725d07b-ac11-4bd8-87dc-a785e471988f", "sighting_of_ref": "indicator--f10aa8ed-09c6-4654-bcbc-254ccc16d245", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367938b1-507c-4338-8b73-a6b6b035802b", "sighting_of_ref": "indicator--b332bcf1-7cbf-4f0f-b9e6-dddeea8dd022", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb6b9a9-82e9-42f5-8cd2-fecee75bb551", "sighting_of_ref": "indicator--b332bcf1-7cbf-4f0f-b9e6-dddeea8dd022", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c698dfd-7422-4760-9545-481dff96174e", "sighting_of_ref": "indicator--5d582329-5bf7-4f0e-b960-881e9cbfaa7e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194ab334-e69b-4880-ad15-50f744d53139", "sighting_of_ref": "indicator--5d582329-5bf7-4f0e-b960-881e9cbfaa7e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9609ba-ecc4-4215-a495-ee7eec027fed", "sighting_of_ref": "indicator--e84d2ff0-fb53-4e7c-a1c5-19ac5f705b7f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec0022c-759e-4613-a987-804627dd7637", "sighting_of_ref": "indicator--e84d2ff0-fb53-4e7c-a1c5-19ac5f705b7f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546e007b-bb71-498a-973d-a711a1ff8950", "sighting_of_ref": "indicator--4808c407-5aae-44c9-9969-2fc934b6ca95", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34cfbe85-5a21-4b77-909b-0f2d02e05739", "sighting_of_ref": "indicator--4808c407-5aae-44c9-9969-2fc934b6ca95", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b30ea2-32c3-409c-b79c-2d402ffb321c", "sighting_of_ref": "indicator--0aa12b27-8402-4e2a-8f94-1a4de1d1669f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97611670-0bbb-4657-ba1d-e5b487fe1467", "sighting_of_ref": "indicator--aa4b6c67-2ce0-4d19-9d88-0ddbc07e7c06", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960d3eee-f665-439b-995b-4155edf47280", "sighting_of_ref": "indicator--aa4b6c67-2ce0-4d19-9d88-0ddbc07e7c06", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73aa9c8-dd21-4306-900c-260c1f891425", "sighting_of_ref": "indicator--5505a370-7776-402e-911a-eef2198665cd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a21c64-0609-4769-a00f-f30763143bf8", "sighting_of_ref": "indicator--5505a370-7776-402e-911a-eef2198665cd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa31a40-23e8-4cee-947d-7f760f3e4dea", "sighting_of_ref": "indicator--e9eec675-fd7d-4de5-918a-7419788dec81", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5307e9-50c2-4f34-8a54-8fc12a4b7583", "sighting_of_ref": "indicator--e9eec675-fd7d-4de5-918a-7419788dec81", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7835d48f-aac0-4f47-a45b-8e23cb489418", "sighting_of_ref": "indicator--134283fa-f648-4a72-8a5b-7a78f1085104", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae118a2-0cf1-4ebc-8392-831a958de79c", "sighting_of_ref": "indicator--134283fa-f648-4a72-8a5b-7a78f1085104", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950051d9-2622-462c-b2bd-2037945ad9ac", "sighting_of_ref": "indicator--a2a3ff1a-7a38-4cf1-84f9-cc6a1d6d8933", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052e1bbf-b7d7-416e-81cc-f3b9ea11f94e", "sighting_of_ref": "indicator--f57a91fc-21a9-44d8-83e3-d466e5988bb7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefb9e63-0487-4a74-9877-f5f5e7524ca0", "sighting_of_ref": "indicator--f57a91fc-21a9-44d8-83e3-d466e5988bb7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222117ff-9017-48ab-92d6-25cc2bae3620", "sighting_of_ref": "indicator--8e49b7dc-a231-41cc-a5ce-4cff0efa2812", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920e4f09-04ed-43f7-b063-b917d86fcdf5", "sighting_of_ref": "indicator--8e49b7dc-a231-41cc-a5ce-4cff0efa2812", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392278db-d306-47f1-a815-96b00c62e1d1", "sighting_of_ref": "indicator--c036b147-7ab4-4b0e-b821-2da6ff06c4b9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9442f3a-1a9a-4a27-a3bd-4461bbee2743", "sighting_of_ref": "indicator--c036b147-7ab4-4b0e-b821-2da6ff06c4b9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9849b7af-6561-4107-b528-c1368692e62a", "sighting_of_ref": "indicator--251af526-7bc7-4bb2-b195-81623d1cff83", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc43d49-7158-49f1-bf9f-d5cc2041c2af", "sighting_of_ref": "indicator--251af526-7bc7-4bb2-b195-81623d1cff83", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0dc7a2-d6d3-4d46-8207-75b11ffcda6d", "sighting_of_ref": "indicator--3e40665e-ce2a-4837-9747-a7f5ad6f904d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e8e1b5-50ef-44f6-bea5-b26fd9883922", "sighting_of_ref": "indicator--3e40665e-ce2a-4837-9747-a7f5ad6f904d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a371b2-0ed6-45ed-89ed-8768c4aa550c", "sighting_of_ref": "indicator--131af435-f3bc-4177-9384-664c16c53884", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed7bc5f-4fb1-4813-83d4-d8fb469f1c55", "sighting_of_ref": "indicator--131af435-f3bc-4177-9384-664c16c53884", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452a2d46-6f49-44e7-999b-a438ee91b886", "sighting_of_ref": "indicator--02908717-0c9b-41d6-9424-393b839d03c6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69923447-018a-4d91-9f5c-02e777d3e470", "sighting_of_ref": "indicator--c688895c-ecd0-407c-81a1-ad8b6d33baa3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8befdf-02b3-49a2-9530-5fe94f907f0d", "sighting_of_ref": "indicator--c688895c-ecd0-407c-81a1-ad8b6d33baa3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b55f3b-0687-445a-8ebb-be105507f99e", "sighting_of_ref": "indicator--c30ffd5f-49c1-410e-ad53-fd39d74d3143", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a63661-8cce-4b58-adb4-0a0818eeaed0", "sighting_of_ref": "indicator--05556d9c-0537-49d1-b4fa-29c37a8ec67d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0efbcc-0c71-46e0-9907-43a770d0fdf0", "sighting_of_ref": "indicator--a7367a91-71fc-4b40-9a04-79655cd0371b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbc0c59-9220-401a-88cb-2c4b9f6b1980", "sighting_of_ref": "indicator--a7367a91-71fc-4b40-9a04-79655cd0371b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61613ed5-ba13-45b7-bb1c-1019db23b8b7", "sighting_of_ref": "indicator--fa1f37bd-2fa8-4b47-8353-c7f414a72585", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f98aeb-c2bf-444d-b20e-3ef1d8cfce96", "sighting_of_ref": "indicator--fa1f37bd-2fa8-4b47-8353-c7f414a72585", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c64d0aa-b549-4955-89e8-7d1b14421ad9", "sighting_of_ref": "indicator--d36cb6e1-5e09-4614-b853-3bf79897d7e2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b131d85-cc19-48a5-a9d4-662c0b829194", "sighting_of_ref": "indicator--d36cb6e1-5e09-4614-b853-3bf79897d7e2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9730fb-f1a2-4de9-b709-c7381ef4cf6d", "sighting_of_ref": "indicator--bff28baa-7f01-4d56-b1fa-0a200e18b0b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c166164-d0b1-4545-9a66-9b636ce8661f", "sighting_of_ref": "indicator--a85e189f-5d78-4dbd-a7c9-77883cf768ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc73a04-3441-42ff-aeb1-89fa842454ee", "sighting_of_ref": "indicator--d2c7043c-3ed3-4333-b91c-3677b1ee4601", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ba2e99-2b15-475e-8c25-f0b7ed1604b4", "sighting_of_ref": "indicator--d2c7043c-3ed3-4333-b91c-3677b1ee4601", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874f747b-a1bd-450d-96f8-83ea3147ffb4", "sighting_of_ref": "indicator--ac2a69ff-b1fc-45cb-b696-49a9bf97c265", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc8e292-a90b-4ce5-810f-6dcd195f0e44", "sighting_of_ref": "indicator--ac2a69ff-b1fc-45cb-b696-49a9bf97c265", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676d2a72-2702-4d88-b45a-2df3b2809be5", "sighting_of_ref": "indicator--5f2876dc-6094-4132-8de2-4e0ed1b3eef7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555c6f77-2dcb-40d8-857a-f1f5a5eb1e42", "sighting_of_ref": "indicator--c85710ed-a36e-48fd-b62e-a128d99a5474", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3596f2-7067-43e9-b12b-2a4af24c594d", "sighting_of_ref": "indicator--c85710ed-a36e-48fd-b62e-a128d99a5474", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e24404-e571-404b-a326-3f9ca6a3fda3", "sighting_of_ref": "indicator--1172acfe-bd5e-4f3b-adaf-d18af22971b7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ab4622-19e5-40d1-9fe0-2b2585de8021", "sighting_of_ref": "indicator--1172acfe-bd5e-4f3b-adaf-d18af22971b7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c149cf4-f7f6-49a7-9fd7-b0097739ecb1", "sighting_of_ref": "indicator--7931c807-981d-4ded-9b1e-e05f89181209", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915cc842-d57e-49c1-92ff-4c8b152a9855", "sighting_of_ref": "indicator--7931c807-981d-4ded-9b1e-e05f89181209", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94f64ac-186c-4e75-b587-d826edf474ac", "sighting_of_ref": "indicator--1c89b03c-3933-48f7-a2a2-e997bdf66818", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec99cd63-bb7a-4b78-a9d0-22a2a19cb7aa", "sighting_of_ref": "indicator--1c89b03c-3933-48f7-a2a2-e997bdf66818", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcc0458-7c8c-41f6-a0b6-4cd2d65c474f", "sighting_of_ref": "indicator--6185776d-0fe3-4c67-bcc6-c5bc2140eae6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620742ce-4054-41d3-b6f3-20fa461e4cba", "sighting_of_ref": "indicator--6185776d-0fe3-4c67-bcc6-c5bc2140eae6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84c648f-5b1f-4c83-a737-a1b51b81b9c2", "sighting_of_ref": "indicator--a4201115-4c26-4aa5-82f8-8aa182d87d12", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521e61ee-8b5a-44a1-bffd-6940bb1f1aff", "sighting_of_ref": "indicator--a4201115-4c26-4aa5-82f8-8aa182d87d12", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacccdc0-7331-4e9a-ab44-6fff960348cc", "sighting_of_ref": "indicator--88dfab79-8554-4c3e-82a8-1497e8bc4bd8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6daf7d1f-32ef-4ffe-b19a-ce0c17286e02", "sighting_of_ref": "indicator--88dfab79-8554-4c3e-82a8-1497e8bc4bd8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e204327-0d1c-4498-9936-5fa34f0bf9fc", "sighting_of_ref": "indicator--c0f8b954-5147-4f7a-af84-367ccc1fd066", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e6ec73-65fc-472d-afcc-873d7e469970", "sighting_of_ref": "indicator--c0f8b954-5147-4f7a-af84-367ccc1fd066", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4e8a29-63e2-47fb-86cc-9a6d6c08e340", "sighting_of_ref": "indicator--3bef9d15-7a23-482c-a977-e4b9af985615", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28482eb5-7595-484a-997c-c0a7f07bd7a6", "sighting_of_ref": "indicator--3bef9d15-7a23-482c-a977-e4b9af985615", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443f6c6f-61cd-4bc3-b0bd-60e859133ec4", "sighting_of_ref": "indicator--534542fd-2471-49bd-b80d-15f704c95c88", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16409b7-cfb6-42bf-a6b8-6c3e1a22a412", "sighting_of_ref": "indicator--534542fd-2471-49bd-b80d-15f704c95c88", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557104c9-f0bc-43b7-bc75-eed38a406efc", "sighting_of_ref": "indicator--47cfe8d5-2984-4bde-8abb-6518eaf9e1e6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50295ddf-8508-4c2b-922c-e4a7a797d8ff", "sighting_of_ref": "indicator--47cfe8d5-2984-4bde-8abb-6518eaf9e1e6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a73dc2f-613f-4589-80c4-f0871c641f9e", "sighting_of_ref": "indicator--16f0bb51-ccea-484f-9309-5d30f6062ba9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd6c4af-25b6-4329-9b9b-5f4651493e0d", "sighting_of_ref": "indicator--1375367c-d07e-490d-87ec-d26ce28d85c7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992856e6-c1b0-4312-acb5-b52bb7ece932", "sighting_of_ref": "indicator--45c66679-4ea7-426d-8dca-30ec7865f524", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce8642b-b623-4846-91cc-c90d3b312ce9", "sighting_of_ref": "indicator--98d240ad-ad02-4ba9-8e89-5a0330d7c0ec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c73a8d6-1fd9-4e63-9f0a-2fd72d8aed3e", "sighting_of_ref": "indicator--9b9b3b4e-e1e0-440f-bc71-63cd32a95b63", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dda1f7-c09a-43e4-8f4b-b928acb84ac9", "sighting_of_ref": "indicator--03ed0be4-bc05-43e0-9ae2-3a6adb511603", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9174f2-61b3-4edf-848c-9b5e746aa319", "sighting_of_ref": "indicator--d04d6847-f440-4c90-b87e-7dd817a35a96", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e37e73-dd95-4a59-aae5-ad1fea9ccd2f", "sighting_of_ref": "indicator--8fe78302-76ba-4ece-9e47-51a3eab338ad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30f7263-815d-4983-b3f0-0ed15e187b1c", "sighting_of_ref": "indicator--c3fa01c5-5db2-4330-abce-ad638bdc5018", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612d6f53-2060-49d4-9023-326d108b41e5", "sighting_of_ref": "indicator--c3fa01c5-5db2-4330-abce-ad638bdc5018", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e97d80-1176-431b-ab1c-6a0df5895650", "sighting_of_ref": "indicator--57379dad-a88b-49c1-918a-6b0094176c6b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb48860-89e4-478d-8a27-a961131b4342", "sighting_of_ref": "indicator--86c78edb-c48e-4f40-ae80-3029588eabbb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccad3445-d19a-4404-8cbc-fb0b718332f4", "sighting_of_ref": "indicator--86c78edb-c48e-4f40-ae80-3029588eabbb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0046dc9-7701-4816-bf3b-4cc3b96db0bf", "sighting_of_ref": "indicator--e8af8c66-f36d-4812-a732-e84e98c68921", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa40d93c-23ea-45c8-b22b-4db4217295eb", "sighting_of_ref": "indicator--de252560-0891-4884-86f9-6cb74a41a33c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce06105-27b8-4d8b-a34e-840874afbf3b", "sighting_of_ref": "indicator--de252560-0891-4884-86f9-6cb74a41a33c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa1b4f3-e9a9-4420-a36b-9e08a14a3db0", "sighting_of_ref": "indicator--1df4e34c-c576-48b1-8040-a1d0b269fba7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b892ae-cb5d-47d4-8904-35996d05e8ad", "sighting_of_ref": "indicator--d3dc980d-0cdb-49be-8a19-2ef97eadbd9e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdcb86e-881b-47ef-954b-87de908730f8", "sighting_of_ref": "indicator--c4500deb-7fbf-4ee1-95b9-e6d6eefd4505", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6316ee-d843-43af-96e0-dc97728f59c0", "sighting_of_ref": "indicator--c4500deb-7fbf-4ee1-95b9-e6d6eefd4505", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf5fb6f-0095-40b6-96be-7a85f08958dc", "sighting_of_ref": "indicator--e8751300-5d77-4570-86bf-f5f269805e9e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e15ba4-4359-49f9-9002-c889a983ebf9", "sighting_of_ref": "indicator--e8751300-5d77-4570-86bf-f5f269805e9e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a630391-8a17-4d9f-87d8-9f483a956f49", "sighting_of_ref": "indicator--c9b12f8c-1728-4c9b-a615-e3862464d963", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c2552c-aca2-4242-9501-3160e9af3652", "sighting_of_ref": "indicator--c9b12f8c-1728-4c9b-a615-e3862464d963", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c516888-4886-471b-b143-259ee531c41f", "sighting_of_ref": "indicator--54f3bdc9-3b17-4a18-9abd-84f7e4dcd3e7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35c995e-cd86-4bbc-93cd-082a23514d7a", "sighting_of_ref": "indicator--54f3bdc9-3b17-4a18-9abd-84f7e4dcd3e7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fa0de7-9dcf-4c8f-b61d-4e5f2c6ae2d4", "sighting_of_ref": "indicator--6c9ff96e-7394-49d7-9082-2d1f1318120b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc18860-28c4-4ba8-8c27-05072db46286", "sighting_of_ref": "indicator--d445280d-5547-449b-8def-c46196a21690", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4014c60d-f521-47dd-8851-20e2b816ec98", "sighting_of_ref": "indicator--d445280d-5547-449b-8def-c46196a21690", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce5e231-f073-451f-b719-b951804d0709", "sighting_of_ref": "indicator--532d4072-a2db-40e4-a4a5-495e44a4cbb3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8c5d00-b0d4-4fa5-af86-2062efd2a2f4", "sighting_of_ref": "indicator--532d4072-a2db-40e4-a4a5-495e44a4cbb3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd066e5b-c7c5-49ae-8390-4e91bb0ee938", "sighting_of_ref": "indicator--eec769ed-91c6-4968-b6d3-97dcbdd1b13a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd29ff9-9536-4173-a4b0-7e58abd963f9", "sighting_of_ref": "indicator--eec769ed-91c6-4968-b6d3-97dcbdd1b13a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2986b03-7952-4446-b20c-241321526a44", "sighting_of_ref": "indicator--8e92fd26-5ec2-4613-b1a8-1bac4e0d2f4b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad91757a-dc58-402c-b4aa-546a5c648536", "sighting_of_ref": "indicator--8e92fd26-5ec2-4613-b1a8-1bac4e0d2f4b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23622d79-b11d-4e5d-8e32-603a9e48c696", "sighting_of_ref": "indicator--ba5bc91e-8d59-48ce-9884-a57812ee445b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cd5302-fcba-4edf-8704-0902d462ee11", "sighting_of_ref": "indicator--ba5bc91e-8d59-48ce-9884-a57812ee445b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af930db-f264-421a-8183-907505df8cc5", "sighting_of_ref": "indicator--b7a29214-eb8b-4bf0-9df5-09889027e35f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d24073a-4df8-42ac-bd39-45f8fbc11ac0", "sighting_of_ref": "indicator--b7a29214-eb8b-4bf0-9df5-09889027e35f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21097bd7-3bc9-4aa6-b37d-0e75cbee7b39", "sighting_of_ref": "indicator--0a0cd33f-e518-4fe8-a6ea-c1d01e5678f2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096c0b3a-6343-4a0f-a72b-c8470d660255", "sighting_of_ref": "indicator--0a0cd33f-e518-4fe8-a6ea-c1d01e5678f2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c630f33e-fa83-4615-be60-c65d96a0c585", "sighting_of_ref": "indicator--5be770a6-c077-44c5-a27f-e7e408a43534", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdde9d52-397c-4519-a6e7-0b250dbb141e", "sighting_of_ref": "indicator--fe004e99-be8e-4e2d-99e3-6c0b7d45ee90", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400b6cb4-ef13-406d-a101-7151680a6f63", "sighting_of_ref": "indicator--390497a1-9df8-4665-94fb-a6d71fdbb2ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019815e1-a3bc-4c9a-9987-601cb942105a", "sighting_of_ref": "indicator--455b59d6-5308-41b9-a0a2-d99eaeacae7e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee96382-fb70-4411-8717-6fa51804b54b", "sighting_of_ref": "indicator--455b59d6-5308-41b9-a0a2-d99eaeacae7e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81322883-bd97-499f-bd19-283aa43da754", "sighting_of_ref": "indicator--6914fd5d-82d3-4db3-850a-f2152a95f82f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29c5201-fe93-42ce-9c58-68e5d80dc3c0", "sighting_of_ref": "indicator--68744bd0-b2eb-46da-96f6-2187b1d89c20", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90d4373-d216-4a33-820a-b630988d2052", "sighting_of_ref": "indicator--35f5d48d-6efa-47cd-952b-b5b186ab43b3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26bb40e-62c7-4125-adfc-bfc77df146b4", "sighting_of_ref": "indicator--96259e43-214f-4e7e-aaeb-020cb9fb7fc6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d765106-4ef6-4627-84af-69216a02dac8", "sighting_of_ref": "indicator--d0f97a55-e926-48f1-8d9c-a1fcd2856d8a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258d619d-c9b8-41f0-a818-e81fcbedcbcc", "sighting_of_ref": "indicator--34cc50ef-7e39-4088-87c3-2b6cf2e0f98d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ca6938-a2e8-477e-8ce8-6081e1e0d0bf", "sighting_of_ref": "indicator--e850be30-314d-4cf3-a0e9-4c83d17cee8d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5c331f-17fe-47de-a4c5-dd96c0dc4298", "sighting_of_ref": "indicator--ac6a4f09-6818-4b39-a9b9-7920b05b4daf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b41272c-1435-4407-8af7-46b15fe71ff2", "sighting_of_ref": "indicator--ea3c53db-84a6-4ec9-913d-d8bb5b8ab543", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5ed801-8e0f-4206-b742-fdf3b80e456b", "sighting_of_ref": "indicator--67be5cc4-1631-4b17-87d2-04dc97e3c0a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fbe72b-64ef-414e-80b7-430cd9fdd996", "sighting_of_ref": "indicator--46414d0a-365e-42dd-9082-7e34bc24aec9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce937576-66de-4111-876b-9c11d8ff7f9a", "sighting_of_ref": "indicator--c33d0b57-472c-44bb-9792-37b71fab6951", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679893c9-c770-496c-a011-0f041f905736", "sighting_of_ref": "indicator--d831f42e-3719-49d4-b604-f77d9fa350dc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d263234-3d0c-4cf1-b512-9e4fed1feb25", "sighting_of_ref": "indicator--24293d40-d3c9-4300-bec8-88b4f7d07491", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76489a7-635a-4ca0-b73f-30dd2c2b6947", "sighting_of_ref": "indicator--839f3e2d-05dd-4c02-a842-2cdcb26e156a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c762d01b-b7f5-42b0-a97f-d0bd61c66277", "sighting_of_ref": "indicator--c6a3304a-b68a-4aec-8e02-84914886ff79", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b06e00-6226-47bb-87b1-1361d6662b46", "sighting_of_ref": "indicator--01c76876-6ffd-42de-9f7e-1c3d3040c8c8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2758d7f1-b546-4467-8bf2-bd51a370d515", "sighting_of_ref": "indicator--423ef730-b19f-4764-ba90-304346ca9506", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4708a5-9eda-4657-8908-3c5e1e46c8d3", "sighting_of_ref": "indicator--423ef730-b19f-4764-ba90-304346ca9506", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f119efe1-bf9d-4fa5-8aba-e393f8d99b22", "sighting_of_ref": "indicator--b56f4cad-a489-4a97-b986-8cf0b7d3bbaf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71878f0-2c81-4f9a-9fae-4b5a024d0fc9", "sighting_of_ref": "indicator--09abb23f-ba10-4f03-99cd-c8906649f455", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f58937-217a-421a-a028-aac9b98c6c9d", "sighting_of_ref": "indicator--de91149b-b182-4f2b-889b-d549da6445aa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43a5b2c-e895-4400-81d0-82b4670bd6af", "sighting_of_ref": "indicator--7f87680f-7e80-4c63-bf18-3e8e3d18585d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ff9e5f-ca87-4f1e-a7c7-7113a7873f19", "sighting_of_ref": "indicator--7f87680f-7e80-4c63-bf18-3e8e3d18585d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f627293-af57-4b9b-96be-a2fb1ea52292", "sighting_of_ref": "indicator--552fc732-1e97-40fe-aabc-120284153deb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1adae3a-77cc-4e8e-ba69-c1be336e17b3", "sighting_of_ref": "indicator--2c6e8205-2a3b-427f-951f-20cbf7981281", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57246414-702b-434e-8f53-9202a9df3acc", "sighting_of_ref": "indicator--2b7ea426-dac1-4809-8ba3-fbc35597f892", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4944e2f6-fb2e-4c8a-b0b0-9d2f6184c0a2", "sighting_of_ref": "indicator--f3f592d8-14ba-4ea1-bd90-92fcd2804deb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a947da97-4895-4e83-87cc-84f8fe3dddc7", "sighting_of_ref": "indicator--59525915-8de3-4121-9220-c3373a5d45ee", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9942a8b-f8c5-4571-889c-fda85cff5e58", "sighting_of_ref": "indicator--6d73729e-ddd1-4931-b7d7-94639b056219", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ccee03-f3b8-42dd-be54-49d95433cc83", "sighting_of_ref": "indicator--6d73729e-ddd1-4931-b7d7-94639b056219", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8147e7c-fcf5-4444-97eb-16726f4a4847", "sighting_of_ref": "indicator--fea71043-765b-4f42-974c-42f0c4379cc2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08967369-6453-4649-bc34-0a90e126361e", "sighting_of_ref": "indicator--74f63f2b-b0a6-4ef9-af06-07d9256548fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e5e0ad-0965-46bb-ba0c-a47c0544b2cb", "sighting_of_ref": "indicator--9e8ff4cf-a4ed-402f-bfa4-53fff7e5d3e8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37e0835-ad77-469d-80e5-a7989e84e1ef", "sighting_of_ref": "indicator--f3074da5-f6ca-4717-bc36-2e231d59622d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08ff52e-e89f-4ce2-8842-c7ec290eb510", "sighting_of_ref": "indicator--fbbe16ab-302e-4211-b477-e215b303adaf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ba2164-40ce-48b2-966c-0364195a17b3", "sighting_of_ref": "indicator--fbbe16ab-302e-4211-b477-e215b303adaf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210d1b5a-4733-46b0-b3ba-05b2200c62cf", "sighting_of_ref": "indicator--28bbaffa-b226-4508-a26b-59317a63ad3f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d77901-5c92-4a0e-b410-211180ab776f", "sighting_of_ref": "indicator--28bbaffa-b226-4508-a26b-59317a63ad3f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34013a33-a235-4f13-afc6-b3cc01856ceb", "sighting_of_ref": "indicator--70b4d981-53a4-4516-bc17-303cfdf1796a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be477100-56ae-4062-88ee-a1d8d7989956", "sighting_of_ref": "indicator--70b4d981-53a4-4516-bc17-303cfdf1796a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff275dae-8fd0-4fa5-97e3-093019345aa0", "sighting_of_ref": "indicator--13a9abfc-b731-4773-8f6d-52bc305f5a87", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13075808-565d-4b03-9c2e-3c4d61dac539", "sighting_of_ref": "indicator--d9695747-c944-486c-9a6b-d8d6400192e2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4afbec1-e214-49ce-ad4d-ad40249a0524", "sighting_of_ref": "indicator--6493a2b9-ef89-4725-b755-423a6c291beb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bb791b-b1a8-4af7-b9e2-87a4e426c553", "sighting_of_ref": "indicator--6493a2b9-ef89-4725-b755-423a6c291beb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a0b09c-6d01-4f6a-9539-22cc54244145", "sighting_of_ref": "indicator--550e1ab3-7d95-4664-a784-702c2f34b5bf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28484776-e5a8-42a1-8ff5-d64b0de85d1e", "sighting_of_ref": "indicator--550e1ab3-7d95-4664-a784-702c2f34b5bf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c64c36a-61e7-4eea-b1a7-62e698b18a34", "sighting_of_ref": "indicator--6597a6dd-d7a2-42e7-b959-28f9bae2749a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ac67ce-a15d-4504-87cb-f0cd78bc7c83", "sighting_of_ref": "indicator--af2ce600-e560-41a2-ad11-fd047da9f1ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07205296-07cd-4dc0-a808-a46485dc5d0d", "sighting_of_ref": "indicator--4f5739df-17ba-4d7f-82ad-e28dc8338b76", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a06ec6b-fd6b-408b-b1bc-cacdd7382511", "sighting_of_ref": "indicator--fc8e2079-e932-4ce6-81f3-6e5c99b91b28", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5001e8d7-f35c-4e4e-9e62-a0aa020498cc", "sighting_of_ref": "indicator--3372429f-3923-411a-9be3-a2c38d21636b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e845266d-dcc8-4ad9-89f0-7603208822c8", "sighting_of_ref": "indicator--7e61d604-9670-4c8e-bae0-0ce842036b7e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fff8d2-5804-4f63-b2ff-b2bca91e8fe6", "sighting_of_ref": "indicator--7e61d604-9670-4c8e-bae0-0ce842036b7e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d04ea81-2138-4a5a-96de-751400230ffe", "sighting_of_ref": "indicator--2973a093-86a7-455a-bc9b-a769cf763b77", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b112a86c-831c-49d1-bb8e-382f3f83d8e7", "sighting_of_ref": "indicator--82c51b21-569a-491f-8ace-5526b33f9a6b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f0db1d-afcf-4ade-80e0-62c30cb28ba2", "sighting_of_ref": "indicator--aeb70c7b-191e-4b59-b18f-007ea8295107", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5de41e3-1932-4ad1-80b5-ad7d41d0ad83", "sighting_of_ref": "indicator--463cae9a-cecc-4ec3-8de1-dcf7a8a1f3dd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56aaa65-fdd4-4e40-ad4b-d2c0f5783fd3", "sighting_of_ref": "indicator--0fa14a47-0b1d-416f-b018-5b34a3631521", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb1d41f-fa9c-4efb-87c9-6d6a78bdb00b", "sighting_of_ref": "indicator--22cc6700-e333-4845-91fc-ca99f3f69fa8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9444fe62-0023-405c-981f-11d272822f33", "sighting_of_ref": "indicator--52e84023-d4ff-42c9-9d5a-488edfa0ab72", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b003df-c775-4c5e-a95e-1ddd9618a0aa", "sighting_of_ref": "indicator--52e84023-d4ff-42c9-9d5a-488edfa0ab72", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d91e0e3-76b1-4d76-a85b-abc66e1db81c", "sighting_of_ref": "indicator--c2bebd8f-12fd-4973-846e-a9e3125b2f00", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a82e563-b6e4-4300-bfe4-b6391d505d52", "sighting_of_ref": "indicator--e585d86a-ee24-417f-8361-602632f4d79a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9d99e2-a12e-4473-9ae8-ccc7eba16192", "sighting_of_ref": "indicator--22791a3e-7e86-4ef7-b6a8-c3191ec23117", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34548bd3-1743-4305-98fa-9a5e2004c1e4", "sighting_of_ref": "indicator--78b4dfb2-2dfe-4f16-bd33-64e3a992023f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c98d84-57b9-4e1e-bc66-bd562d334066", "sighting_of_ref": "indicator--02403ad8-b176-410a-83c7-a1b907de960d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcca5b62-e423-4794-826f-7fa130d28ee8", "sighting_of_ref": "indicator--0d8ecb41-5a08-42d0-a3f5-36126fdbd7e9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34005ac-6101-46ef-9e10-cb4921e593a5", "sighting_of_ref": "indicator--99db3c49-2035-4e77-a421-699eeeaea1e2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0930b60-9b09-4cc1-8e4e-d18b06e62718", "sighting_of_ref": "indicator--99db3c49-2035-4e77-a421-699eeeaea1e2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a1bb74-1eab-41a7-9e63-ca737be31d41", "sighting_of_ref": "indicator--52808bf8-e224-49bb-92e5-ecf77e7316d0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bca6d1-4788-4637-88fe-e719ef2b9dc3", "sighting_of_ref": "indicator--52808bf8-e224-49bb-92e5-ecf77e7316d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84551488-bf31-41ae-9853-5482bf10481f", "sighting_of_ref": "indicator--9c45ff92-7581-4642-8f37-b0ec866d7cb3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24d7d00-9641-454e-9b14-5ae4fff42d2a", "sighting_of_ref": "indicator--e6ea2f19-5bf4-460f-9714-8eede788b13e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d16ad4a-9b1a-4ea4-891e-9daa987863b1", "sighting_of_ref": "indicator--e6ea2f19-5bf4-460f-9714-8eede788b13e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ce3638-974b-48c9-8c53-dc51f21d1237", "sighting_of_ref": "indicator--b4efe132-4263-4b21-95b3-0886ab3f61f9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c74c2f-f0e2-484c-ada5-7c8e4daa7041", "sighting_of_ref": "indicator--b4efe132-4263-4b21-95b3-0886ab3f61f9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ed08e2-1c0d-4bbb-82c1-9381bb5ed3ce", "sighting_of_ref": "indicator--a4ed1560-f3a7-4f68-ad58-83c407ef78d5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e1ddc8-9bf6-4b44-9ee3-a088b3b725f5", "sighting_of_ref": "indicator--ea28ca61-684b-459f-b50b-a486aa869ecd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03295ff3-f4eb-48ec-9037-8d020e0b84fc", "sighting_of_ref": "indicator--ed964130-4a22-4745-ad47-b33989101f22", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e49bf2-dd65-40c3-a743-0784003d6072", "sighting_of_ref": "indicator--ec2b7fe2-368d-4e13-8022-ccf2e6cf05ee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecde6d49-3a07-40c3-9092-0d0cbf206212", "sighting_of_ref": "indicator--e72f0a76-134a-4f3f-99ca-20a352b9593c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0818558c-6de2-436b-b893-de401a661ee6", "sighting_of_ref": "indicator--e72f0a76-134a-4f3f-99ca-20a352b9593c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6ae065-6988-43e1-a8f8-3685d187d0f1", "sighting_of_ref": "indicator--467eb92b-970e-4ff1-ac0c-f8dc6ac7d87a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6d06f6-8086-472a-93bb-6bfb5e198afd", "sighting_of_ref": "indicator--cef2bb50-ee96-4ac6-a6b6-0c80cdba4ea0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2e09a8-dbf6-48f6-802c-30374b399d07", "sighting_of_ref": "indicator--db25ccfa-94c8-4b9f-917c-024956e10157", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22faaa7d-b3b4-4339-89a4-200e85874124", "sighting_of_ref": "indicator--db25ccfa-94c8-4b9f-917c-024956e10157", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e3033e-60fb-4cfd-bbea-87a2cb6436fd", "sighting_of_ref": "indicator--a8d1714a-d676-43fc-bbbb-c2b7a1631230", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05f1e79-dcbf-46ba-ab69-6ce01cf344a8", "sighting_of_ref": "indicator--a8d1714a-d676-43fc-bbbb-c2b7a1631230", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec03cee-633c-46e0-b96e-8372a217e42f", "sighting_of_ref": "indicator--63bdea47-f01e-4ac9-9fe8-c10b903c9353", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba2cc66-e84d-4e85-978c-6c5ecf444bea", "sighting_of_ref": "indicator--63bdea47-f01e-4ac9-9fe8-c10b903c9353", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b4194f-7832-4c28-a901-1d5e503a4bb8", "sighting_of_ref": "indicator--b337ee56-7f3f-4abd-a392-99dd562ef0b5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193386d3-5f6f-47c2-9b21-f12d22301580", "sighting_of_ref": "indicator--9a7a0faf-05f8-49e4-bf64-c33f334f3ddd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6fef4a-9586-4a93-8516-938fed58d74c", "sighting_of_ref": "indicator--2806d59e-cf68-4abb-a983-64aac913b431", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f89d06-8fc6-45a6-8f3f-1605df26ea0a", "sighting_of_ref": "indicator--2806d59e-cf68-4abb-a983-64aac913b431", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfa9b64-bbb5-470b-84cb-9190c2a96c8c", "sighting_of_ref": "indicator--b7726e74-e02f-4cb4-bb90-dac6355782ee", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f565e64-8488-4678-af8b-fc1ee24d224d", "sighting_of_ref": "indicator--2454aa02-e143-4d6c-97da-17b178a46883", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef1aa8a-94da-4064-864f-141bd7132ca3", "sighting_of_ref": "indicator--8b83ac89-8d68-4f1d-8218-97d3f7b6fa70", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30c773c-c22f-4960-89e6-82776c7876eb", "sighting_of_ref": "indicator--831777fd-d209-4879-b368-28d2607978b0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c381fed1-0e15-4d47-a9aa-23305e88e276", "sighting_of_ref": "indicator--bc71921b-06b5-43f7-bb1a-b62567cd4a13", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1905732-db79-4cb7-a9d1-c54766bb5e4f", "sighting_of_ref": "indicator--60da9032-aea5-4d44-93d0-1f860f47dab7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1aa0aa-6482-4558-ae92-1b33982e521f", "sighting_of_ref": "indicator--05ed37e6-3536-4c64-8906-bef338813c22", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6384987-80c4-444a-87d3-37db923a26de", "sighting_of_ref": "indicator--9f588eb8-a186-4cc9-9153-80995784cd82", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5f1c44-9fb7-46dd-8441-6e54691cb7d4", "sighting_of_ref": "indicator--e0327eef-4660-4d94-8130-b9e3e2efe959", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ff8733-4d10-448c-b08a-9e3d842a00c2", "sighting_of_ref": "indicator--2e13f145-816b-4f31-994e-6fad48331d69", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a151abe-7bfa-4700-b8d4-7461ec2f75ac", "sighting_of_ref": "indicator--f1073e62-57d3-41e0-aed3-2ca4fb54be48", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849ddeca-7f0e-444f-981a-75081fefddd7", "sighting_of_ref": "indicator--1af905d4-78ae-4b34-a88d-7281e1adfa45", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1291cb1e-dc82-44a8-80a2-99d497fddfea", "sighting_of_ref": "indicator--1af905d4-78ae-4b34-a88d-7281e1adfa45", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed7d0a4-8fea-4f78-b001-a63fe5d5441e", "sighting_of_ref": "indicator--20f8b99d-98a9-48ae-af9b-b41b005ce845", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768b7652-9ed9-46d2-aad6-5cea85d92e42", "sighting_of_ref": "indicator--98fb2f59-c5b0-480f-bae1-91c59130ea5d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33dfe08-3409-459e-a150-44f235de42bb", "sighting_of_ref": "indicator--98fb2f59-c5b0-480f-bae1-91c59130ea5d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c55f26-800c-4c7b-bf28-618741fe6987", "sighting_of_ref": "indicator--a3d124a3-eb52-415b-841a-5db5d0182d03", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbe01f6-a31a-45c6-a95b-961fdf15964d", "sighting_of_ref": "indicator--a3d124a3-eb52-415b-841a-5db5d0182d03", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed4b89b-28f6-405f-aca9-f8c1102c05a9", "sighting_of_ref": "indicator--df203bf7-b5b2-4876-a664-3dcffb857351", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56ac472-c6ae-4507-aa96-5d8686ed3e9c", "sighting_of_ref": "indicator--df203bf7-b5b2-4876-a664-3dcffb857351", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c134ac-4661-46ba-9a11-6726e1e39314", "sighting_of_ref": "indicator--a77b4579-87c8-4abb-a5f4-56e206abe273", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01ea2bb-ddee-4809-8c50-ba1ef671e5a8", "sighting_of_ref": "indicator--f58dd107-07e4-479e-b3f3-1c6afb7f3c6b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05cfecf-266f-4473-bc46-1acfcbef7ebc", "sighting_of_ref": "indicator--f58dd107-07e4-479e-b3f3-1c6afb7f3c6b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e04ce2-c7bd-4acf-ba7b-73abbb62893c", "sighting_of_ref": "indicator--ccad8a0d-79fc-4c32-97c1-00a799a0db0c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5b6990-3ebf-4224-a842-e368fa710d41", "sighting_of_ref": "indicator--dce59b38-ec91-4275-9f3e-9dd874c05f98", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d925eed-5be2-423c-b3b2-11681f62c687", "sighting_of_ref": "indicator--996194bc-d719-4402-a7e8-7d82f88f0ab1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a784f004-1235-47f0-a047-c86bf217f715", "sighting_of_ref": "indicator--42e38e1b-9337-4820-b97b-e02f50133d59", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529f6bfd-6838-4552-a6ad-c76992c960ca", "sighting_of_ref": "indicator--42e38e1b-9337-4820-b97b-e02f50133d59", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5ea3f5-7065-43cb-bbfa-a3cbe0b880e3", "sighting_of_ref": "indicator--96465a9a-7e26-4e62-a37a-5a5f4aeb06f7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52510ce-f4c2-41d6-9c9d-5e793674d534", "sighting_of_ref": "indicator--d6f8ac5a-9726-4b6b-8378-404032e189ae", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6750110-52f2-429f-890e-28b1cfce78bd", "sighting_of_ref": "indicator--d6f8ac5a-9726-4b6b-8378-404032e189ae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611b1907-d091-4552-a94e-053bf844fd95", "sighting_of_ref": "indicator--a95cf2b9-e8b7-4fe0-8f65-d9472376f344", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac9aef6-603c-4a5e-a2f1-15fd8e564491", "sighting_of_ref": "indicator--3d0018bf-764c-4709-b1d9-1a9b28314b46", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcf4477-e133-4102-adac-5db2fcb89727", "sighting_of_ref": "indicator--58784a7e-54a6-4842-a83a-a970983b77ff", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b92ca1-8797-4dde-9fa3-31827f14f1a6", "sighting_of_ref": "indicator--59a16236-f59f-48dd-aac0-15f1a27ae03d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6629eb84-11ad-45b1-ad79-1021499f5a2d", "sighting_of_ref": "indicator--8a498e0d-945c-4362-b6b9-c4c45e5f7b12", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6293b5-efc1-47ec-a9fa-0da0541ac154", "sighting_of_ref": "indicator--99fb9137-c833-4fa2-9295-583f27b750ca", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8151e644-a3f7-487c-9186-71dd8b6ca718", "sighting_of_ref": "indicator--bc0f332c-18e3-41d6-aa23-eab0e794508a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94998564-cc9b-4126-8d22-426126996e30", "sighting_of_ref": "indicator--a6b04622-eded-43f6-9c61-a41c0bebe114", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a366491e-83e0-4ab9-8cc2-d7f7264fbc7a", "sighting_of_ref": "indicator--a6b04622-eded-43f6-9c61-a41c0bebe114", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4beb4f-160a-4e10-8cf2-d6336503dd74", "sighting_of_ref": "indicator--332518f7-9344-4ad5-b46f-fb68ef5513c9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ded78c-0144-425d-9591-f6274d06abdc", "sighting_of_ref": "indicator--617595fa-99cd-4bd1-9076-7c001c9d5950", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d85c0f-7a1d-46e1-b42d-7776aa412a01", "sighting_of_ref": "indicator--9af4eb0a-d618-4e25-95d9-19e42873cc0f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46904b35-9268-49c5-bdae-fa91a8770934", "sighting_of_ref": "indicator--438d3c83-4299-433a-92d8-02938a65d6b5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8949be9e-11e2-4e32-90d5-9dfb25811b96", "sighting_of_ref": "indicator--9bd7a1a5-e1d3-45cd-a404-192e079b3922", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd49dbf6-8896-4866-b1d3-50a9ad8633c6", "sighting_of_ref": "indicator--506a797e-1e6f-4e1f-951f-7ce4cf38f4da", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c34cc79-ab59-4f68-894a-b819fd2b2937", "sighting_of_ref": "indicator--6ab9a649-0d89-4104-a8c0-a4176e039467", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d30c798-15fe-48df-9dcb-2a77ac6689e7", "sighting_of_ref": "indicator--01cb8244-a517-4ad3-bfc0-7143744087a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c186bd1c-c56b-4f97-bc02-e491fd31ae48", "sighting_of_ref": "indicator--e2080a30-ab89-4ca9-b1dc-92c93f354c76", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e9bce8-2bb2-4acb-aa49-eab3dae6dc7b", "sighting_of_ref": "indicator--b8a9776c-4d17-4344-8ae6-a8fc37c94ef9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd799997-d51b-4606-b4e3-4c92996127c5", "sighting_of_ref": "indicator--62c63608-21bf-42a4-8c08-fac4af1ef0da", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a59a2a-8fa2-4638-9969-2a88e4475bec", "sighting_of_ref": "indicator--842c0606-272a-4b91-91e4-6bc8588bf5b5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d60b45-16f6-4bc8-8c45-85134e25f305", "sighting_of_ref": "indicator--92a2d8d4-e342-4d16-9b7f-452c35dc7f3e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60af8ea1-923f-40dc-9044-5afb94b6bc50", "sighting_of_ref": "indicator--354dd0e9-7f4e-47d2-8430-e939acece80a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e9ad93-9274-4cfb-a720-117bd0b0222e", "sighting_of_ref": "indicator--7b7d68ee-f99a-4bef-94ea-c0b8fb1dc36c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f90084-ab90-4c89-b479-e2d9a14d8c27", "sighting_of_ref": "indicator--31948045-02fd-461f-a6e9-8fe5abd00e23", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e6c1c1-8f5a-462d-ba03-7f2e92476a23", "sighting_of_ref": "indicator--c97fe489-5f7b-4602-b64e-e3aabd972389", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592ce443-8ad9-4366-acde-4bcf9557aa63", "sighting_of_ref": "indicator--d21ef560-439b-40f2-a39b-025ed6ea5467", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dddcb51-7c6a-44b8-8f7c-e1222e12ee59", "sighting_of_ref": "indicator--ba9ba096-45ac-4510-84ea-88951f2baf19", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad170fda-78a8-47d6-9d97-4b4cf3801b7f", "sighting_of_ref": "indicator--b4038371-f5f9-485a-b849-25d5c9a7e45e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16224fa5-b74c-4ced-9ff9-1625bf6f5faa", "sighting_of_ref": "indicator--2f8a95cc-dba8-49b2-bf49-b0d4abde7b5f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87cf878-6c88-4340-b63b-0a516045b0bf", "sighting_of_ref": "indicator--6baa94d8-8334-46b2-878a-beffdcf9ceed", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16432043-e8de-423a-8726-ecb441dca4d3", "sighting_of_ref": "indicator--e3d195b4-19e2-40df-aa23-74cb8503f02e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298ecb19-bf19-45f5-823e-17f9a0cdc38c", "sighting_of_ref": "indicator--72a1de9b-540a-49f2-a9e4-3cd81e505c8e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e16fa4d-f2e3-43b2-864a-a238550f085e", "sighting_of_ref": "indicator--72a1de9b-540a-49f2-a9e4-3cd81e505c8e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360684e1-ba3b-4b2c-bd23-40da05b25046", "sighting_of_ref": "indicator--155fc406-b600-4598-967c-c9d66583cf6f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e06d5e0-c706-4fb8-87dc-a38a7784377b", "sighting_of_ref": "indicator--15259327-7025-4b60-8017-6abca967f549", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92da6cc7-9d81-45c4-99f9-3ae7870b5c9c", "sighting_of_ref": "indicator--de0fff43-a766-4679-94a5-7fcb2d516bf4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3e2e7d-f0be-4896-a1cb-e924ff49f82b", "sighting_of_ref": "indicator--c49242c7-41bb-47ff-ae6e-5e6cb7ea4371", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de37dd8b-4cfe-4f8b-a676-7a537a431d75", "sighting_of_ref": "indicator--fd49f82d-2501-4c49-8457-510bc0a7b524", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34820651-c3de-40a8-b3aa-ee9b4f813185", "sighting_of_ref": "indicator--8f80eef7-e192-454c-9f7a-cf9b8f4a86ad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ced666-0ce8-4c01-948a-4a3283b591c5", "sighting_of_ref": "indicator--2bc40971-3bbb-42a9-bff0-4862c9dba8e0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7101ed-6902-421b-b897-27e59aa39f03", "sighting_of_ref": "indicator--082120cc-d190-4eee-88cf-29f457e8f702", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d687cab-1bf8-4f7b-91e7-1c7d9a3a6192", "sighting_of_ref": "indicator--373f86c8-d5cf-4030-8318-5ff98f6a5d03", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfd99c7-cb65-4ccc-96ba-5ed10ddf0083", "sighting_of_ref": "indicator--2bdb81dc-f4e7-4fe5-a8d5-6443a9e754a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbbbdf7-b3fc-41b5-b291-bca4adbaed53", "sighting_of_ref": "indicator--ccce645c-b53f-41f5-bdb1-d5d006fe58c2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63816366-9f85-48d4-9486-0db52b9911ac", "sighting_of_ref": "indicator--5a549f2e-8956-45ec-8eec-a63b3545e6a9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc600da3-6936-4aa2-a271-01563b257c9c", "sighting_of_ref": "indicator--0c139981-3b4d-4221-aed5-c7852e0388b8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bc424b-ba44-458a-99c5-19c688bd67fb", "sighting_of_ref": "indicator--0c139981-3b4d-4221-aed5-c7852e0388b8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9ed4d6-d921-4893-b18e-5b704de0072f", "sighting_of_ref": "indicator--ec963f82-d21b-4ab1-84a2-da52e3e30689", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e581e89e-dddd-48d7-a772-f60de6630ca3", "sighting_of_ref": "indicator--ec963f82-d21b-4ab1-84a2-da52e3e30689", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46832029-7338-4ca5-bed1-1991da95f8de", "sighting_of_ref": "indicator--9f21ea2c-b9de-4b91-9f03-b87380db0d40", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1a0874-590d-4e9e-901b-5ff065539d9a", "sighting_of_ref": "indicator--9f21ea2c-b9de-4b91-9f03-b87380db0d40", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd26a297-0086-4e99-bfc9-378897956707", "sighting_of_ref": "indicator--9e45b653-da57-40a8-a74a-aac5d460486b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5342b092-7e8f-4e10-b5f4-ffa7db256671", "sighting_of_ref": "indicator--9e45b653-da57-40a8-a74a-aac5d460486b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba584a5-34b2-4fa0-ae6e-4a659b8f7c06", "sighting_of_ref": "indicator--d53b7ccc-0429-4123-badb-470fa5d08937", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac1d09f-fa6a-4e72-9b67-e833a01a17d5", "sighting_of_ref": "indicator--9645f20d-f8b1-44de-87ec-5285da2894d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0291f2-e32a-44ae-a7c8-1bdcf4141247", "sighting_of_ref": "indicator--abe0de74-62c2-4972-aad7-ad2e6aea3ef5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbeda486-6866-42ea-bce5-2e6652f4fa60", "sighting_of_ref": "indicator--e95a6ee9-bed1-4112-b6fb-366dad183781", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f3f605-1b12-422e-9475-674c07c61016", "sighting_of_ref": "indicator--64dfc274-5cea-4f14-b744-d637e344391b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caac2de5-edb8-4595-ade4-d1a3b226a977", "sighting_of_ref": "indicator--8c917034-3b74-45df-8428-e53061688ddf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a70691a-293f-4ba6-8f2f-0d37e1f41043", "sighting_of_ref": "indicator--751907c4-0708-43b9-8a53-3a9e9f2f5f65", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6568443-75e0-48ff-997a-bfbb62da1f31", "sighting_of_ref": "indicator--45520a86-dcfa-4ceb-98f3-0cac06d3d371", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff3f03e-0c70-4e3a-8d72-b5bd4d81bbbf", "sighting_of_ref": "indicator--fd20c3ba-94c0-4408-94e5-77a64060bd72", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ad35f6-4c7a-462c-b277-b1e6a0128dde", "sighting_of_ref": "indicator--fd20c3ba-94c0-4408-94e5-77a64060bd72", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6012dfc-3508-4179-a6cd-2907029b05db", "sighting_of_ref": "indicator--9defc6ed-4b97-4f7e-a50e-deefefd2c31d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b099b3c6-fae5-416c-88f1-4e5656e2e2ac", "sighting_of_ref": "indicator--69165807-06ed-46a3-9b0c-6b1acc522638", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b252bd42-a7ac-447d-a9e0-300699858fef", "sighting_of_ref": "indicator--e70b22cb-8825-4abc-ac0d-5613299df951", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004d63ca-27f9-4496-9e59-2f98c2c98e64", "sighting_of_ref": "indicator--f08ebccf-483f-405e-9de8-54cbfc14f194", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadca485-a6d0-4901-9354-bdf8c5d9066f", "sighting_of_ref": "indicator--acf52854-8ba5-4c76-bdca-4d32b2d0219b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67571a35-5124-4367-8197-10779a66109f", "sighting_of_ref": "indicator--c8979210-44c0-4678-b4e2-f8c133f24a71", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeec2ed9-66b6-4e66-bcd1-70039a0fe2d1", "sighting_of_ref": "indicator--176b472e-6cbf-4172-a532-9c66d5b39981", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6384da97-8df4-4b5f-aaf2-ff0708f36d06", "sighting_of_ref": "indicator--b7efa836-804d-40c1-86d9-5683540101db", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e77a1a3-277a-405e-aa72-ecf9e14197da", "sighting_of_ref": "indicator--9b96d49f-a487-49b6-a357-0ced4d30d850", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09e436b-b212-4957-9bf6-662dc9a5f11b", "sighting_of_ref": "indicator--434d35cd-3f6f-4f1f-9c28-d1114ef49bf5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24182ed-55eb-4258-afb9-8e4f99a7ac63", "sighting_of_ref": "indicator--35d8d31b-549c-4902-b50c-a8148bb1ec8a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2233069d-b175-4de5-9aaa-878e35c73451", "sighting_of_ref": "indicator--d4a966dd-95be-4c2d-bebb-3a45c09dc99e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0195508e-8ef1-4984-b5e6-c9c3342ac3bf", "sighting_of_ref": "indicator--d5242ded-4a36-4457-920b-4d4d51853f6b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1684483d-20db-46f0-86d7-ce2552d1c03d", "sighting_of_ref": "indicator--d5242ded-4a36-4457-920b-4d4d51853f6b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ea45fb-2de7-4f0f-ac73-d2dba68ed618", "sighting_of_ref": "indicator--431a49b3-f589-428a-84b8-ae4e8258fadd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d637ee-b175-4815-9656-358bc36df008", "sighting_of_ref": "indicator--55ad4ad8-e792-4559-90c8-cf7c13eb374d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a288eb20-c29a-414a-ac0f-2c112e08e632", "sighting_of_ref": "indicator--52f6085c-df0f-47c6-b08d-b1dd2f56dce7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c231d2-abfe-4200-8bae-5422403a78cf", "sighting_of_ref": "indicator--d8774fde-bb1c-4944-ad70-bd0db5f892b9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c549ad-0fac-4537-90af-e9b7a70714f7", "sighting_of_ref": "indicator--98e2420a-36bb-4964-82c2-2097922e6347", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c6bb6d-aaa3-4357-96e7-e7515b4b313d", "sighting_of_ref": "indicator--e1547804-3a5b-4a8b-810f-d722b8e512e7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f514b5-80f2-4b3a-b834-e5d08d9b526c", "sighting_of_ref": "indicator--b5407a12-4dab-4c5e-937f-a6e24d418698", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a6513b-6079-4ffb-a7be-c7a288ce0e76", "sighting_of_ref": "indicator--14590167-8bab-4052-b8cc-3813f9a2a572", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab666ee6-f9a0-4485-a6bf-2a8359ffc35e", "sighting_of_ref": "indicator--f2b4bdba-c954-4c6f-adb2-8a8033d62713", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a97819-8e44-4895-b48b-ca85205630bb", "sighting_of_ref": "indicator--a3caf389-3972-4bb9-a7cc-1b7a1d3f9d64", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa0c7ca-73a2-4abb-8788-c41bdbd314dc", "sighting_of_ref": "indicator--b2607a50-b78f-4c03-8237-ff3011bdd09f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e90b864-1d4d-4962-9da6-805495732966", "sighting_of_ref": "indicator--8c302218-3eb6-4e25-8b0b-f5378f946833", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543c1996-0bfb-4b0b-bbe2-357d05dbe4b8", "sighting_of_ref": "indicator--8c1aad63-f6f5-4710-aeeb-dfade681a0b3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639ec1e5-cb0d-490f-bc1c-27e4ef1525e6", "sighting_of_ref": "indicator--ab53fbf2-8813-41cd-8568-0d10a7127abe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c768a3-f617-45dc-990f-115429efd9a9", "sighting_of_ref": "indicator--b33cb985-f127-4deb-a122-3cd5eef51a17", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bba93aa-7e4a-448f-9e33-01c0e6e51807", "sighting_of_ref": "indicator--b33cb985-f127-4deb-a122-3cd5eef51a17", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600f625b-085f-4f32-825f-27c7d9895736", "sighting_of_ref": "indicator--16e96e35-8601-47a6-bed8-3b6a4c5e2162", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50eebea-32f3-4f83-8cf8-901c6ad8798d", "sighting_of_ref": "indicator--f4bb277d-89c8-4382-9bab-88e2b369fefd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76cffd2-87da-4d9f-a6ea-9ad91394911c", "sighting_of_ref": "indicator--9ad4357f-9612-4595-9279-a4c9f815ef71", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0417b7e0-67e4-4914-ac62-047998efac33", "sighting_of_ref": "indicator--c77db753-6240-422e-be7c-b8613d709127", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc34c048-c14d-4a7b-bf81-019d6ed0fa94", "sighting_of_ref": "indicator--c77db753-6240-422e-be7c-b8613d709127", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051bb922-7b45-4d76-b2b4-fff4c3c697cc", "sighting_of_ref": "indicator--4cd399c9-d9c4-496e-bc56-9227a52d1483", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a85e1ca-b0e8-4653-bc59-6d03405e2453", "sighting_of_ref": "indicator--0c9c4b3c-0b6d-4800-bf60-c0b5bc4441c5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7204c9a-0246-489e-8422-176f99a924d4", "sighting_of_ref": "indicator--a3ea03c0-5a3e-4a3e-bc22-247ef187b974", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a778fb10-10ae-42b3-b77d-7a999760e61f", "sighting_of_ref": "indicator--f3b192f7-c970-438e-b63d-652d49708656", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb397d0-a7d0-4547-a12e-534f64401a58", "sighting_of_ref": "indicator--3b41ecfc-aa9d-4955-8a80-749950e04171", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ffc596-7596-4c4f-8305-69701ad81f43", "sighting_of_ref": "indicator--33b589e1-9c69-453c-bd0c-f6b0ae637d7b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227a143c-9e44-497d-b3f4-d3ae9f5337c6", "sighting_of_ref": "indicator--2eefcbfd-d54f-4eaa-97df-6cc154315677", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5702e200-40a7-4511-ac0a-ed4284fc4474", "sighting_of_ref": "indicator--c313e83e-4dad-4c2c-999d-d10ed95c3bb7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebab2bca-8c01-4a61-b428-d5a1bb6b87a7", "sighting_of_ref": "indicator--b1ac2f87-fb15-40a8-8bd7-6b2524a90e60", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6be056-601e-4633-9061-ef948cd58ae2", "sighting_of_ref": "indicator--fae053a3-d62c-46cd-b942-f877b8c7d319", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15922887-8f26-4eea-8e52-6e36c7dfb062", "sighting_of_ref": "indicator--f6539df9-d2cd-4221-b7f7-0d4f2e22a3c1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e015d25c-07b6-450e-a22b-884456868ea7", "sighting_of_ref": "indicator--729ab423-cba5-4a5c-a759-cf1afd78682e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3fd1de-0533-4936-8f0f-d217b104713d", "sighting_of_ref": "indicator--109820e1-3d06-402d-9d8c-4ccaa9068216", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d1f500-adb6-41f7-9636-a5afc9d76d5b", "sighting_of_ref": "indicator--1db120b8-0573-42fb-b4ec-1dff5cc507ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcd2130-f879-46ad-ab4b-def08f13cd39", "sighting_of_ref": "indicator--3b4ffa13-ea62-413f-8a6a-3921440d9ff3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25568dfd-9dfa-457b-8ac7-a66c678ccba2", "sighting_of_ref": "indicator--f4e563e1-41ef-457d-8a31-16bb75025a5d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df16f0ee-2a17-48eb-8bca-ba3298c7a78d", "sighting_of_ref": "indicator--f4e563e1-41ef-457d-8a31-16bb75025a5d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db271e0-3b7d-4aca-9a05-53b8cc3d0503", "sighting_of_ref": "indicator--7e62ffd3-be3e-45f8-99a9-d281a62a165c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b45313f-f075-445b-94f5-a64e604f62b6", "sighting_of_ref": "indicator--f5cd36b7-0ef6-4946-87d8-b4d4309efd25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1a4438-1c17-464b-8197-2d6f2cd434ed", "sighting_of_ref": "indicator--414cdafe-9ad1-4f92-9ee3-cde5766d595d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36417a5-3fa2-4519-976a-66ffa2e7dacb", "sighting_of_ref": "indicator--05ab9651-00ab-44a9-995d-669620c7b695", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d22995b-9241-4bad-8834-7068b514d682", "sighting_of_ref": "indicator--96db3ca4-e4ba-4f9e-b50b-7024190c2e65", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cae8a3-c113-45b7-8741-e6db3a5d715b", "sighting_of_ref": "indicator--cc7d9da2-e9e4-4d58-9ad9-b43aefbe218e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c2e5e8-987a-44e5-ab86-ca25af1c6bd7", "sighting_of_ref": "indicator--8d824a76-7489-4bb4-8ebd-905d8780220b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832d8762-cc5f-46d9-9721-468e302a56e9", "sighting_of_ref": "indicator--43905199-1842-473e-9fae-e06e40971d08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a39558-8a19-4d49-9015-a9298da84da6", "sighting_of_ref": "indicator--5b81ef35-1a24-4c71-817c-3ba77aeb3881", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2428e7-58c5-4415-b11b-514242ed66a4", "sighting_of_ref": "indicator--7d504255-678a-460a-a9cd-8914c4d35f5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322cc991-dca2-4b1f-821b-4fbee64bc0fb", "sighting_of_ref": "indicator--acc9b018-3fec-48f7-8f42-6adc990aaaaa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55880f8-49c2-4112-abd8-0007d1b49c74", "sighting_of_ref": "indicator--a4cb8eb5-5f4c-4f3d-971f-19c472dfd88c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf6ec07-351c-4560-bf6f-7b723b150596", "sighting_of_ref": "indicator--1b4ce0e1-de1f-47dc-94c9-153793a06deb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a50bab4-7096-41b7-8815-02dcf9fff16b", "sighting_of_ref": "indicator--5515ede2-6313-41dc-88cf-8e61c751e672", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e8cf32-bdde-4cdf-8f32-3b49d9e31eb9", "sighting_of_ref": "indicator--37933a44-39fd-440c-a3a7-f3b6e388ff16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acfdccb-bdf5-45c5-96d1-9c591629cd6f", "sighting_of_ref": "indicator--589541c6-3149-4344-9961-023435dee07f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3a8cdb-615c-4e53-9882-74763aef9cf3", "sighting_of_ref": "indicator--f6c9248f-1ae7-4b33-b19d-6b2f65a1cdd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35351937-f036-456f-beb8-1d433940f712", "sighting_of_ref": "indicator--cd21313b-8f62-49e2-8833-fdb0db710282", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c32dfe-0f34-4870-8b9f-b99414bd4a09", "sighting_of_ref": "indicator--ca7841a9-06e6-4fe6-9f3e-5aec9e5ae34d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1198412d-0b5a-4bd1-b863-4f07f6c46db7", "sighting_of_ref": "indicator--4b95b2ae-ab87-45a5-913d-a1ae7392b2a3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d17cc38-6b37-4daa-9c54-e8e1d31494d2", "sighting_of_ref": "indicator--7ca086bf-cb7e-4756-aedf-d53b7f360764", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a474d1-0455-4b83-b78d-9024dd4d0f84", "sighting_of_ref": "indicator--e43494df-c509-41ed-93e1-5c1feedaa1b4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7b5a93-4bf8-4c47-b4f7-a669ce5e5be5", "sighting_of_ref": "indicator--7573aeaf-75d6-4f70-a493-bd7fd1385443", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738c459f-d810-45a8-9049-949d0b30a618", "sighting_of_ref": "indicator--7573aeaf-75d6-4f70-a493-bd7fd1385443", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2859aede-5acb-45f3-829e-6f9652d0d0a5", "sighting_of_ref": "indicator--674e8041-b1de-41f4-8070-36d76895c616", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c99f2e-e006-4c54-a346-fca70753869b", "sighting_of_ref": "indicator--03160142-11fe-4c61-a783-58b7dcfb6754", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28af65ba-6739-416a-bd07-fb0644211e0f", "sighting_of_ref": "indicator--00eaafb5-7a4b-44a2-9316-af24c5fa184b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54c35c3-ef6f-43a7-b538-e6891e8acde0", "sighting_of_ref": "indicator--00eaafb5-7a4b-44a2-9316-af24c5fa184b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75013dfa-fa36-4642-acd3-6fe663ac6034", "sighting_of_ref": "indicator--ed2cb4c2-aed8-416a-94ec-e46474a79d52", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f5ea40-13dd-4e50-8f76-dd530bb26d41", "sighting_of_ref": "indicator--963b7e08-a17a-44ef-a94b-93df2b180a52", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95cbf8c-fd31-4dc0-9cd5-d99be5352356", "sighting_of_ref": "indicator--35f52add-66d4-4e03-8a1d-bed462dcbb46", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d53f8b-2b6f-4ee3-8f18-eca403d85461", "sighting_of_ref": "indicator--35f52add-66d4-4e03-8a1d-bed462dcbb46", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43753fa1-67bc-4c48-bd77-94070cb316ca", "sighting_of_ref": "indicator--48b52bb9-d002-4514-b2fb-644a5cf86461", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5abc1f-b376-4114-ae8d-2880f4094457", "sighting_of_ref": "indicator--48b52bb9-d002-4514-b2fb-644a5cf86461", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a49a7f-f66e-4fe0-980d-5d91606a7f1c", "sighting_of_ref": "indicator--8d9ab0e6-baa9-41b8-bd36-54c24c1b4f90", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffb923c-2d53-401e-9d09-0ae449aef0f9", "sighting_of_ref": "indicator--1229433c-17ce-4cdc-9bb2-cf9fb9e6b2b8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9299304b-f101-4e19-ac98-82f0dd135572", "sighting_of_ref": "indicator--14725d27-219c-480f-9a65-106e2b0e0d03", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af92146-6f08-40bb-9636-e1dbb877ce80", "sighting_of_ref": "indicator--71d4d0b6-f6e1-4316-9327-6f1ee501db79", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb9b1f7-27a8-4a42-9f53-7adba563927c", "sighting_of_ref": "indicator--884976c1-bd1f-4578-9b0b-f89f43428376", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779f6e2a-e34c-4f3b-8240-51cb310297a7", "sighting_of_ref": "indicator--2ba14978-9af2-465b-94a9-03125cc00773", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108eacbb-0742-4640-8cf3-bf6bff8c5afb", "sighting_of_ref": "indicator--11d1b961-58ff-476d-90cb-e5ea3ec3d1d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fe4546-a7aa-4b07-94fc-12d36e9255d2", "sighting_of_ref": "indicator--0e075644-c6e6-427a-acea-af746077132b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c5df75-c9ae-4ae7-ab40-782acd22411a", "sighting_of_ref": "indicator--646dce86-ade1-4ff8-a663-ad62a93aed9f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e231c9-7041-41d7-b527-5c08849477b1", "sighting_of_ref": "indicator--18fef139-bf6f-4265-81dd-a1eab77b5b6e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1665da5f-5701-402a-91f9-592d8a86a0cb", "sighting_of_ref": "indicator--1e68cbcd-f402-4579-b72a-da482af8bf02", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec7ace3-1285-4ba4-a836-b60784f0b4e8", "sighting_of_ref": "indicator--4eb5bc97-8ecd-43c8-8783-b0592e7a188b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2aa4c57-f597-4995-99f7-79ebb2084690", "sighting_of_ref": "indicator--b303a070-bf21-4dfd-aef5-231ed48cb393", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240d9e3f-316c-403d-98d0-e0ca3e65390f", "sighting_of_ref": "indicator--be90007e-04fd-4ad5-9795-9475bbaa7950", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb02f384-032b-4126-ba31-b29f276e7b6a", "sighting_of_ref": "indicator--902d3632-778a-4fb7-a94f-9a86bad1f727", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b163a07b-a025-46dc-9f0a-7bfe156d8a64", "sighting_of_ref": "indicator--41bc0c0f-edbe-4b00-bb34-502f16ea419d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c846b32-51ae-4065-a034-843b80aa7dc8", "sighting_of_ref": "indicator--4e4058dc-a1bb-4453-b967-7650a4566a54", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bab478-996f-4629-befe-6abe16a305f6", "sighting_of_ref": "indicator--da91c5db-e808-4251-8702-4c0dc334fdd6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78201896-58f2-41b3-ade1-b23c7c5fea2e", "sighting_of_ref": "indicator--f3ead1dd-aca1-4e02-9916-cf3f8590fbdc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a431b89-0d8e-4e2c-b42b-b42e1cb80ae2", "sighting_of_ref": "indicator--a4d57f15-2da0-4164-8eb9-dff9670d39e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3ffd9e-cf89-4a86-a4e0-1bab357f41ea", "sighting_of_ref": "indicator--5eb58fa2-ebb5-4c1f-9d1b-e9e72c543542", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68655e3-00cd-4b97-a764-f69434cb597e", "sighting_of_ref": "indicator--78b6f7fc-5b0f-43ff-8646-42850e917437", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ea3910-3dc9-4002-81bc-b68cdfc8e2c2", "sighting_of_ref": "indicator--fc17783d-1ed8-4e02-8fc6-5b5c10453557", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c429be93-0e3e-4864-9349-1b2aae3fa331", "sighting_of_ref": "indicator--7fed373b-018b-45fb-add7-73a91316478e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4a076f-e55a-45c4-be3d-ccd6d446aba7", "sighting_of_ref": "indicator--5b6577ea-d13c-4ea3-9a34-6783fa9db03a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e517eb-9a74-493f-87af-0a9a7d21a1be", "sighting_of_ref": "indicator--7558f9d3-aef6-426a-81c3-0bd973f8a144", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ff657a-7e75-4c11-9e30-34cce72e6ff9", "sighting_of_ref": "indicator--b0579e03-db5f-4b63-911e-b96a90daf7cb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9643b199-ecee-4938-b77d-94fe4894f638", "sighting_of_ref": "indicator--b87699b5-377c-48bc-94d2-ef5c98c00296", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388ac603-818e-4d88-9eb6-55e8a92bc2f4", "sighting_of_ref": "indicator--c0bc3c8f-ee8d-4d0a-89d5-e45c98d9d587", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c205dfa-cc67-40b0-a250-f39d99eb78d0", "sighting_of_ref": "indicator--f0614d8a-ac3a-49a6-8934-b2b88d0cf9d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32df496a-68c6-4864-8c86-70e83804b587", "sighting_of_ref": "indicator--0c6906b3-596a-4640-8c17-313be14ce0c5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00658277-57f5-4b15-b447-38737ca6395e", "sighting_of_ref": "indicator--61650d94-41a6-4d98-a5f7-9388b24700e9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331505c1-3aba-4a68-b9d5-5ef2e83224af", "sighting_of_ref": "indicator--9d2fda08-b877-4873-9860-9fd3b7f28cf3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9225344-b58e-42a4-b8cd-0412824d3a1d", "sighting_of_ref": "indicator--c4ae5c5b-c9bb-4f23-b730-437be58d9d41", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f225f321-57c8-4966-a280-1a490b2afdd9", "sighting_of_ref": "indicator--f11409f2-66dc-447f-8ece-f81416c5268c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0526690-dc1f-481c-aa0f-76aea6d2d003", "sighting_of_ref": "indicator--e0c6b946-3292-4a93-b4bb-6786557322fa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9576ab7-4410-45ac-98a4-198037688943", "sighting_of_ref": "indicator--b5f90a7a-c720-431f-a8f6-fbd887edb657", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371146d2-1dd8-413a-9752-ee0740ab6536", "sighting_of_ref": "indicator--401a1cfb-7592-46c6-9b78-d06edbb0d215", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8529e633-b1f0-4b1b-b6df-70c1856f1087", "sighting_of_ref": "indicator--a3725b11-2ee3-4b98-906a-d2f9f7d5c358", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6e7dd4-0729-48e6-9e45-ade2f21aa6ae", "sighting_of_ref": "indicator--ab98f37c-275d-456f-a2b5-917a8550748e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad263acc-7530-4e61-9a81-37153f388bd1", "sighting_of_ref": "indicator--b5a507cf-2213-4932-8fb4-2660f748c9a9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c53a62a-97ad-4ce0-9c51-aff230922ba6", "sighting_of_ref": "indicator--55481872-fad8-47e9-9791-9e75bae57c62", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f310e14-5802-49c6-a9db-29ad8f56f08e", "sighting_of_ref": "indicator--e2f38dc1-ed2e-4b4c-9a05-0e805b9bd11c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5323978c-7287-445c-a3b8-455dd97c20e5", "sighting_of_ref": "indicator--3ac3fc5a-9746-46ea-8560-2badfbd6c49d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa44e840-9dea-4ab9-b28e-e0f83beaf143", "sighting_of_ref": "indicator--65ce9a64-ed37-4fbd-b27b-019bb3a3f856", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106e6a42-a7bd-4492-a5b8-dad877c6d95a", "sighting_of_ref": "indicator--ef35cefa-ed71-453f-8d2b-f5e5d10ead13", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0b83d9-eb04-4383-ba26-f6de9462ecb0", "sighting_of_ref": "indicator--095f8d65-94c3-49aa-a716-e600840ed780", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574705d8-881e-4896-a8f4-5a52a131fd88", "sighting_of_ref": "indicator--adcb9e99-eced-4cd3-9552-0265d35f772a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3c6c31-592e-4e32-8ad1-a6d8b23bc3cd", "sighting_of_ref": "indicator--94010a11-27c2-47f7-9b7a-8cd7ad5d5d57", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800c3467-aa4b-4a5b-96c8-3c4e5bdb7f90", "sighting_of_ref": "indicator--881163bf-084f-47d4-9df5-6bb9c5017fbd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee474cf1-8ff6-4da1-ac31-403b5ca68a75", "sighting_of_ref": "indicator--96f8e205-b4af-48a6-a357-2ef92f0ba30c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37c3975-dacf-483e-9804-808ac06e74a4", "sighting_of_ref": "indicator--beb3b365-a963-4b65-9481-7b278e02700f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7cc72a-60da-4c9e-bdbb-e48e69feac30", "sighting_of_ref": "indicator--00fc49ec-dfde-4651-8a40-8c2ce4d2f6f0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacef165-c6e9-4911-976d-734e3e75db40", "sighting_of_ref": "indicator--068ad51c-fbb2-47f7-b269-cb6c761dfe59", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac63f58-0da9-4cb4-bd6e-afa14a8104c1", "sighting_of_ref": "indicator--44ddedae-209a-43e2-af4f-4b475886a1f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7d8d12-9ccd-46d8-af96-7bf2adce6b18", "sighting_of_ref": "indicator--8bf63e5d-c5dd-42b1-8922-7d4a4a14a2ce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0172b396-fe7a-42fb-a368-97913a01b6c9", "sighting_of_ref": "indicator--ed8b1b4c-e065-4121-8f19-6f858e13658f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f0cf20-6757-494c-a125-e4399a233743", "sighting_of_ref": "indicator--0b8d1698-6f37-410a-9334-7a8eef10586f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a96731-bdb3-4652-96ae-bb1da66c3564", "sighting_of_ref": "indicator--8746ab65-e88b-4d9b-a89a-e7e1b66b42d1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a509f620-1129-443e-b9c3-801d79a2d2b3", "sighting_of_ref": "indicator--70412212-9b06-426a-ab7d-6064e968f88a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7093c79-316c-4ddb-a3b5-83721c37d3c0", "sighting_of_ref": "indicator--ae7da8b1-89b4-4b82-89cf-a47adf38f6fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba9efab-2c8a-4036-8e7d-3217ab0b0508", "sighting_of_ref": "indicator--43c56dc3-6cc4-4e2b-8044-5790cbdd5dfa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e641453b-dfcf-4077-9a9a-7cf40efade6d", "sighting_of_ref": "indicator--45969232-d58d-475f-9a52-304dd9d40563", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14328b5-ffff-4542-9642-22ee718fa86a", "sighting_of_ref": "indicator--3b7cb6c4-258d-4f3c-bd0a-5c8467163fe6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdc613c-656a-42ab-b042-49a321c0c32b", "sighting_of_ref": "indicator--eb626cc8-df2f-43e5-bfd2-cc9233664ed7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea342bc-c518-4ea1-85a6-0ec23dbf1379", "sighting_of_ref": "indicator--18799b15-92b3-4e2b-91eb-cff4cae8b6f0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81bdf1e-9f81-4fa3-8d29-dff63a178f3a", "sighting_of_ref": "indicator--5d6164c0-6bd5-4ab1-9760-453e63b26ef5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b449a9c6-025b-42d7-b20f-23abe2ac6fb8", "sighting_of_ref": "indicator--6499f080-c690-463e-9798-31d2db20a33e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c81e50b-7964-4341-a7ce-4b62142374ef", "sighting_of_ref": "indicator--ccb0489a-0b07-47f5-aa62-8dfee10179c4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db39bb26-e2b6-4c8d-8556-a2e576cb8488", "sighting_of_ref": "indicator--9ba5d15d-fc7f-4420-8659-6e85f6bf4b4a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f5f271-780f-4a01-aac6-0dd67454bed0", "sighting_of_ref": "indicator--a63ff807-10a6-4ecf-91af-984371ebb086", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c09cb1-2296-4a91-b1d0-04d5665624a3", "sighting_of_ref": "indicator--15e6edbf-27d3-4479-a824-db8d75d3c8c7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855e195c-b40e-4d03-a719-6c4c81239040", "sighting_of_ref": "indicator--cd1cce4f-a51d-463b-aa9e-d0ad792e24f1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2b924e-aac4-4dea-8003-35335773a8e8", "sighting_of_ref": "indicator--49c73bac-5b61-410e-bdc1-ba7ab63f4d09", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590c815d-5b0c-4320-b118-e87cf1c6a10c", "sighting_of_ref": "indicator--791057a7-6527-4cc6-be21-5c0b130bb663", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832cac2b-6f11-43cf-9c5e-90ea754cf19d", "sighting_of_ref": "indicator--f83b900e-81e5-49d3-bba3-32556881c4c6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e180d340-260a-4b83-a56c-0fe61a536817", "sighting_of_ref": "indicator--de4db865-117e-4967-b832-88a2b2058a12", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf4d318-6e4f-4e8a-85a5-7000eb524181", "sighting_of_ref": "indicator--772e64c5-5898-4ec9-92ca-2a332da42b5d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df169f3-5aec-43c2-9b6b-5f23d4b296e2", "sighting_of_ref": "indicator--fb8a747a-d17f-44ce-a4ef-4d4bea3f79d9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6dc94d-a9a8-401e-80a6-96d8042c062d", "sighting_of_ref": "indicator--cb2956fa-2f5c-46ee-8321-c4db6cb67603", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adea25de-4fa7-4511-a373-8604af10fe7d", "sighting_of_ref": "indicator--598689fc-dbbb-45fb-8be2-4c8d51639664", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03eb856-c9c8-417c-b7a5-189d0533b955", "sighting_of_ref": "indicator--d1ed59b1-8109-4030-ba21-fbb738d43ea8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574b1443-a0e7-496f-abb3-0b82a328cd86", "sighting_of_ref": "indicator--d8578ddf-0d14-4aa4-bf88-1e08fbd10248", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb29d38-f19b-4f71-a750-c5f1b1a05058", "sighting_of_ref": "indicator--4b888701-404c-40cd-8b04-d08d6990cefe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b7e343-7677-4a0d-bc11-ef0d5dd4651c", "sighting_of_ref": "indicator--24e8e7ee-a544-4266-852f-7cb53fb405b5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427ec963-bd97-4c4e-9502-d7651fe03f52", "sighting_of_ref": "indicator--ade5acaf-1bc1-44a1-8bf6-2d8b3445222d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7106023b-4396-4500-b314-d8f288b3a7bc", "sighting_of_ref": "indicator--04c3fb53-fa59-4001-b3f8-360a04e4cc00", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af2eb4b-0ff3-4390-9b89-c237fad5dd7a", "sighting_of_ref": "indicator--4620bcd6-ecd6-4bee-b2d3-85fe1815a8e8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bfa24d-8bbf-4fee-a1ca-41e4c9e803a8", "sighting_of_ref": "indicator--57754d2b-2973-459f-aaf4-0410a167456c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40283a5-52be-454b-ad91-4cbf8e1faa94", "sighting_of_ref": "indicator--e2c08f4b-237e-4194-bedc-768e33a40b97", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e3a4b1-f0ea-4493-9155-0081e20d2811", "sighting_of_ref": "indicator--84f4dc08-2af0-43ab-bbf4-21b0dd7cfa9d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff973c2-c7e9-4449-9fdf-09f7609d904c", "sighting_of_ref": "indicator--63ffc4bb-7039-435d-8cfc-94101e0bb739", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b3ee30-e39e-40b6-8461-659626598d75", "sighting_of_ref": "indicator--a2faa5d7-a216-40c4-9a35-fa4a531c7db6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06ee8ac-05c1-4170-a22f-66f52e1ec438", "sighting_of_ref": "indicator--fe4ae6ce-1da0-4505-b32c-722502140edc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007ef070-80f8-4f92-b4ff-f8f97e31a5b7", "sighting_of_ref": "indicator--fcaebcda-a822-4b6f-8168-c14b9fd46f32", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3174bd35-01c2-4c53-8071-7657f2a470dd", "sighting_of_ref": "indicator--0cebe521-e89c-44df-8e93-8346e91068f5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa33b88-b39c-4822-9213-90f89a4fd8ed", "sighting_of_ref": "indicator--757d86ee-5c08-4dfb-9e12-7ac5245136ee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493a7370-5060-4110-ad2f-b9a9f978122d", "sighting_of_ref": "indicator--cb5b5ed9-1824-46db-a416-ffc234f8892a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff7b835-95c1-4616-8d40-9cf113e78d7d", "sighting_of_ref": "indicator--c344b8e5-34df-442f-97a5-596858e7b034", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a3dc8c-266b-4045-a54d-d374d6d98b21", "sighting_of_ref": "indicator--3f19b237-e13c-4deb-91d6-e7f8fa7dc395", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834466a5-1dab-4273-8bfa-89df18fef872", "sighting_of_ref": "indicator--717be8a3-ab7d-46dd-af18-15f1861a7365", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed02c42-520f-4fbc-a445-c435cbf146b2", "sighting_of_ref": "indicator--1424faad-5685-4e03-a415-335b1eab2e63", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f90ffa-b01a-4021-a6fc-87ccba48dc1f", "sighting_of_ref": "indicator--a5084ef7-9c0c-4fd5-be41-8b20660c8b12", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c11439-341c-4f6b-bc4f-158777cfe915", "sighting_of_ref": "indicator--1f313dc3-948f-48b3-9f9d-f0c9cef7ed8f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda87d7d-649f-4b9b-bfee-5d6f6c378948", "sighting_of_ref": "indicator--26e38a18-5ab0-43b2-b196-d920b50d2550", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a6b0a8-99d0-4278-9c63-e913bb1dc95f", "sighting_of_ref": "indicator--3b70f4c8-6ae1-4bb0-9641-e2341af25cf1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e28335-7b15-4fc5-9514-9663e9b414c7", "sighting_of_ref": "indicator--e02b5a96-3d57-4a7c-9c8a-4e70960d63e4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840d2cdf-76c9-4628-aae0-76f377e86912", "sighting_of_ref": "indicator--09aa6787-e360-489e-9598-39fa8ccc6101", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e120a7fb-f3ef-4b0f-b5a3-f9f11918142d", "sighting_of_ref": "indicator--506e1eb3-a578-4639-9e43-1bd9c810b036", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5320e760-82d7-4452-b4d8-337c1aa27e10", "sighting_of_ref": "indicator--d4b00da4-722a-45ba-8358-05c49fec89c6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be99317c-927d-4cc6-b6a4-d5852475a2e9", "sighting_of_ref": "indicator--65813b90-2889-47c2-8eb0-ff668da76699", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19bc661e-9f4d-44ee-b275-1adc3dcfbdc7", "sighting_of_ref": "indicator--2eed1c2a-fe52-44ce-9bb6-444c251dead7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14af18a8-292d-4f78-9587-c6a37e6250c4", "sighting_of_ref": "indicator--1eef1149-a4f6-4f6b-84df-56f93d6b4dbf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc0d6f4-1165-4c99-a2e3-450b66202b5a", "sighting_of_ref": "indicator--3d1d56c9-32e5-4986-90b3-84492b807fdd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6050680c-4e53-4826-a8a0-230e3256881a", "sighting_of_ref": "indicator--715bcb71-b462-4bc1-be4c-589061cbba4c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af5a656-8b92-42d6-9bb2-65bf1b3c38a5", "sighting_of_ref": "indicator--53ea3c90-6169-43d9-81ad-70f7062869d7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e853a722-240a-49b1-b26a-dd25ea93e530", "sighting_of_ref": "indicator--e7ee5e8c-eaa6-444f-9393-539bf2e2cb2a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c0f49a-bc15-4e68-aebe-bc3fa035ad37", "sighting_of_ref": "indicator--6267dd26-6626-4f5f-82cb-ad35bbd4a4d1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437f0518-b026-422d-80d6-6437dd79e362", "sighting_of_ref": "indicator--3e34b06d-d05f-4b92-b598-94c01b8d0929", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bb93f7-f8d5-4fb4-a724-b7836b1f40ee", "sighting_of_ref": "indicator--9c1708ad-e23b-4b71-8692-52ddb5782dae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6f01e4-3fe7-4991-9a3c-68dadc615c45", "sighting_of_ref": "indicator--6e6f5acf-45ca-41b4-8782-c2e2c811bfb0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a834e4-1045-4f58-949b-32d862cbaf52", "sighting_of_ref": "indicator--ce04792e-aaba-4697-88cd-a56d523a323b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df76894-0566-4673-9c64-ab1fdd2942a0", "sighting_of_ref": "indicator--277b2237-3448-4234-8cde-c8e75e121ce2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fbbb15-eb33-49fa-948a-2b6a1112c42b", "sighting_of_ref": "indicator--d59a76a9-8b07-4c72-a802-75b6c6ccff37", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c961bfc5-7e45-432e-8f6a-770788588e7b", "sighting_of_ref": "indicator--36f9dee4-257e-4279-8a9e-1898818b0bb1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7062c8-9fa1-441b-8d0a-f6d48392c34b", "sighting_of_ref": "indicator--8165bf15-9394-4856-afcd-193b28c56f4a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba23a64-ed49-485a-8b56-d898077139c1", "sighting_of_ref": "indicator--67ef6b49-edd1-4acc-90a9-f18f21f426ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8beeeda-1816-4b94-a0b5-9b84549d191a", "sighting_of_ref": "indicator--0b21d83d-b6fc-4b9c-9221-4f36f035c47a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd7996f-e57f-4850-8eb2-99c0aec339ec", "sighting_of_ref": "indicator--0b21d83d-b6fc-4b9c-9221-4f36f035c47a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57fb2fb-bef4-445c-aae9-435bcb6714f7", "sighting_of_ref": "indicator--9d10a52c-e5e0-440a-aa2d-03646ebea569", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3449fe1-d3ae-4fe4-a5b5-da37115b61c0", "sighting_of_ref": "indicator--9d10a52c-e5e0-440a-aa2d-03646ebea569", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0234a507-3c31-478f-a941-2424957038dc", "sighting_of_ref": "indicator--1f500b77-415f-4ba6-9086-7e4218f8f80c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd993c3-b638-4ecf-81e2-9cb820d71b1c", "sighting_of_ref": "indicator--c81c231c-6055-4321-bd3d-4d8947116fec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37004f4f-ac1e-4bb7-a757-423272bc8d36", "sighting_of_ref": "indicator--6d6df80d-c8a5-4c04-b7d0-1c718ae5671b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceca1d27-3f7f-46cc-bf1a-b3de63cd2100", "sighting_of_ref": "indicator--92d4d6d5-1d21-49db-8e38-344236c50db6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1753a6-6271-4c11-bec6-167093410b4a", "sighting_of_ref": "indicator--742fe598-9d29-49de-8226-afc7470a5ff3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc74ddf6-891a-4f77-b2b3-333bd2b39686", "sighting_of_ref": "indicator--1756d024-10ba-4128-97a0-b7cda8ca1808", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc96b23a-e379-4f78-9960-e9143817c12a", "sighting_of_ref": "indicator--cc031710-52c5-4a2d-81d2-ce99771d6028", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0d6218-4e1f-458f-a6b9-9bde20fc02ba", "sighting_of_ref": "indicator--cfb0ed24-ab7f-4a84-8672-b50091821e0c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19136a9c-cb14-42dd-ae6e-8e8d0747fe4e", "sighting_of_ref": "indicator--e1a9d518-7f90-47ee-92e9-fddba6471810", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fd5ab4-6807-4763-8816-f87fa8d04a2e", "sighting_of_ref": "indicator--ed6b3809-54d9-44b6-839b-9552f3fd3b28", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc8b812-9292-4a8e-96ac-edb122899535", "sighting_of_ref": "indicator--f8f04f61-03fb-4fbd-8194-fdd23d96fc04", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a496ed-4fd1-4a5d-8d0d-b01394ba30b8", "sighting_of_ref": "indicator--ded4e8b4-acce-4b65-b3c4-7ed8e7917d8c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a35427-6eeb-4bf7-aa59-8e46a6d530ca", "sighting_of_ref": "indicator--ded4e8b4-acce-4b65-b3c4-7ed8e7917d8c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd8386d-b8e0-4bd9-bfe6-35416a2da237", "sighting_of_ref": "indicator--4d830758-a30e-4b87-ace9-01fdf5376afb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1da7918-056e-42a5-91bb-6efa1acf37fc", "sighting_of_ref": "indicator--6823cc92-ca4c-4c7d-9fdd-f12628b64f2b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619219db-199d-4f1c-8699-7d6f788dac67", "sighting_of_ref": "indicator--92bc935e-5e41-42a5-8592-58ea13dc6508", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a43cc04-024f-44f5-8be2-7868317e5063", "sighting_of_ref": "indicator--92bc935e-5e41-42a5-8592-58ea13dc6508", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f40d46-2130-4973-8801-0285e672cf5e", "sighting_of_ref": "indicator--19d34dc6-3ab8-4cdc-8616-34387ae2ade4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6307276c-056a-491e-9a32-d0f687abe9d5", "sighting_of_ref": "indicator--19d34dc6-3ab8-4cdc-8616-34387ae2ade4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f8dde9-af72-4637-aa86-55025f14e376", "sighting_of_ref": "indicator--d0292337-c0ef-40b9-9a4e-6bc53e9e51a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a553f6b4-b8c2-4294-a925-8e0ded762fe2", "sighting_of_ref": "indicator--fb409623-80db-463f-90e2-7daa7518c831", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837143d1-875a-4b24-815b-e9f48eaee290", "sighting_of_ref": "indicator--d2df66a2-146e-4eb6-a1a2-863f9e39d70f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6fa213-9b5d-4fef-a3e1-27defa308ecb", "sighting_of_ref": "indicator--13e00dce-c046-4c69-9561-c40e3069d097", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30eaca4-8888-45ed-ab86-e4ce5463251f", "sighting_of_ref": "indicator--4e55eddf-efb9-4ddc-9f81-9878a0427854", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b9584c-2545-4930-bfe8-4011242d13f0", "sighting_of_ref": "indicator--7302c531-42cf-4143-80d0-8ac470f1f138", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b33f254-1a8c-4dfc-bc4b-fe0bf3a4db72", "sighting_of_ref": "indicator--7302c531-42cf-4143-80d0-8ac470f1f138", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c31b117-ee4c-4437-95e7-da1e8df0f61e", "sighting_of_ref": "indicator--f30d13d7-69fa-4e27-bedf-88c964f84198", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10a8f0e-cabd-4135-a0ca-ff5face73791", "sighting_of_ref": "indicator--f496bd2d-37a3-44a2-af45-7ab0b2f909f2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcdbebc-9b17-4cea-b3f5-fda781ca77e9", "sighting_of_ref": "indicator--a1f190c4-01b8-475c-b249-564ee9231e65", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a610aa1-d690-4cf6-b0f9-e252236be7aa", "sighting_of_ref": "indicator--dcbb954a-1573-4a5b-ad94-4cb5ecd53d7f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b287bdd-4959-4a4f-a34d-692e8a28fb42", "sighting_of_ref": "indicator--48fe8fcb-7d1c-4fe5-b50a-e09d54c4164f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0a106e-33d6-487b-b59b-c966d8812681", "sighting_of_ref": "indicator--4b3ddbad-804d-403c-b12e-23670438afa0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44caa924-721f-41ab-b42f-54cab6c606d3", "sighting_of_ref": "indicator--4b3ddbad-804d-403c-b12e-23670438afa0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fe9a03-5cbb-40f4-9da7-27b92523f645", "sighting_of_ref": "indicator--f9497eb2-d243-4b77-a739-4f5f84d88f66", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0978298-4427-49db-9e93-34b734251da8", "sighting_of_ref": "indicator--45dff009-6626-4a7d-a0d8-ff4560d468a0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883fde0f-94b5-4501-8e68-9ea545fc6128", "sighting_of_ref": "indicator--0515a102-b7fa-4344-a6d4-fcb0ad46f4e2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8603929f-ed4a-419d-9fe5-713783cd96da", "sighting_of_ref": "indicator--0ee31c98-38a8-4973-9162-83ad5dcd4020", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe013242-343e-4a51-92dd-7639a24def68", "sighting_of_ref": "indicator--7b190432-f68b-4686-967f-6e2236e2b4c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95ad57b-9a3a-4144-b206-53603ce621e8", "sighting_of_ref": "indicator--6bee5531-4677-4b18-9acb-1562eb08693f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2913ef-b403-420a-ad0c-85c6a50759a2", "sighting_of_ref": "indicator--30ae70cc-066c-4a08-a788-f85d498a0cd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f720318-508b-4830-9433-3275cacd309c", "sighting_of_ref": "indicator--cc15054a-7dbe-4ca2-bf2e-8126abbfaccd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e938a25c-bbe1-4aaf-b876-72705c2d9d22", "sighting_of_ref": "indicator--8c8ba344-7fda-458b-b5c9-fd733e6b1071", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5054ff78-c252-4cfa-8a31-43a46fa87af9", "sighting_of_ref": "indicator--487cba91-177b-4cde-bbd9-ed557ed35c34", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2d733c-8679-44da-8178-901223574211", "sighting_of_ref": "indicator--8f9211a1-0e00-4718-a7c9-0adda3544731", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf063821-0d6d-4741-84f5-6890ee5f38db", "sighting_of_ref": "indicator--8f9211a1-0e00-4718-a7c9-0adda3544731", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9566f140-3386-4bb8-8d6b-e57096e005e9", "sighting_of_ref": "indicator--6ba64d46-df86-4c99-9568-5b79fda87ba1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dfa97a-598d-4805-83bc-6b1c5caeb2fe", "sighting_of_ref": "indicator--6ba64d46-df86-4c99-9568-5b79fda87ba1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55caf92-0ff4-4bcc-b2ec-e5929df6819c", "sighting_of_ref": "indicator--0159c007-f945-4892-88f3-c7545a597bb2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9b6799-78cf-45b8-bd4d-edfe72c37bd6", "sighting_of_ref": "indicator--fc7067f5-2e7e-4444-91ee-567e379f3152", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e306460-f987-4bec-8e7b-2d0ef59949e4", "sighting_of_ref": "indicator--fc7067f5-2e7e-4444-91ee-567e379f3152", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d15ae2-3280-47d7-80d5-97edbf689dab", "sighting_of_ref": "indicator--5005345f-9e92-4778-a063-dc62b7498594", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c367d60-2f50-4818-8a0f-0b7b72d71b65", "sighting_of_ref": "indicator--720c6228-f9e2-4b59-8924-2a85f4b9a17a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202a81fe-2a94-4e0d-b3ea-e675c7cc0f69", "sighting_of_ref": "indicator--720c6228-f9e2-4b59-8924-2a85f4b9a17a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee674d6-bd38-49e6-96bf-2f404ed91657", "sighting_of_ref": "indicator--10e6f515-d5e7-40f8-8260-d6649c1ce0d5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47708066-70f2-4d54-bacf-584c3c2ccb1c", "sighting_of_ref": "indicator--10e6f515-d5e7-40f8-8260-d6649c1ce0d5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966cb1bb-01e7-4b6a-bad4-ce5ccd21decd", "sighting_of_ref": "indicator--14f57383-7149-4dc9-a157-b2f400c29277", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd27f5f-07a5-455d-9683-2be5db572417", "sighting_of_ref": "indicator--22695db4-658f-45bc-94a6-4c5d5cb1f76f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d6cf5c-778d-454b-a792-4850328dbaa1", "sighting_of_ref": "indicator--e626a393-a518-4857-a6f4-91cd4a624bef", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d58372e-5148-4c3d-affd-6d08c688f319", "sighting_of_ref": "indicator--63e8628d-22a3-49a9-a2c2-a58af3f06049", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d87d1ab-656c-4fa3-b78a-f76c12337fa3", "sighting_of_ref": "indicator--63e8628d-22a3-49a9-a2c2-a58af3f06049", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02cf2974-33e9-4b90-9bbf-235c10cdb80b", "sighting_of_ref": "indicator--b90961b2-5e8c-4a37-82a4-5b4d26e38653", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be690b9e-e1fc-4bdd-8aa1-ef6ce833ceab", "sighting_of_ref": "indicator--b90961b2-5e8c-4a37-82a4-5b4d26e38653", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6735a599-3d3c-4464-9c21-8a3c5c5c2363", "sighting_of_ref": "indicator--1738e1a7-6a64-4ea3-b6f2-aaca67a0a307", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0261901-4c65-4966-ad5a-f915f8426d76", "sighting_of_ref": "indicator--95b08de8-bf15-42b2-a580-8e2c99f2f3d1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e18eda-7781-4085-b94f-97900dfcf41d", "sighting_of_ref": "indicator--95b08de8-bf15-42b2-a580-8e2c99f2f3d1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15169eb-34ba-44cf-9246-1a8406e944a1", "sighting_of_ref": "indicator--b6f2dd2c-9d68-4e8f-9c56-cd5ec0d42170", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f092f41-9647-4def-8d79-eaad142cf1b1", "sighting_of_ref": "indicator--79b169f1-35ec-4fb6-b60e-91d562370120", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c2131c-55ff-4eb4-a28a-69113b6e80df", "sighting_of_ref": "indicator--157b8a7c-6ca3-48f8-99e1-7545ab3da47f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58ecc85-a174-447d-8571-f37d873225de", "sighting_of_ref": "indicator--37a59dd8-be4a-4686-a5f0-6eaa4ce7d58a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1979484-0253-48b0-9dd4-285bc1f6447c", "sighting_of_ref": "indicator--07e9188c-5237-4868-bbde-e41434fe8a7a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea22b76-f141-4836-a439-9ffe66b9300d", "sighting_of_ref": "indicator--fc2474fd-0cc1-4f75-b1d2-3697d30b0352", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d234735-fa48-4dd1-a758-fdde88057156", "sighting_of_ref": "indicator--fc2474fd-0cc1-4f75-b1d2-3697d30b0352", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e663bf-a77c-40f8-aa42-febd35ddcf9c", "sighting_of_ref": "indicator--12b5d24e-a854-4ea3-b46e-36f8decb58f5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a234fd7-28ea-4ae3-90b6-5f75b94517d6", "sighting_of_ref": "indicator--12b5d24e-a854-4ea3-b46e-36f8decb58f5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fbcce1-02f4-4feb-8fc9-a74a9eeff802", "sighting_of_ref": "indicator--1e9b3b74-2202-4af0-ad94-1378a279f40c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a87459-c5f8-44fe-acf9-f15dfb1e43dc", "sighting_of_ref": "indicator--4e9c094b-9737-48f7-8fde-e33b4005b93e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c2d2db-dd52-43b5-acb1-22e638592f23", "sighting_of_ref": "indicator--96f657e7-d6ed-4371-a9d2-3f65e57a32d5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f017ba8-55f6-4bbf-b13a-e81b5001ac23", "sighting_of_ref": "indicator--96f657e7-d6ed-4371-a9d2-3f65e57a32d5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177801af-5091-46b4-b4fc-6de7cc81823a", "sighting_of_ref": "indicator--cbe27c47-a31b-4747-809f-50740b53d349", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da095e9-4f0d-4058-ba41-134784115902", "sighting_of_ref": "indicator--cbe27c47-a31b-4747-809f-50740b53d349", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2deebbe8-600b-4500-8202-c8aff790d5ca", "sighting_of_ref": "indicator--b64b32c0-dee3-4601-b893-f7b938966aeb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faedb002-cf61-4806-b49c-0a3c041dc2b5", "sighting_of_ref": "indicator--03b5b312-ea7c-4aec-abd6-ff8aae2ef851", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305473c4-d3fa-46e6-bf55-1b120c91ceb3", "sighting_of_ref": "indicator--03b5b312-ea7c-4aec-abd6-ff8aae2ef851", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d433b21-fff9-4e63-913d-4e66a84a89c4", "sighting_of_ref": "indicator--c43c7b2c-0068-4642-a4b1-b9dc130a807f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51869b61-5203-42ff-8025-68f898e60f77", "sighting_of_ref": "indicator--bba271e5-635d-46a1-8a7e-3a3fa99bbdaf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8c9ea7-6e04-48da-a868-f0f563779cbd", "sighting_of_ref": "indicator--fa06f82c-f4c3-4216-a94f-4a8fdcd46300", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6b7eba-12b5-45e9-a41b-147a897cd8a5", "sighting_of_ref": "indicator--dd9ebdee-c178-401f-bfed-598bbba15ae3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d3f764-8f7a-4b8a-b663-a372a1909a23", "sighting_of_ref": "indicator--0f741f65-dba7-41e3-9552-1b2dc0f56fa7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2475f2c4-297e-4664-977c-519bd8e04c06", "sighting_of_ref": "indicator--fcf13228-972d-4a17-9a16-35bc0394a90b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4ddd3b-18b2-40e0-a1c3-ffc58d672b24", "sighting_of_ref": "indicator--e8cb76bc-4755-4012-ab3f-0169fc72147b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d72f0a-d8ba-4222-bff3-b6660f9714c5", "sighting_of_ref": "indicator--73ec298e-0030-4b5c-bd76-b0bfc265ef50", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4d9574-c0cf-443a-92da-5fdf8e901439", "sighting_of_ref": "indicator--2c2d7b72-54f0-4778-babc-0430357034c8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61f918b-bcdd-45bd-b377-a2eb242798b1", "sighting_of_ref": "indicator--6551d0a1-9881-4355-a9e1-9c5eb49470b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea54d7d3-6be7-4e70-af95-b2f639d11331", "sighting_of_ref": "indicator--dfd3f910-c68c-44d9-8e75-a00ba90a6a8b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cca9d2-49c5-4504-baa4-9f5a001342ce", "sighting_of_ref": "indicator--2751e137-c0e5-42bd-a59d-c6c5b177f92d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1c570c-4d89-4e8f-b127-02b45900d418", "sighting_of_ref": "indicator--e8b421a9-6050-4364-84ac-2262e1d80e61", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf491d7-87ac-4f04-ae24-ea46cc665edf", "sighting_of_ref": "indicator--2e62d11f-d846-4aad-98ab-65559426edc7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907a69c3-a0f8-4f22-81b5-4e114a80173c", "sighting_of_ref": "indicator--bc5908c4-b972-4d8d-805e-06329afae3d6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0b6761-6c49-49bd-b039-48bdcbcec230", "sighting_of_ref": "indicator--f2cc5ba2-ef1a-41b6-993d-2e03b798a6a2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162f3ffb-e16e-4ac4-987e-578f6bb44c43", "sighting_of_ref": "indicator--5b55528b-f119-4f4a-9917-ca62d65163c6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0040b28-9465-4e99-be11-518fd0d3f1bd", "sighting_of_ref": "indicator--fd276f49-98b1-4553-88ef-3c642b528fdc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f102134-9722-404b-be7a-93c6face4595", "sighting_of_ref": "indicator--b342aee0-6e35-4d1b-8c24-30eb3d5870e0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdc5b1c-723c-432e-996c-cda234ff0709", "sighting_of_ref": "indicator--bd32efbe-f24e-4f20-a44f-e3ccc74a772f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b931c7-19f8-45f0-a4fa-bfadc4a5314b", "sighting_of_ref": "indicator--572f37a9-af9f-4d3c-9eaf-431926b4ba4a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd1f9b4-28c2-4c73-8ae7-3dfa2272e59a", "sighting_of_ref": "indicator--0ccb26cb-831b-4c14-afaf-46a1c281e268", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2c2f3f-1520-446e-bd2a-376d41ee55db", "sighting_of_ref": "indicator--9ca23d6b-8a28-474d-a89b-6ca6b25eb7ed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248cc429-fdca-4b31-9090-68dcb866980a", "sighting_of_ref": "indicator--fc24e596-327c-42ca-9f2e-f24f5b589e74", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ffb87a-c837-4b91-90f4-9452670731fd", "sighting_of_ref": "indicator--4d67e8a2-dcc5-45c7-a892-cc02edeede6f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b46f574-9e89-45f4-a608-3bfcf8ffac34", "sighting_of_ref": "indicator--b37bf26a-12c2-41f5-ba27-79257b49eaaa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42333153-b30c-4735-bce4-60ddbbe70e62", "sighting_of_ref": "indicator--0b11c2f2-adc5-4b6b-83b7-2017cbb19faf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c98e44-9a7a-400e-86a1-f3696c9c0cf6", "sighting_of_ref": "indicator--3a13067b-eacf-4630-ba75-adcbeaf21634", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfa69f1-de62-486d-b471-213aaaa04163", "sighting_of_ref": "indicator--111f3ad8-4df9-4c73-9d53-f950f6e172de", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ff7d15-54e2-438f-b564-ff91773850d0", "sighting_of_ref": "indicator--c880807d-5f3b-482c-bf3a-d610acbcde23", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320a56a6-e9a6-4ad8-b35d-77b13ff79ea3", "sighting_of_ref": "indicator--6bc09448-ca7d-4ed1-ad2a-dd77cdaf93bb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53695cb9-a98c-4df4-8938-a78211e948c6", "sighting_of_ref": "indicator--5dffecb2-7e46-47f5-9957-e84541fbfd8d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fce240-d17e-49fb-816f-f0baff7ebb2a", "sighting_of_ref": "indicator--f36be6d8-aadd-41da-8f0e-1d90e6d52b65", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981424e7-4e67-48b9-8e5d-2394b9bbc4ca", "sighting_of_ref": "indicator--4d227f8f-12c9-44de-81c4-55772a1b357a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1145e4-b722-4cc8-ab13-24e66bc08084", "sighting_of_ref": "indicator--938b5945-745c-4449-8aeb-0733c5e1f93b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6e310c-55ce-45cc-b400-85cb65fd1ee2", "sighting_of_ref": "indicator--ce9c5aef-cf6d-40e0-a4f6-e56ff0cd0dc7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e6a89e-e049-4aa1-8485-287f02d06751", "sighting_of_ref": "indicator--c99494d2-daab-4bf9-98ee-dd316aa46a5e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4351408f-45e4-47f4-8108-c8f6e974bf03", "sighting_of_ref": "indicator--d0b28c69-161a-4f7e-81bd-952efbad6eff", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201e14e9-1f64-4775-ad5a-7605d3277d83", "sighting_of_ref": "indicator--4c113fae-0f92-44ca-a694-ae4ceb335615", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23db069e-07ba-4b88-9db2-c33ab9530b9f", "sighting_of_ref": "indicator--55b8a224-0a88-433d-aba8-c30b7429aaa1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841bf382-be1e-4879-beb0-a86bc57520c9", "sighting_of_ref": "indicator--a49153cb-03a7-45c8-85d3-3ede593c3d96", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69437e6-cd00-403b-b9f3-0f156f4870af", "sighting_of_ref": "indicator--28c6010e-2fb9-42d6-af96-91f61882a8fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb5f18f-466b-4f92-9b09-686cc381bf9a", "sighting_of_ref": "indicator--6866af5c-52ec-406a-9497-fd41a41fc898", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410799e6-c036-46c4-a126-b168f8c64d1e", "sighting_of_ref": "indicator--3e2251ac-2d63-4764-bf0a-874357388c95", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bd4798-68b6-4b7c-9541-e029d4650f16", "sighting_of_ref": "indicator--820796aa-a8af-4208-96fc-e907d8c9658e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcec7223-957d-4d68-adc7-e131e6f67668", "sighting_of_ref": "indicator--8e43b575-ebbb-4da9-862b-025a980f6aa6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d68c2f6-7546-4ff9-8678-471157807a4a", "sighting_of_ref": "indicator--ede908d1-013a-4c13-bb46-f0b1cf325ccc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67916a6-afab-4f1a-87e7-cb43a566433e", "sighting_of_ref": "indicator--49bc6cfc-5c23-401e-bb28-e9d236c81486", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a00816-9acd-418e-a5e4-aa4876c173e9", "sighting_of_ref": "indicator--b8151d09-872d-4a07-b360-867e30141d56", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37b2869-ecaf-4eca-9f58-e142781d7ee3", "sighting_of_ref": "indicator--e046a96b-5cd4-4271-a380-6999070d8a9d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162512ae-dad1-48c4-8e21-f1fa7fadcea3", "sighting_of_ref": "indicator--112f79d3-7b28-4156-8f0c-807d3542e724", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa90b60b-8b6d-475a-b51e-c1211a3d2b61", "sighting_of_ref": "indicator--1a372073-71f2-4c8d-8da6-174b9b87ac3d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb330530-719c-431b-93e6-048bed50d905", "sighting_of_ref": "indicator--b37deb19-56aa-4eff-89b5-b73042beb005", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60729a9c-cb86-419c-b06a-f067c8366f9a", "sighting_of_ref": "indicator--46b82dce-4dff-4140-871d-6cb35e31efe3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37386fc-3595-4253-99fb-901d908b9c37", "sighting_of_ref": "indicator--44f424a7-ac6b-4f0c-b806-94b7d8514842", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e6ab5f-49de-4efb-a168-2fd4cc638bbc", "sighting_of_ref": "indicator--869a9230-9787-4c80-9a1d-740590665a3a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3272557-d11e-4590-9800-54042c1e9ca7", "sighting_of_ref": "indicator--9d22656d-c9e9-4438-88b2-772641a6baa3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbb17ff-becb-4daf-82a0-3004fdd84069", "sighting_of_ref": "indicator--53265aca-0f4e-4ea9-a569-9e6d3f002a76", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58682d8d-7535-4010-b113-e4d6c4d3550a", "sighting_of_ref": "indicator--d717d388-36a2-41d3-84f7-32b3cf44a39c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccba4918-1104-46d3-a724-f9c42398acfd", "sighting_of_ref": "indicator--767d0fde-9ef8-45e5-87d2-2900b8eb6cd5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f43209f-b920-4294-b72f-41afbabbc2a1", "sighting_of_ref": "indicator--c58073f7-ce0e-4949-81db-d83ce1380623", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194b4aa7-1bc7-4736-927b-3a1b82870fb8", "sighting_of_ref": "indicator--b2456c66-f5ab-4851-bd42-5497d99fc377", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452e7e6d-8654-41c7-9da5-bd4257f3df46", "sighting_of_ref": "indicator--44c74e40-6ca1-4d5e-99d0-823814cb1d8b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d18940b-4e0a-4386-90ed-bdb9919d325e", "sighting_of_ref": "indicator--29b64223-28e3-4eaf-8ad1-6865e650e0ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dcb33c-9302-4cac-b085-9f1777764b72", "sighting_of_ref": "indicator--5e256b88-5bef-47d9-ba18-a594b2330302", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7111c0f9-b10d-4260-b1a4-57acc7bc5bdb", "sighting_of_ref": "indicator--126d21d8-1234-45e3-b3a8-4e6e7cb2d5f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8884121d-9234-41fa-a470-881a62001a9e", "sighting_of_ref": "indicator--d64796df-1d2a-4c9e-993f-93ca0240f11c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83eb1618-bc25-4c6e-bfcf-13fa5c7e406c", "sighting_of_ref": "indicator--09572c0e-3e23-4238-acfd-aef6b6a82d03", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25768c67-a8d8-4d34-9bba-27a488405f2f", "sighting_of_ref": "indicator--4aad9d36-1b4a-4205-8d03-b26813887ed9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c62c34-9384-4fd1-9e85-ca169724b45c", "sighting_of_ref": "indicator--4bf2ce50-2afb-479c-80e5-15aa7bf54029", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1470fc-b6bf-4770-ab40-75580b5ea808", "sighting_of_ref": "indicator--523e813f-02b5-4c86-b85a-d1dc5f8474ec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86e89bf-a428-4cd6-908b-8479b0cd3d09", "sighting_of_ref": "indicator--bb5faa43-e28a-4411-a5c8-fa2ce27acaa2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae90fa91-7f42-4cf6-8fa3-a6aed9ed9f95", "sighting_of_ref": "indicator--dbb9d464-a428-4bdb-9f68-7f0545aef670", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8492ed27-2197-423a-9838-43b65b27cdea", "sighting_of_ref": "indicator--5f81ebee-6ac9-4653-8ec3-a74e4bd689ff", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8f4a3e-b8c0-4676-8837-29d0f2ee7187", "sighting_of_ref": "indicator--9f393e4a-8894-4f57-871b-d9a0d99b4472", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8837dc-5ce1-4da1-8057-1f8443c39210", "sighting_of_ref": "indicator--cfe5d0d6-0281-49cb-9d7a-d17dfd5d0027", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f2c78d-62d8-41ef-8da6-19c2684fd341", "sighting_of_ref": "indicator--34904917-9f61-4719-b9ba-b459b08c59e7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5c05d4-aee6-4f51-ba62-1f8909c571fe", "sighting_of_ref": "indicator--79be91dc-5b0d-4cf6-bc94-2507f99ee300", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6c6f23-69c1-4cab-8273-f22070d4c1e7", "sighting_of_ref": "indicator--36cc8235-125a-4e7f-a888-67502d66906a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e8a5d5-4bd4-448d-a7fb-f065df609d00", "sighting_of_ref": "indicator--264f05fe-14b0-438c-8fd0-53e2ef2ed7ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad03fb6f-fc5c-465f-b4c3-9e08623ef0db", "sighting_of_ref": "indicator--dd95cecd-2b09-4c5b-ac29-b1578b7f6876", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a7cd13-c451-433b-99a4-446b999a3328", "sighting_of_ref": "indicator--fab2aecd-9c5d-426e-b193-c2a2d77772b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1173b2-756d-44c2-b444-b881092aa674", "sighting_of_ref": "indicator--e98874da-5e99-465e-b193-7cde51235be5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01814861-cc1b-447e-bf5c-31ce2a1a1f6d", "sighting_of_ref": "indicator--9692b65c-44fb-4b58-9977-2bf636274cca", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2445d516-b238-4d7b-bbea-21a8bf66fe6a", "sighting_of_ref": "indicator--e6a828a4-a09f-435b-866c-3e7c831073dc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70973f32-a435-48af-9498-9ef38c0ad7af", "sighting_of_ref": "indicator--cacbd311-82a9-45d8-8749-226b878cfe85", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e043798-fd02-4bbc-a31a-7dc9071770fc", "sighting_of_ref": "indicator--e61c7038-47ef-4cee-b98a-43c671034c12", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddf73c1-23ab-48a6-b4bf-e04cd1918c3a", "sighting_of_ref": "indicator--cdb43e9c-3229-4514-9e6e-f3249b80f03b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87147add-e80d-4569-9637-f4304dd3b4c7", "sighting_of_ref": "indicator--e02cd1d4-6eed-4a16-a449-403aded9faf5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b323a9ca-7187-4604-8702-139a64b48748", "sighting_of_ref": "indicator--d940528d-3ec4-407e-be45-82d5dfbeae11", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d34931f-12c6-45a7-81c3-309579480be6", "sighting_of_ref": "indicator--d5cb6db6-a3c5-4c6f-a3b1-e151def71d91", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2fdc58-a68e-4731-b382-4025309081f6", "sighting_of_ref": "indicator--d67ba22c-6fdc-4d81-932f-bb814b5aea56", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0c2bab-0c10-4251-904f-4fa27ef458bf", "sighting_of_ref": "indicator--69aae55f-8784-4b48-8cf4-22ae77686215", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c17d4bb-0f2a-4234-a443-2af3d7993824", "sighting_of_ref": "indicator--a8eedace-64a9-4d6a-ad52-8fb200d6e4bd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231aa152-1ed4-4420-b61d-ffadf08b5fe2", "sighting_of_ref": "indicator--e47bdbd9-1eb4-401c-8ad0-e798b95d8655", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6120239c-9a99-4de9-a415-05bc00d05206", "sighting_of_ref": "indicator--9afabb12-110b-4bc7-8cbc-d9398f6e1db7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6e274b-318e-40b7-bf3e-624c974fee47", "sighting_of_ref": "indicator--ab3ed4e8-3eb3-4646-ba1a-2bf40c1599d7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f6edf5-d5b4-43fc-b06d-72918a3a2c51", "sighting_of_ref": "indicator--beb48c8b-1633-4fb4-a757-f3d1fe6e04a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b9ffbe-f458-4745-b2f2-c2d91ca91fbb", "sighting_of_ref": "indicator--a102bd4e-0ecf-454a-b5e6-4a604e23d196", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c30c81-0fd0-4857-b444-79711cf8f576", "sighting_of_ref": "indicator--f68f2227-7a60-42ac-bd37-d52f80142759", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb3ecaa-0cb7-4465-9a71-cc2413b5cdec", "sighting_of_ref": "indicator--ea1b0136-53ba-49ef-8a40-45e85e9ac3d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92eaefe-aadb-418c-862f-5eae33031a88", "sighting_of_ref": "indicator--5daeb90f-0bd4-486a-ba81-e185872ef221", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0f0312-a6ec-44e2-b039-035c9a3d9c33", "sighting_of_ref": "indicator--f7279a09-573c-4904-b970-768c3bb817b4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbe9b78-b1ca-4fbf-8754-dff5b44b598f", "sighting_of_ref": "indicator--3762b816-c6f8-448a-9a43-e877cb61bc3c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81cd15a-ee2f-47c8-9225-a233895c4e13", "sighting_of_ref": "indicator--dbdc49c7-03b4-409f-a781-9eb82f86ea5b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f244e2d1-203d-4aeb-811a-5184844c1ae5", "sighting_of_ref": "indicator--e302bf1b-1451-4f02-a766-8cc1d18b57d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39497c2c-839a-4cd9-96cc-de20c6a77284", "sighting_of_ref": "indicator--bb7187d4-0a6b-4d3b-9d3b-7b766016b4f1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2a0baa-3f20-4f23-a76b-802fd01ee0ef", "sighting_of_ref": "indicator--68e86d90-a686-4fab-b8c9-9c2708eee33b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a109e67c-633d-4903-9bb7-712131758abf", "sighting_of_ref": "indicator--212dcd5b-3cd9-435a-a22a-445d25918113", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36c80ed-4409-4ace-87cd-d0be302c1c26", "sighting_of_ref": "indicator--c647d897-4328-401d-97c8-9adae19aed9b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f5fb3f-a434-4af4-b315-f88eb7dbbdaa", "sighting_of_ref": "indicator--a88a8303-b5ac-4531-8f86-c36d24e544e1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c75fd9-8c9a-4156-b8a2-9196d8cb2957", "sighting_of_ref": "indicator--7b409994-27f2-4039-9b09-00bf537206b6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1930ad-40a9-4826-96d6-b7704ac04bc9", "sighting_of_ref": "indicator--0e78c7eb-7d34-495f-a77f-0e2c2ee79fc8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ae22cd-a312-43f7-bb94-140e18fd1766", "sighting_of_ref": "indicator--db77a98a-18a1-47b4-b7f9-c4cb81780319", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbeb543-0aeb-4208-95cd-e16e70a01636", "sighting_of_ref": "indicator--8be5b20d-8efd-4d14-ba31-24994c0c9a31", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73850705-71c3-4d96-aea8-1db3fdd1da9e", "sighting_of_ref": "indicator--6f54fed7-fdb7-4021-962f-7455dfb56cb6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39f9712-9e87-487e-be05-489b3dac0192", "sighting_of_ref": "indicator--802c1b99-4e29-4702-bdb7-8431dfe467ed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325a63af-bfb9-4eaa-80dc-87d710bbef57", "sighting_of_ref": "indicator--a5233a0c-592b-4733-a16d-9f8c11e3e8b6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc6b3d8-f217-4479-8f59-ed03cc3820e8", "sighting_of_ref": "indicator--2f1f5eed-f68e-45ef-9b5e-cc74daf4b75d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21829b2d-8e32-4590-8d6e-9440e24e8731", "sighting_of_ref": "indicator--0f7c8a09-f12c-4f65-ac6f-31ba780b7bec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55764f5c-f963-462a-9c9b-e8311c06cb33", "sighting_of_ref": "indicator--d5507088-e308-4534-a0e5-46a8702b606c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a676ad49-e13a-4507-90cf-3bca2368e0e0", "sighting_of_ref": "indicator--39001be3-8fe2-4a6f-a434-e9d2b84a493a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69934d47-ddf8-49e8-bc35-eec0244ed974", "sighting_of_ref": "indicator--692fd45c-b80f-4c3c-b1b8-8b8b54f4f661", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4fa850-3c9e-43f9-92f6-3b9e0b1967fa", "sighting_of_ref": "indicator--9e57d0f6-6b16-4433-b7d6-37e6fdb178b3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25c2888-7621-40f1-a5d1-1054874e20b8", "sighting_of_ref": "indicator--b6b7aed5-2072-4033-a8a5-94105a3fd6b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38df046-cff3-4e7d-8731-09df2bf7b309", "sighting_of_ref": "indicator--0ca02061-5d26-4e7a-bf09-f977aef42ddc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16315d3-975a-4a0e-bead-bae2fdb88618", "sighting_of_ref": "indicator--1e42ee10-e118-4706-81f9-8c839a795c70", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ccd666e-72e3-4d24-afdf-5a71d0a1e351", "sighting_of_ref": "indicator--29416160-f261-41ed-b264-9ff488599395", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae95430-fbde-457a-a37a-bcf661e164c1", "sighting_of_ref": "indicator--d8b01e3f-7574-41df-bb80-d6d8bb17e532", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e0d566-02c1-423e-8ca6-d22eeca9d2d0", "sighting_of_ref": "indicator--548effdd-4a0e-426f-952a-b955545b4981", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b99481-1f25-4175-94c6-6a7dd686da70", "sighting_of_ref": "indicator--0db5bea6-0dad-4706-a919-85a5863e148e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68553a02-9e25-40ba-bce6-cd3b9199cd08", "sighting_of_ref": "indicator--2f7f8d1b-0cc3-444c-b9d0-1ee1d9a86f1a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63197a49-8db1-4537-a9bd-dffc6a790a81", "sighting_of_ref": "indicator--db917600-5c85-43c0-887e-45a9bef01459", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a82e7e-2c5e-49cc-a961-ebdeab0b7f47", "sighting_of_ref": "indicator--c77b2134-2b87-478d-8345-ea7c17473b27", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eceb52da-fff8-4410-8ba8-836af29e5f83", "sighting_of_ref": "indicator--4622ce95-d514-46be-8368-3749b0e75cc3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b6c40c-0998-4c53-9e5e-76d511772b7a", "sighting_of_ref": "indicator--8425f9af-3bf8-46ff-acda-c22f5af6e00f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cbd558-2181-4973-9951-51bc893a0bba", "sighting_of_ref": "indicator--d8b177e3-b5a6-4625-aff3-57187a04ef6d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6879e6-7989-44f2-bf3f-e60f49216835", "sighting_of_ref": "indicator--b5c8622a-f06d-4e86-84c1-efecc3988a87", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b69fec-bebf-45c3-a7da-519077467ada", "sighting_of_ref": "indicator--2a0d09b7-1ce4-4ec5-a41b-119165d52cc7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de81190-f055-48f5-a5c4-7fbbcc6cef00", "sighting_of_ref": "indicator--0206a29b-fc31-4091-a12a-f10f2a4def20", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5769988c-7659-49f1-ba4e-b5aff28d02a5", "sighting_of_ref": "indicator--0cefc313-63e9-45e7-90a8-8d6ab4d0ce7c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5bf771-476d-4dda-ae59-5eb72f9e4f3a", "sighting_of_ref": "indicator--92e75b51-534c-4b9a-85c2-7e555cee4c42", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e9e06e-c9f1-420f-8e59-a90225c8f8fb", "sighting_of_ref": "indicator--fbcfad7a-62d3-4d06-9463-e9c04c82fa83", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b269ed62-aabc-4896-aeef-f92bab7d7f19", "sighting_of_ref": "indicator--316fb874-bb2b-4160-a013-87eb469341de", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3193233-a926-430c-b8b1-286b7ab0b812", "sighting_of_ref": "indicator--a61541b7-ac08-4c6d-8212-cae06572f506", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7f3863-6ed1-48a5-ac09-1639953c131b", "sighting_of_ref": "indicator--c7c608ce-1549-47aa-8c4e-a952d21747ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c5f942-2216-48e4-9dba-2451be277da2", "sighting_of_ref": "indicator--5daefc2f-790a-452c-ae6f-4634eeae486f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2eb5eda-ddee-4034-8868-3a9c884b2416", "sighting_of_ref": "indicator--ce895001-89fd-4d4a-9f8a-fd2c1f8fe51e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b377b3-1ec5-452f-b2d8-64f77a2fde70", "sighting_of_ref": "indicator--3bb628ec-936c-4b3b-9201-87b222b9a8d4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3b895a-f4b4-48f8-b2bc-09fbd6182b25", "sighting_of_ref": "indicator--e526c69f-5e95-47f7-9e8e-d0bcbbc5d829", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a2a19e-7bf6-457e-8d52-455de2540a82", "sighting_of_ref": "indicator--4a96806a-639a-43b6-ab5b-a84f5a9ed453", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2335023f-2dc2-45ea-a57d-cc30db9daa2e", "sighting_of_ref": "indicator--02f4fb85-5ea3-4e74-8756-2c310b8c3c22", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04c4c68-6c8c-4c2b-bc41-3868018f23b9", "sighting_of_ref": "indicator--e80297c6-2805-4dd8-a5de-e37540ffbd95", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa5e827-c9ed-45d2-9f5c-c7d497d02b1b", "sighting_of_ref": "indicator--94b42b64-b2fb-41d9-a695-6803eda1af21", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea377d33-eb1d-491d-a529-9cb9bb2414e9", "sighting_of_ref": "indicator--45a7434b-fd11-4571-b815-a25f0ee74a47", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bdf6d7-5f45-47a8-b6a3-1bde222dc751", "sighting_of_ref": "indicator--08f3d8fa-bf13-48a6-8c2a-c971f8fa8dbe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539b9da2-41d5-411b-9bbd-b08ed71f2c8d", "sighting_of_ref": "indicator--5936d555-bbda-4304-ada3-e9e64071f0ae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0ff611-ca70-4609-a584-1053178b2e7c", "sighting_of_ref": "indicator--7e417d73-402f-473f-91c3-509484d9d0e4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b541dd11-5414-4dd1-9599-f1512dbb6f62", "sighting_of_ref": "indicator--8904a04b-90bc-4ae4-a218-26fe19360a53", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90622446-7c46-4290-b828-bde7189f317f", "sighting_of_ref": "indicator--2fe448e4-0ad3-4890-8b77-f6684271351d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad65d95-7783-49b0-98e0-874e424a8f18", "sighting_of_ref": "indicator--298f08da-a2fe-4443-9be3-7da971549315", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d262dd0-f593-4283-8664-c78796a045d9", "sighting_of_ref": "indicator--ef1149a0-fa28-45f1-aac3-2b2e8e1f3f1b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665119ac-a9a0-4e09-bbdc-f6efd4a969a9", "sighting_of_ref": "indicator--44f78cd7-aec5-402e-83ca-5b4d9f89300f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e64cbd-724c-4c98-822f-52b75facf6c5", "sighting_of_ref": "indicator--fd983f46-54a6-49d7-b14a-149de4c5541b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3c3fb9-6681-4fdb-97a2-a0bd76d92ccb", "sighting_of_ref": "indicator--5ecd9694-0e89-4611-a9a0-cab9fabc1c45", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427c2dad-b102-4b02-b917-565b98ef763e", "sighting_of_ref": "indicator--fbec5eb6-5904-4828-b75c-95c43e134694", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d07075b-841f-45ae-bcb7-c69ce84c501d", "sighting_of_ref": "indicator--7ee38e49-c666-4a87-81c4-b72199b0cef8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984d2f3e-ccf3-444c-944f-b5c1914142ab", "sighting_of_ref": "indicator--9c36e447-be2f-4e15-900d-a5c25f991013", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4699f3-48ec-4007-a895-a06eb2416af0", "sighting_of_ref": "indicator--6b49440f-6205-40f9-83a4-63ad852d2274", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0aee5e-aabf-4d5f-8f94-f51b25c08c08", "sighting_of_ref": "indicator--0fad65ac-e2d7-4ba3-9bac-dcfd07e69bc4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ce933b-89dc-4397-8cf1-697e65b1c0f3", "sighting_of_ref": "indicator--d93b4651-8136-4b83-acc1-ca068c6b6ed6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6720f62b-7c67-433a-b955-ccd40eebce60", "sighting_of_ref": "indicator--64979c86-b423-4f1b-ba9e-ffc472f29d89", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331997ad-9c81-4cde-918a-f10877280376", "sighting_of_ref": "indicator--f0a66aa3-7be1-485f-84d1-3db9593aaf90", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bf50e4-f20e-4324-97aa-b230e73a244c", "sighting_of_ref": "indicator--1f1f36ea-7688-4dad-b3dd-0fd33ed0d77b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0cd9fc-a652-46ef-b430-9573e4c57c59", "sighting_of_ref": "indicator--9e7498b1-0129-4d4f-9713-11ecaebb2f0f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1cc36d-524c-4695-9aa6-5f744ae4a4c5", "sighting_of_ref": "indicator--1776f6b9-80c9-4027-8759-ed410db4c71e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c5e018-4c13-49d2-b71f-6be48def6c1b", "sighting_of_ref": "indicator--597f6185-c925-4e2d-995b-3a8f39d6aa00", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c283d546-9aed-4e38-a2be-87fd78c836eb", "sighting_of_ref": "indicator--44d682c7-a3c6-42f2-9726-c4b82dffe00e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05da3ef7-399e-42d9-858b-0fb36f70ff81", "sighting_of_ref": "indicator--ce6153b5-7a64-40be-b636-f50284849c32", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222b1496-f652-4633-b70e-07cfc36fc7a3", "sighting_of_ref": "indicator--2767140d-2e47-4d56-bfa7-32f7c2566ba9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1321e0-a93f-404c-9de6-53f05a04b62d", "sighting_of_ref": "indicator--b58c617f-874c-47b2-ae5c-a986531e00f7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb568f1-e055-4ceb-a1d0-d1de26ad4f16", "sighting_of_ref": "indicator--9ed6d06f-c866-4b43-9f63-ed17ca51b720", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f548a04-75a6-4cf1-96fb-0da552f144a5", "sighting_of_ref": "indicator--d319a398-07ac-474d-943d-15109ee93799", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9561eec-aac4-466e-ae3f-3c9b6e24eabf", "sighting_of_ref": "indicator--9bdfb9fa-c717-497f-b9b0-d4d4985a2fb2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9b6b4b-ae35-43aa-8f91-5ff89dd017ed", "sighting_of_ref": "indicator--62b74ab3-1cf7-4885-9fb5-ff1dca9d59b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1de8a00-a1e2-4fed-bbce-5d7923d7d6aa", "sighting_of_ref": "indicator--807476af-4400-45d5-9c46-e47b6e68448d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0310cf94-f39b-4798-af59-5f64830b5cb3", "sighting_of_ref": "indicator--3c797388-7ce2-46e8-a1e9-48c725af875d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ebf8af-0862-4535-b712-1967ac9fa3b4", "sighting_of_ref": "indicator--beb952ae-b2c8-443e-a9f3-76cf1832c781", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53269b7-d2a1-487e-acf4-3913a3fc12da", "sighting_of_ref": "indicator--023e21ab-b80a-408f-95a2-f5c9c1cc46ec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e67ce96-5340-4d5f-8ffb-0ca0d051b44b", "sighting_of_ref": "indicator--86c41a25-f0e2-483a-9c03-96e846469fee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39e0eb7-59db-46b7-bd42-0ef3bdcace5c", "sighting_of_ref": "indicator--dd1e614c-1393-45bd-bd30-0999f895c255", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb30d16-025a-4768-ab7f-8c2b3ae127ed", "sighting_of_ref": "indicator--4db4d5dd-3c8f-4cb1-9919-8c7d85ace93e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81d36c7-c58d-4998-b41a-6add43587020", "sighting_of_ref": "indicator--f45fb8b9-b418-4054-907b-47593bc1e85d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0d6350-90ee-4860-9844-6ebaf592fbd7", "sighting_of_ref": "indicator--9c15ea25-7a56-4b58-8adc-bcce0c88d2a8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0563246-d4ba-4a7f-aa86-ac2e30edf9fb", "sighting_of_ref": "indicator--1cff2a39-16c0-4627-989e-fb05548c3626", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4886c7d4-f15a-4685-92ac-1aa607631538", "sighting_of_ref": "indicator--b79f6259-558d-4c0e-80a7-c6a99fb47a8f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f4be6c-7830-4e39-915c-1a4cfebd37a0", "sighting_of_ref": "indicator--36244d21-3711-441f-a481-5e68ba62d472", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7944872d-1aa4-417c-b27d-0d533fbdd8a0", "sighting_of_ref": "indicator--d65a7209-9df7-4bd4-bc68-248df1543306", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92de9f1-2c15-41df-8f4e-3a891e41150d", "sighting_of_ref": "indicator--b9548316-9de7-4ebd-91b0-0eb3ce5840aa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9334f7-aac0-456a-9b45-909786847014", "sighting_of_ref": "indicator--d7f857b9-2046-44ff-9082-70c3866f02f1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89422e78-eb00-4a7c-8f69-fa9fe05fbe72", "sighting_of_ref": "indicator--d37ee08f-e484-4962-bc43-38990fc8e640", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3569eaff-7ce0-4590-8b0d-a311b904bdef", "sighting_of_ref": "indicator--baaf5a72-18fc-4962-91df-008ed1b78045", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00e2bd8-20ff-4df2-a75f-c9f8c43e957b", "sighting_of_ref": "indicator--3d082adf-d1bb-46c5-af47-e7656a7f5182", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6f4364-6368-42e6-9f36-0bf8389796ef", "sighting_of_ref": "indicator--cce28be7-7a54-4539-95da-6cafab5802bf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0f3c14-f213-4911-8b48-a3b5b4aa9c3e", "sighting_of_ref": "indicator--39546b4e-6796-401c-9b62-a184da42505f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f8419a-ec7d-4227-bf9f-41ffc5b31734", "sighting_of_ref": "indicator--d79c287e-5016-4b5f-b18f-7d8916c528f7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d86082-1ef9-412f-923b-e700b91969e9", "sighting_of_ref": "indicator--53a0c90f-b808-4acc-8b5e-280e1cbbbb5c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04951056-0f16-4c47-ba5b-38924f5664ec", "sighting_of_ref": "indicator--ef7c23cf-f96d-4950-b208-4adc53d3f161", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8baa60-aafd-4032-9630-18b08f6b7c81", "sighting_of_ref": "indicator--4f09ab95-8878-4395-8fdc-21a96b8f8707", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992a49d0-fdd4-40f9-8d1e-a66b67d16538", "sighting_of_ref": "indicator--3ae888f8-854d-4118-a41f-99a8cf1f7521", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ce2004-29c7-489b-9984-88cf50f98578", "sighting_of_ref": "indicator--6d77aeb4-29be-49ee-a81e-dca10b4ea9da", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d97083d-4048-40f7-8f60-ab1eb5615732", "sighting_of_ref": "indicator--143195df-e1f2-4731-a1c9-dfc0a956b370", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd123404-bf5c-4421-a44b-b5756635863c", "sighting_of_ref": "indicator--664b1518-dbfe-4e33-aa40-4f01819f5e83", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031c8e7a-62e0-42df-ab83-3fc0fb0045a1", "sighting_of_ref": "indicator--bc1f10fa-f1e4-402a-8172-04540fb66d00", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17b2652-85fb-4546-b87b-c048efdc2597", "sighting_of_ref": "indicator--2d5ad10b-0969-473c-8e99-4a69eb275608", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60afe826-73cd-452c-8957-9f3618540705", "sighting_of_ref": "indicator--19a23617-41d6-424a-b408-3509e114b361", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c01c1a-7ec5-4215-92b9-b68842ba8119", "sighting_of_ref": "indicator--c81971d5-642b-43d9-b14d-7919a75491c3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4180d72e-3ee0-425a-af56-11d4727f0371", "sighting_of_ref": "indicator--bb8439b6-1005-4828-9dc2-300fb81838e4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a978905b-f23b-4421-955b-a8fbf03fd5dd", "sighting_of_ref": "indicator--d5e88fd7-1f58-4a9c-af6b-633157b62997", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc336464-f3e1-4f12-b3f3-0e11a8948c9b", "sighting_of_ref": "indicator--9cd5140c-c22d-4655-b95d-cf2252fea0d2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350ac031-fed1-4fac-8cd2-943f87a4f157", "sighting_of_ref": "indicator--33e19bc1-e969-4663-a06a-eb767b94ce01", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6580b3f9-6070-4692-ab6a-81297c322d56", "sighting_of_ref": "indicator--011f35ce-3e31-4452-9b6d-19aa1c9b46e0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82934094-e5d8-4ebb-984e-9d1de8a3a93d", "sighting_of_ref": "indicator--0aa9fe00-6dc0-4935-8bae-4564f71bfe34", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3ab02a-cfe5-4b7d-9ce1-35cbceab8dd8", "sighting_of_ref": "indicator--a90763ce-0d99-4548-82d8-6d2316298d46", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6b83f1-40b6-435b-b9c5-eac27d9495d9", "sighting_of_ref": "indicator--faf87120-287d-4529-b77f-6906f8574dac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015a1d7c-308c-4c44-bcb1-fe261efe8732", "sighting_of_ref": "indicator--445d3cfd-7a93-466e-8e25-cc25841545f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c376c528-740a-4aff-a194-114a5ecd2dac", "sighting_of_ref": "indicator--8afc3aae-8645-4e3c-883c-e80856ba63bf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529f91d7-a2c8-4e3e-8510-41db3b7dd725", "sighting_of_ref": "indicator--cf44f72f-9621-4c0b-9f70-52c30ff2c52e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a1320a-5b8c-4abe-8000-0588a2136e3f", "sighting_of_ref": "indicator--73b2ace8-e5bf-45eb-a092-9c7bc2178ce7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a1f3ff-e31b-4b04-b5cf-9e1442b0e2d6", "sighting_of_ref": "indicator--4237efa2-3b6f-498d-9fcc-1baab004e546", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff21b33-90c6-4482-b52f-3750d1cb03a4", "sighting_of_ref": "indicator--e2cf63cf-8ec9-4079-bcc0-7c067500bd30", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4effa4a6-d61e-4696-a709-9a7330604c9c", "sighting_of_ref": "indicator--40a9364f-ea89-42dc-b1cc-686d89b68fab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e19291-388b-45fa-990f-59d8600fad9a", "sighting_of_ref": "indicator--39460d5f-3af5-4de3-974f-e438e7bd35a9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd70faf2-6ab8-40a5-bf84-af238836df5c", "sighting_of_ref": "indicator--20b1d2bc-5fbd-4380-b189-8f1d87717e07", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55830899-19b8-4873-b18b-ade7715f86b4", "sighting_of_ref": "indicator--75daf9fb-6c4d-4882-a6fa-86deabe329cf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1126fac-2ea3-40a6-b78b-41c06f5ba52f", "sighting_of_ref": "indicator--b16e9fc1-a4f1-4945-943b-87ee6f4163cf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f6794d-b7f5-4fb9-b051-9c7770494a15", "sighting_of_ref": "indicator--28d933ad-069a-487b-8c29-6782e7d574d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de354930-1a6a-40bd-811b-e5d50c4630c0", "sighting_of_ref": "indicator--fd33f973-3999-4a2d-b9a3-e0e5f434a7e0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f051daf-c976-466a-b1a8-b45a884e67bc", "sighting_of_ref": "indicator--59135e78-ffe6-41ef-8e98-d658f1b6530f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48e7051-66b9-41ac-9ae1-0390a7bf0b60", "sighting_of_ref": "indicator--042f1c92-5d80-4117-8535-dd1a04c2945b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599d0977-82f2-407d-96e9-ae905c5a4aa2", "sighting_of_ref": "indicator--73975478-6c3a-4cd4-a858-2d4f85fbce9b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fe643a-7879-453c-ac3b-5d14b1d54061", "sighting_of_ref": "indicator--adb80096-ea35-48ea-84ce-9da93a5aba0c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc32adfc-b4c1-4b3e-9911-502825777458", "sighting_of_ref": "indicator--33b96076-83c7-48c3-ba7c-90008207379c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca506b6-183e-4d9b-8d0c-ad12c99ba87b", "sighting_of_ref": "indicator--e031d10d-7cc5-4195-95fa-c21de9654c62", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20cbc77-3058-403f-b8ce-42a0efbdc7c8", "sighting_of_ref": "indicator--d4f9a814-75a6-472f-aa6b-90b828fb31db", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbacb24-9715-4084-bdd6-618aa41ded47", "sighting_of_ref": "indicator--209a6df8-cf26-483e-88f6-fdf13a954fcc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6208d9-0dee-43fc-9f83-fccf5a32aa75", "sighting_of_ref": "indicator--40458fe7-8eb7-4813-abfd-f8439450902b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da39539-a2df-4562-800e-a87f65ab77d6", "sighting_of_ref": "indicator--40458fe7-8eb7-4813-abfd-f8439450902b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c0f11d-392a-4cd2-9267-fcaf9299052b", "sighting_of_ref": "indicator--ea4c427b-43a9-4312-aa33-192a8c6910cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1834d0-73f5-4ba1-b62f-8563c380b81b", "sighting_of_ref": "indicator--a18c4ac7-fcf2-483b-b8c8-3adb6a283c72", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325764ca-e9a4-4070-96bb-00cc633c4948", "sighting_of_ref": "indicator--0aa39d29-bb89-49e0-8963-39c0631e5f32", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c8cffd-bcfd-4f83-bd66-4a85ee229b90", "sighting_of_ref": "indicator--eb16973b-8fac-4044-94df-b8c5fe2adf8b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a28a90e-1840-4ca6-a623-371a515c87e8", "sighting_of_ref": "indicator--f3eb8ab5-5b71-467c-ac89-e31eb3495f0d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd48c44b-221c-4a01-b9aa-545617bb33ba", "sighting_of_ref": "indicator--a4ab6986-042a-4a2c-8195-f893f64245c5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1f8d98-8b40-427c-8944-a2c7e08f04db", "sighting_of_ref": "indicator--47ff3a0a-eeb5-4b80-8d77-5e2380426f9c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e76ec8-e5c3-4d4e-8eda-174a0289b6b5", "sighting_of_ref": "indicator--d1734708-aff3-4d26-ae1b-d53ae335c192", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532a31a5-ddb2-447f-af09-8ca982cbbbec", "sighting_of_ref": "indicator--81c6f367-be4d-45ec-92e4-c380d8fe5c79", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f694083f-f5d3-41e4-97bf-3bb62d3992f3", "sighting_of_ref": "indicator--81c6f367-be4d-45ec-92e4-c380d8fe5c79", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1355340c-f198-48fb-8e08-3188e4338d69", "sighting_of_ref": "indicator--8539efe5-eb7b-48cc-8e65-c6f21f63c067", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d098e0-8047-4129-89f5-6a73a71f1114", "sighting_of_ref": "indicator--8539efe5-eb7b-48cc-8e65-c6f21f63c067", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87bfb3a-f84a-4781-949c-4a762b53dfbf", "sighting_of_ref": "indicator--06212f37-01e4-466a-9817-64ac2ddb689f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f150318-f9c6-4f97-b8b5-8b531fae751b", "sighting_of_ref": "indicator--2bf66537-b3ac-4fa1-977a-10bdc843ef46", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2443b2-e0fb-4e97-8478-c842e670c952", "sighting_of_ref": "indicator--4e786c27-67cb-486d-9a05-2046bb56d26b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a01751-af13-4484-8a4c-488e026f9e12", "sighting_of_ref": "indicator--8769e526-79be-41dd-8ee3-2da0c3f2e05a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e120c60-8d2f-4607-b058-2ae7679789cd", "sighting_of_ref": "indicator--30586988-1bff-4d91-a428-181e4829da4d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b34e47-fde3-4587-aa98-35d6b1fac82f", "sighting_of_ref": "indicator--30586988-1bff-4d91-a428-181e4829da4d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e992bb-d02f-4b4f-95fd-f9a74687ef02", "sighting_of_ref": "indicator--1d61252a-aa15-4061-b2ae-78a1ef2a41ef", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c87b1e-4c0e-4a33-8225-db3a5187a8c8", "sighting_of_ref": "indicator--1d61252a-aa15-4061-b2ae-78a1ef2a41ef", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b92e373-610d-4651-8eae-1e2fa26f9b47", "sighting_of_ref": "indicator--4c5c0565-6248-4b67-9f87-d900977e7ff0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c21bc16-33ff-4f72-8a10-ea8de64cc132", "sighting_of_ref": "indicator--79c73dae-6b2d-40be-ae8b-1bf3f54e9445", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9359a88b-c8f3-4c50-8a17-2a6051b0bcf8", "sighting_of_ref": "indicator--79c73dae-6b2d-40be-ae8b-1bf3f54e9445", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e135ffb-d442-4903-96c1-e29452d3cc51", "sighting_of_ref": "indicator--5374cb68-4ece-443f-ad82-f54a938d390b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec714979-3f23-425a-8cdc-9337645a8d84", "sighting_of_ref": "indicator--5374cb68-4ece-443f-ad82-f54a938d390b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc35f978-4f55-43f6-9cd5-969b8999fb5f", "sighting_of_ref": "indicator--e2e1e5e0-0f21-4d48-b935-990c0e0ce99e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ce6e89-1199-4632-9a97-9f75849be495", "sighting_of_ref": "indicator--b478914c-9fb3-4872-89b7-3231091c200d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7e6106-41fc-4a2f-9e21-f1e5da329f4e", "sighting_of_ref": "indicator--af10b819-6e45-49ed-8157-a8f558d44eb6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48373611-6b70-45c4-8a62-5d966d8303dd", "sighting_of_ref": "indicator--af10b819-6e45-49ed-8157-a8f558d44eb6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525ea2e0-fa87-4f01-b3cc-611fc4bb268f", "sighting_of_ref": "indicator--7de6c18f-6461-413e-aa2a-6d41c54d4e45", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247f7901-c914-4666-aedf-87941e926fbf", "sighting_of_ref": "indicator--34c88e25-0c03-4b34-80a7-eca176f6204e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70abc80-115c-4bfa-aee7-1602a8a50dc6", "sighting_of_ref": "indicator--70f13dd8-47df-4bae-8209-0afbc0ed0036", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b426ed8-dce4-4842-893f-ab747f52272a", "sighting_of_ref": "indicator--f23468c8-4ef4-44c2-869e-fdf5043726ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f859f250-5769-465c-8952-06a45ba013b0", "sighting_of_ref": "indicator--072a9247-930c-4a15-8048-b4c0ece96cf1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452ab35d-6dce-464c-bb5e-10579a5bc7f4", "sighting_of_ref": "indicator--9d4e4270-73d1-4e73-a2cf-4b84c4774448", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83ca355-fc28-417c-94ff-8426d8fd6960", "sighting_of_ref": "indicator--0b52d957-5298-43f6-af9a-40c851ecc71d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8935f61-1e71-422d-8221-3b0bd2f86337", "sighting_of_ref": "indicator--9c258d3b-7138-4f8f-bf92-434d35c2691a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0c08fa-2ec1-488c-a5ab-98ad17f8b627", "sighting_of_ref": "indicator--70083f42-f6ca-4601-8712-5b307db60869", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6134cebe-80b3-4445-a565-518bfef7ab24", "sighting_of_ref": "indicator--f773098d-c046-4515-839e-07b8d0715f66", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b191e7e2-ccac-4e20-aa49-263067d88d81", "sighting_of_ref": "indicator--e6d9cb1f-2dbb-474f-818c-464531c11f7a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187f1c94-7fe2-4aa8-9c74-f9d518d58aad", "sighting_of_ref": "indicator--ba1a7370-55f8-4848-bad5-77d3082cdacf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14be5a12-3551-4981-9691-240b75c86aca", "sighting_of_ref": "indicator--24345c8f-20f9-40fe-9630-99c52587c5be", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4b2e14-9242-40bf-a1ac-f997bc8a82ab", "sighting_of_ref": "indicator--c5f8e30e-dbae-4114-a49e-3dcf774bf367", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc2538c-2752-4309-8e40-0d26507229c4", "sighting_of_ref": "indicator--2e700432-aefa-4cb0-b217-ea328ee0c4a6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca5c044-e6f1-4ffb-b806-80598fe7c856", "sighting_of_ref": "indicator--cd14f777-8b64-4e66-9e6f-760bf1a6dc37", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43845438-f079-49f2-a74e-34fcff32a1d4", "sighting_of_ref": "indicator--31b367b5-dd13-403c-9bad-59ccc248b431", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d496c3-46f7-4d86-82b2-40e1481fcd6a", "sighting_of_ref": "indicator--df191f30-0bad-4526-b749-298404e34841", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d325d8e-7032-4d2e-a77a-f7c0d3f47ee6", "sighting_of_ref": "indicator--ff6fe106-148f-4878-a4ca-53ea209ccc7e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8ee2f9-af75-4937-89b6-b22b8b963ebb", "sighting_of_ref": "indicator--8b5ed30b-6852-40c6-b568-596c8941cccc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb8a46e-e24b-4265-823e-af75be4ae080", "sighting_of_ref": "indicator--92d152ec-7c50-4fdb-93ca-8addc990ca22", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d183fe51-c026-490f-b218-c1a8b098f128", "sighting_of_ref": "indicator--16c819e6-5c6c-4f2f-8d37-48b843544ffa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706fa197-9665-4720-be11-477c3755b8b0", "sighting_of_ref": "indicator--645cd694-b7b2-4058-b83b-443d092fdcbe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a33f96a-1d08-4e43-85e5-97166bb8d947", "sighting_of_ref": "indicator--a6945501-ba19-4acc-869c-8b198bdf4034", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2291664b-a2eb-482c-98fc-6c24cf12a3a7", "sighting_of_ref": "indicator--a99a0e88-40ee-49ee-9af4-da3572c45724", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9be6948-7a94-47be-ab0d-f982f8ebf399", "sighting_of_ref": "indicator--bd7dc846-9b77-4e59-9578-88079cb46b79", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3e4832-9f54-4718-8d72-6c26808d5b77", "sighting_of_ref": "indicator--43b69ce5-f7f0-4979-8a84-db9e898bd239", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2211bc-09f2-4774-beeb-73aef81ed8ef", "sighting_of_ref": "indicator--31ad912a-3733-482d-9024-51cb0151f157", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27d70cb-ff10-4464-9c7a-2813f82ad2f4", "sighting_of_ref": "indicator--30acc307-bfae-469b-89a3-a43ab21172b9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64ff28e-ad6e-477b-9e83-3b4d963d4759", "sighting_of_ref": "indicator--8ad7002e-b7ee-4458-9e07-00e624b5318f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5322259a-5948-4f46-a72d-016c0266a032", "sighting_of_ref": "indicator--839a8f19-8783-4b3a-a831-d7a91b10b0d2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deaa1795-75fd-4540-83e0-a66c7e788762", "sighting_of_ref": "indicator--e413b7e1-7128-4773-aff2-2c04d0a75ce8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe7afd3-0614-48d9-a443-7f29e2d008d1", "sighting_of_ref": "indicator--52b7a755-3b13-4f57-961d-686d94417f09", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452f792e-8ce7-4175-b565-bd0f081dc138", "sighting_of_ref": "indicator--5e3aa383-312d-42b8-844a-e0699c741e5c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3efe3ca4-4199-4ce3-91c2-8804e1c6aeea", "sighting_of_ref": "indicator--877ebda4-757d-443d-bdbe-b6f1e79d3675", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e05bef6-e473-4ab8-a18f-d28befc56f1a", "sighting_of_ref": "indicator--c89b9493-9a5f-4b90-90ec-74cd4dc0ea43", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5a076e-b12a-41a9-a8f1-b4167ceb644c", "sighting_of_ref": "indicator--ed0cda6f-af2f-43ba-8620-8cf786321527", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d4d4d2-7889-4943-a92e-d4486b83a89b", "sighting_of_ref": "indicator--2095eb4c-e01e-4564-b9ac-d25af4c2dd28", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c6c24f-9822-4e3f-8e1b-8b864fed53b5", "sighting_of_ref": "indicator--837588bd-e58d-4935-9ae4-b13386a7c6f2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f458bf50-4341-4d85-b020-fda44723e965", "sighting_of_ref": "indicator--e0afe712-f666-4237-9abe-85c50df71006", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a7bad3-947e-4372-b4cb-53a50d7b85a4", "sighting_of_ref": "indicator--2cb95044-5834-48cf-8766-ad8078e01349", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ac8b52-d457-438f-bb21-ab18d844348f", "sighting_of_ref": "indicator--4143b278-f7a7-4a5b-ae73-84467ef8131b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37bdb85-1f8d-46cf-8d5f-b850c7e4c5e8", "sighting_of_ref": "indicator--5745ad81-9ba6-4741-9d91-12597e61f6e0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246733ea-f7c3-41e9-9189-8c8271d178ee", "sighting_of_ref": "indicator--c4d7fdd5-33d7-4f41-964a-3e6e7f70fa05", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7224c2e-c049-4620-8359-023758d4ebca", "sighting_of_ref": "indicator--1010213d-8713-42bd-b702-fab3ce148889", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aca7b78-b5ae-457e-b325-8486f2b40fe8", "sighting_of_ref": "indicator--6abf4eb9-f3e4-420f-b3ed-b14a3a2592a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8060a1cf-15c4-4430-b09c-83295c96d307", "sighting_of_ref": "indicator--034ec90f-b4e0-46cb-835a-287e3f51a7a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6936ac17-6109-4a65-afd7-2ee24388cf71", "sighting_of_ref": "indicator--76de8a4e-ea85-4d25-bf89-b6140869a19c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33a7ba9-89b2-43f4-b459-b7e76f55d300", "sighting_of_ref": "indicator--9d78e9bb-7ad2-4f52-9c89-0ad8150d0f9d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edb80d4-8933-47d6-bb1f-ceac624de00b", "sighting_of_ref": "indicator--4d50c445-5d04-4146-8058-2e99c0999ebd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3072f6fb-53ff-4a38-8b69-e92559691f55", "sighting_of_ref": "indicator--a9bb3978-9cc9-4ffa-b12d-16e62e963d1d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4329e833-8fee-479f-abac-bdb033668c15", "sighting_of_ref": "indicator--c7e83226-f997-402e-a5ba-8a0ed3c9b010", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a64d2c-a032-41ed-9f7c-9fd78c0b4e65", "sighting_of_ref": "indicator--f96844de-8424-4e2b-b30b-56187b85f5d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7ef9dd-3585-4280-861d-05c79dcbbbb3", "sighting_of_ref": "indicator--92db427d-5be9-4633-a228-5329f7cc5ecb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030b9026-4551-4368-8dc2-f94633d5c139", "sighting_of_ref": "indicator--3b7bd92c-3f9a-4766-978f-60dc4ae49c4f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4b35f1-3912-4f27-af08-da0de36008e0", "sighting_of_ref": "indicator--55409b2c-edb3-480e-8531-b6e98e3ce9d4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb05cd57-4067-4d73-ab92-a68a634495e4", "sighting_of_ref": "indicator--5a736604-27c9-4087-b6f9-e520d07d4874", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076148fd-de05-43a8-b619-c353ab998900", "sighting_of_ref": "indicator--99865879-5fee-4d53-b4b1-4620f237e80a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec52c3d-90f8-49ad-b0aa-44538321888f", "sighting_of_ref": "indicator--a512cded-5b1e-4cbf-8d48-fbb4f53c781d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8faf8dee-b130-46c6-b3e7-b471a0349386", "sighting_of_ref": "indicator--011df131-7b9e-4136-873b-078eeb054e8a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb1b0d6-f50e-42b9-8abc-5eae56350afd", "sighting_of_ref": "indicator--bb73b460-17db-4223-bca9-0958bfc20c6a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6d7d38-4aef-4c9c-9bac-3128091bb541", "sighting_of_ref": "indicator--86a2f73e-db93-4e92-92b7-1beab32e2f66", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f76c04-2566-43db-bfa8-5dfbc0e4fe60", "sighting_of_ref": "indicator--dce4999a-ad02-4471-93c8-99e410af7ce5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04eb5149-b64b-4042-88c4-8252e5a2c887", "sighting_of_ref": "indicator--03c2734e-ccd3-4f81-9830-275fc38b0e31", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccd12de-9ede-411e-a056-760e199f33c6", "sighting_of_ref": "indicator--e47090a0-872d-4625-bd9d-3c25d60b8ba0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08b970e-d9b5-440c-a38a-b6161f9d066f", "sighting_of_ref": "indicator--17e5e7b5-a466-4093-8a56-e125b24e4108", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81915a50-1703-45fa-a33d-4af3dcd0dda6", "sighting_of_ref": "indicator--216c8224-55fc-4038-89d6-68be330dade7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec20697-b1d6-45bc-9aa9-7dd86d9573f2", "sighting_of_ref": "indicator--1b9afe34-4dad-4453-a8f4-48c1a38824dd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51814a46-52c0-4dce-9d82-4ed994b861a6", "sighting_of_ref": "indicator--5cd21290-932d-49fe-8dcd-8c1f5cf9d087", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bf1408-cddc-4377-b9e3-09fb18bd8bce", "sighting_of_ref": "indicator--360fc058-c613-4e4e-bf52-e675e76f888b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09a05fd-e6d8-44c7-9268-4a56880ffd72", "sighting_of_ref": "indicator--0f99ead4-98d2-4dc9-b203-f0045ff8a88b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cff4ac2-c8c3-49a7-a772-b2bf1ee221af", "sighting_of_ref": "indicator--35466afe-d645-4147-a74c-11eb6ff499af", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005cdd3b-27ce-44c4-bb5c-e5604278bab3", "sighting_of_ref": "indicator--fdbf6a10-b61c-4b56-936c-5ec3eb66fb22", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5116ef9-d5b2-4968-80b6-78bea30540fe", "sighting_of_ref": "indicator--4c9fb79d-2d45-4268-bd7f-be070edf7959", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7cc65c-fc8d-4b03-b7f3-85d3646d8d3a", "sighting_of_ref": "indicator--e5ea8f07-3f8a-4251-b6a7-87e6819f23c4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c764742c-9534-4f61-b6a4-d6f1e3bc85ce", "sighting_of_ref": "indicator--7a20ffa5-ccb9-43cf-97ec-affbafa7cf0d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34cd5eb-4bfd-4cd6-8371-c9d08f8b72d1", "sighting_of_ref": "indicator--c119e026-8dbb-497b-a0d2-cd0da355e4d0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3333a9-ebd5-43f0-9d3c-2ce7b7beb388", "sighting_of_ref": "indicator--51544de8-baab-47f4-9f4e-48cb722b3a35", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3fe723-439c-43bb-ba49-81babe970a8c", "sighting_of_ref": "indicator--2cbf6621-1530-4318-83b1-cc30fff81f37", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80983b8b-235c-417d-9f03-7dd4b22cbe62", "sighting_of_ref": "indicator--aab1eaab-4efa-4ecb-9a7a-4af220ae384d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad0c54b-f237-4169-a310-1684e9ca78ad", "sighting_of_ref": "indicator--a8173c58-8457-4f1b-b6a6-bf7582f58df5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2981382-aeb2-4620-912e-29bd7a31a352", "sighting_of_ref": "indicator--1bc40d99-cc8d-4378-9a37-6ff67e71e537", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8818a8-f718-4098-8032-fb8e0b90fe61", "sighting_of_ref": "indicator--559eb9e4-6d89-49c9-b84a-187669f4e636", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29961a9-157f-43ec-9f51-1f0bbbdbda74", "sighting_of_ref": "indicator--0fd9eae6-cffe-43bf-9a8e-69040299fc68", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9f73f5-ddf1-4fc0-b1c0-fd74e3420c41", "sighting_of_ref": "indicator--1b48c92f-2da8-44fe-b9f3-6cdde83301fe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0530328-8b66-4004-9240-f69a17a8cab9", "sighting_of_ref": "indicator--c10e1596-36fa-4be6-a294-5927b1cc05fd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb6d979-3e4e-4d23-80a5-350db1a470fe", "sighting_of_ref": "indicator--bd4075af-5d1c-4091-8f2f-3ff6be026109", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524ef560-2d12-426e-a1de-0bdb6374a662", "sighting_of_ref": "indicator--b931d4da-53e4-40f8-89ec-d866e74210b8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c579ee91-1c41-421c-a46e-64113d2a264b", "sighting_of_ref": "indicator--9482a337-fbff-4363-9086-62371ea48133", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2768c5ca-ef2d-4618-8731-2d2fcd4ea871", "sighting_of_ref": "indicator--9482a337-fbff-4363-9086-62371ea48133", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df90433-d13d-41a5-a9a1-b5ee62ccccc6", "sighting_of_ref": "indicator--d85ff173-8403-4f99-b56a-e320e9c106a8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a75739-1e72-4d6a-a1dc-e9c01b2cd27f", "sighting_of_ref": "indicator--2cd962db-bf0a-4767-9c6d-beb7d48ace02", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626ba17b-9c99-42b3-bf83-a88b5d356acb", "sighting_of_ref": "indicator--916777de-4e4a-41fd-a0b9-8b201fa45d2e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f02a69-4e4d-46cc-9199-330828be845c", "sighting_of_ref": "indicator--916777de-4e4a-41fd-a0b9-8b201fa45d2e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69cdb07-320d-48f6-9a42-589f3706b354", "sighting_of_ref": "indicator--49a5bfe2-01d7-4c1b-9728-c9be634176f5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54c3c17-0594-452b-b767-fed4ae1b78f7", "sighting_of_ref": "indicator--d9d213ae-f497-40a4-8575-096386935fbd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f4e4f7-21e3-4446-81b4-074c347bfd35", "sighting_of_ref": "indicator--77f94c21-3a8b-406d-b22e-913f700c0cb8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7648daa1-f92a-4568-9e27-5f4813e4c57d", "sighting_of_ref": "indicator--56979f61-51b2-4b39-9b39-ba7247ad4c1a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218581ab-63f0-413c-900f-a6417cab0431", "sighting_of_ref": "indicator--f2a22c16-13c1-48f7-8543-3ecd9aaac227", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f705855d-64c9-4609-b43e-e92a2abceab3", "sighting_of_ref": "indicator--f2a22c16-13c1-48f7-8543-3ecd9aaac227", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d283e491-9139-4323-a489-f7f043518257", "sighting_of_ref": "indicator--f48bdd4f-1f86-4682-841e-e6f265e1fa96", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682a2aaa-8f7b-4a0f-bf23-30c39bad65bc", "sighting_of_ref": "indicator--f48bdd4f-1f86-4682-841e-e6f265e1fa96", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe1b817-87e2-4db9-9790-4fc8265ddf90", "sighting_of_ref": "indicator--b1a5d8a9-5cf1-4995-af86-cec0300b05ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0895ef3-d8db-4848-8197-3a737102b498", "sighting_of_ref": "indicator--aaa9dbea-8013-4f35-b1f7-c5326db49ace", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58495df-ad67-4a71-a600-64981f4b2c1c", "sighting_of_ref": "indicator--aaa9dbea-8013-4f35-b1f7-c5326db49ace", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d10bc17-96cd-4ca9-baf0-e84f14156bf2", "sighting_of_ref": "indicator--04aa083b-2e09-45bb-a536-70950587f54a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad0247d-7f8a-4950-a41a-66c232533f85", "sighting_of_ref": "indicator--75dfcde8-a532-4cdc-a953-d6f7f1471f2d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000a189d-9705-40eb-ab80-862e37b8e15c", "sighting_of_ref": "indicator--9546c93c-3d14-41b2-afe4-3bcb1a0a0ea3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e485a0-0d22-4785-b60f-ffc056b1fa7a", "sighting_of_ref": "indicator--e2a69e81-ff55-444d-9f77-e8b48e1d2a56", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c119b7b-c711-4e4f-943a-413ce36669ee", "sighting_of_ref": "indicator--60916724-63e7-4c66-b7d8-eefbb656618e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fb4421-5c81-4d88-b2ec-16babbe3f00b", "sighting_of_ref": "indicator--95224f2d-7ef6-4a9f-a114-510308aac8f7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef227b40-1f72-4e95-b8f4-274606e2b150", "sighting_of_ref": "indicator--d1546178-09e3-42c5-b062-4d8049b7c31c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7799a16b-0675-4b91-ac07-7f6b90803775", "sighting_of_ref": "indicator--a1068f97-25cd-4412-b1d6-fd4951ab784e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466824cb-4a69-4e94-beca-3eac49d1f9f5", "sighting_of_ref": "indicator--c53c57ae-8414-4b0e-836b-15ac690c560b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d78737-d639-43dd-9bae-9ef20a8e84af", "sighting_of_ref": "indicator--d3fa86f2-6945-453d-b33c-56397c8e2152", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e4a3ca-82e3-4b4e-89bb-336387c52d14", "sighting_of_ref": "indicator--abe3ea7b-a0b8-4c2f-87e5-2592fd929af2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd4e3c8-7599-4e57-a2b5-e2a6a59eada3", "sighting_of_ref": "indicator--bc86e801-afa8-4cb1-9f9c-214e20d74dc2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66774438-4ab4-40c0-b8cd-299a4a1f7c8b", "sighting_of_ref": "indicator--fd1d6bd8-d520-490a-ba3e-5a5aca22542c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83a11c3-4bfc-44ab-b97d-ab7a8f1d0cc0", "sighting_of_ref": "indicator--727683b6-e43b-4711-824e-9fb606cf402f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70db6886-ebec-4532-941f-c32ea7bcc053", "sighting_of_ref": "indicator--385edda4-56ac-4dcc-8f34-95ab98343928", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf48da18-3df2-444c-9a9a-99efe1561bc8", "sighting_of_ref": "indicator--c9ac99a7-1329-4aca-b2c4-40e3c5eed385", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beff9ae1-de2e-4599-a7b5-2e1c184ebe6f", "sighting_of_ref": "indicator--5637ce17-38d1-4a2d-9c57-60f3b7f4b95f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a114253d-f65d-45ed-a647-a947973b6f15", "sighting_of_ref": "indicator--abd84870-d33c-4cf9-8cf1-44e7e1ad1b94", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ee0f87-3917-4350-9410-62b4b914f079", "sighting_of_ref": "indicator--7ffcb489-9622-4f3b-8e66-e2dbd83556e8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67794e13-250c-4b32-8199-5ba67240d8fe", "sighting_of_ref": "indicator--3394c137-77de-450c-a7f4-24bc826b30e1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e020bcf2-6359-4ce0-bc7a-3cf0b1ae7ee4", "sighting_of_ref": "indicator--f85826f6-166f-4ae5-9ddd-100f0e7743de", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d66db4c-205d-4763-9dbe-51fd623bcfef", "sighting_of_ref": "indicator--5564296e-829c-4510-a717-7391f8982e01", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8e47c3-1132-452b-91b6-a8b4f367f1d7", "sighting_of_ref": "indicator--bdb6ed5b-8816-4a95-895a-04b44c5003e2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af56a067-500a-4552-a23b-041fcff6b909", "sighting_of_ref": "indicator--a55e5286-5629-433b-965a-c1852df7e940", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a5b2af-922b-4460-85d2-4a6b3f822838", "sighting_of_ref": "indicator--474d0379-6a41-4f95-8786-eb83dcf2661c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50634621-640f-4075-a9c9-d095b89932aa", "sighting_of_ref": "indicator--4782fda0-fb35-4d16-afa4-4c72451fcd42", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11692ca2-740d-4be4-a2ac-f2f6cac51a11", "sighting_of_ref": "indicator--19962545-bbf4-4597-8666-37d304967459", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cc2088-e88b-457c-876f-ecebdcd061c7", "sighting_of_ref": "indicator--ed39a762-94f3-46fb-b2dc-9152f2f95538", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5aa2bf6-70fd-4c40-9349-d28b4da4bccb", "sighting_of_ref": "indicator--69fd2fcb-3564-45a3-82fa-4e4bdb820f71", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263f4f53-04e3-4d7a-a479-0fae5e2a5e5a", "sighting_of_ref": "indicator--324408b9-8ec4-427e-b02c-50903b550a25", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c2b96c-5984-4535-bf43-9ae712aa7f80", "sighting_of_ref": "indicator--1eff351c-ade4-49fc-abd3-04a3745fb047", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14af1ea4-698a-4b44-8d93-0ebb19a20a90", "sighting_of_ref": "indicator--9c85053e-0908-4d90-9acf-29463e89395f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ca9012-a61e-4abb-87b6-6fe7b4dbab5b", "sighting_of_ref": "indicator--5011f53c-d694-4082-a19d-ee0175025271", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da146cb-4746-4e30-b079-22af5c5d592f", "sighting_of_ref": "indicator--57d41ee3-110d-491e-a406-5f847962ad41", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525f75ca-305b-4968-bcd4-9dd244a65cb1", "sighting_of_ref": "indicator--6481a3a5-5a24-40d5-acdf-698bb518ee8c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f709b8-64a5-4101-9cc5-4e9c354f7a38", "sighting_of_ref": "indicator--a768ff8e-9f8a-4ba5-a892-6fe9010e99a5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce3e894-5689-44e6-b6f4-c77472c5d7a3", "sighting_of_ref": "indicator--00c8f1ce-9a39-4e05-83dc-c096d3f81f5d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c86146-d7f2-446a-bc13-d15a45298d59", "sighting_of_ref": "indicator--d3b96659-ab8a-45f8-b615-8dc58d0dae99", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94aa6f1-34d8-4821-8053-769dc68b8770", "sighting_of_ref": "indicator--069a210f-f9c4-4f26-bacc-2f76288f99d1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e9c79c-894d-44db-a837-cb6b99bbd736", "sighting_of_ref": "indicator--82dbceee-0993-477e-928f-276af939cd68", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bd8aba-5329-4ea4-9721-cc015c1d8727", "sighting_of_ref": "indicator--448063b7-4f15-4614-bcd6-594bdb9d5669", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95995562-f3b3-4d38-9db0-9af934c7c551", "sighting_of_ref": "indicator--448063b7-4f15-4614-bcd6-594bdb9d5669", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1ee67a-57bd-48f8-8320-c0c7b4313e7e", "sighting_of_ref": "indicator--d427c265-bd7b-4219-bcef-0ccb3a8125df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec02e9a-29f3-4e8b-9309-2a4469e4254e", "sighting_of_ref": "indicator--76931f7b-a26a-4808-86c4-1b6f8ce3b6a7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5558a0ee-bcde-441b-a996-0877cc24a50a", "sighting_of_ref": "indicator--904cc966-16e3-4677-9b77-9b67b78eaa03", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06e1513-d1a0-4d00-b106-41f205009c67", "sighting_of_ref": "indicator--43057a44-2783-4ea5-86de-ae57e575ce3f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1734e201-b844-4c28-9c54-fa1f4cf5d876", "sighting_of_ref": "indicator--4171200c-57e6-4788-8006-adacc608fb28", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b971cb3-e62e-4729-9d4c-e21f4535dee5", "sighting_of_ref": "indicator--0bbe56fc-850c-41fc-ba4e-7f4ce13b2932", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922decfa-be09-449b-8b05-46309b7306e5", "sighting_of_ref": "indicator--2d568c69-3486-4993-a537-7ee21e38e293", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784054e2-f8f8-4ed8-a45f-45fc1baed964", "sighting_of_ref": "indicator--506a3f88-9fda-4ec1-aa4a-497971feb80d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12904e66-a2c2-4aca-86d2-f3717f0c3dc9", "sighting_of_ref": "indicator--4af8d8ba-86cf-4e16-9647-9445d25af0b6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebf30ea-9cdb-471a-9a68-2fb31c89b01b", "sighting_of_ref": "indicator--0277e7db-0a12-4399-b953-1e0eb32a3d0e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9f4b21-ab2c-4840-8129-db41e211a0e1", "sighting_of_ref": "indicator--0e2c1c00-cf6e-4f89-9f4e-1820096ada7c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb78c42d-ee12-497a-b137-4983d72f3bfa", "sighting_of_ref": "indicator--376ce992-1687-4464-9534-78c02c1f1430", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a8add3-d01e-488c-b38c-d043c5aacbeb", "sighting_of_ref": "indicator--753449c8-2129-4f8e-8d81-42aba420e868", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b59f65-0dbc-4cc7-b572-00b066e66de7", "sighting_of_ref": "indicator--33e21a72-9dfe-4867-8ac6-b20c6b8714d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d933edc-2d02-44c1-853d-a30f2391236a", "sighting_of_ref": "indicator--aaa58c4f-7016-42ef-acb6-48d4a5817c5b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbb3621-c757-4669-ab81-c976af7da5e9", "sighting_of_ref": "indicator--ca55617b-a29d-4307-9773-7424d9c68355", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daec1785-7e16-4f5b-950e-9504f8492b1e", "sighting_of_ref": "indicator--efbcbb9b-a304-4ed5-8036-fe3c05f4ad78", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5dda97-cb78-428c-a753-4830a7c53615", "sighting_of_ref": "indicator--5a38d862-7ee4-4a1d-a587-4899a0dc8b90", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220599ab-7f0a-44a5-9e19-a8191f1fd819", "sighting_of_ref": "indicator--83ba4d5e-22c3-4694-b9e2-83b0cc971d82", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b13f224-29e9-4604-9114-2f58132b557c", "sighting_of_ref": "indicator--6c9566f3-e11b-43fb-8175-727102b733a0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36352a09-8397-41b6-8c01-fdb56d480f1f", "sighting_of_ref": "indicator--a102f4e4-45c3-4efd-9347-e15f32539bc6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47714dae-1ae7-4e61-9504-40af02feb3cf", "sighting_of_ref": "indicator--4234fd51-35ea-4dcf-8dda-3d5d92b3445f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d51f612-1699-4994-a325-1b79f65f1c6f", "sighting_of_ref": "indicator--e4feb920-3a60-438e-81cc-c69997ac1a60", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c2490b-d26d-49e2-ab39-26d26a408150", "sighting_of_ref": "indicator--d18b6c60-a998-435b-a91b-7a60a50aec9e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8f129f-1c84-43a6-a1f6-17bc9b624991", "sighting_of_ref": "indicator--12308d28-3655-45a5-b5ce-408163dd2aa9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6f23f2-432e-48eb-849b-067f24749c90", "sighting_of_ref": "indicator--28d12474-0064-425a-bf06-a6fa22ff7473", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51630e8-99b1-488b-a81f-679a8c6f8cf6", "sighting_of_ref": "indicator--d1cea8b8-c80e-4f43-b017-beba780cf956", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a19ced8-28e5-4c81-a5e6-a28afabedd5f", "sighting_of_ref": "indicator--1f8c3bad-156e-4c0b-b402-fc6805642aa7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ee226b-789d-48fc-9a9e-82b341759b69", "sighting_of_ref": "indicator--56e9e990-2f04-47ab-a1cb-1124011bb72b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c52e95-f06f-49f3-8ded-aea5cebfa6f4", "sighting_of_ref": "indicator--8d00b4b9-08f3-48c0-8310-5119199cbabf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb93598-05ef-4571-9bde-964d5350c525", "sighting_of_ref": "indicator--1846deff-59a7-47be-9f4c-60f9ed104ee1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63505d4b-7d3c-4462-97dd-daf416964385", "sighting_of_ref": "indicator--1948ee54-8361-442a-bcd6-5ca51cfd6056", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575fa300-686e-41fd-8a3d-e3c73cf88105", "sighting_of_ref": "indicator--5f173c2f-8749-452a-bea9-ff1bb5a0ed07", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8545473-5fa5-4039-a9d3-bf97adab9617", "sighting_of_ref": "indicator--97969283-c214-4e90-bacc-27a3e8e7fe4a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e60bee-7d97-4075-bf91-92e76e014b8c", "sighting_of_ref": "indicator--6e42eaf3-e570-43d6-bd71-b45dc625bd24", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728d545b-3874-4560-9c01-e9cfc488f218", "sighting_of_ref": "indicator--6f0095d3-eca9-497a-a1b0-05fc0d928aba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eda509e-dd21-4c20-a5a2-fc895121a9ae", "sighting_of_ref": "indicator--b2d223af-a9b6-4bde-89e1-da56b975a41c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52dc278-1729-4d41-b5a4-c6bb945c2927", "sighting_of_ref": "indicator--3dc6d6d0-e192-47ca-951c-2bdafb0e911e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff44151-3dd7-4bcc-9aa4-d9139140b393", "sighting_of_ref": "indicator--f44b191a-c5e3-4ca9-a631-7057bd00ad66", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41e4933-e88b-4aad-bc03-bd9c73998960", "sighting_of_ref": "indicator--6fcb228c-4128-44ee-8e2c-71dcb00a9f71", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479464be-f255-4b45-a013-860ffd9a5955", "sighting_of_ref": "indicator--27e5994e-b5fc-427e-bc3d-1354554b3c32", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b420375e-264a-481e-8157-cc4ed241c3f6", "sighting_of_ref": "indicator--ffee3a0a-35c1-4164-b766-b9441fb5b485", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a22eb1d-38e1-408d-9502-268aa786f800", "sighting_of_ref": "indicator--01cdb7b1-8977-4b18-8945-ac50748683ce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9978350-2c36-4e32-b034-c1af453f0f88", "sighting_of_ref": "indicator--81855aad-4b32-40d2-acda-67f247a0f899", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b934241-1e24-42ed-904b-49d67672a999", "sighting_of_ref": "indicator--eed07180-19ab-43a7-9a72-0b68f4fde18d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69edf51a-7541-46d6-b3f0-3dbce34316f1", "sighting_of_ref": "indicator--1e744fed-c802-4cf1-b565-392c2fd77879", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d26ead9-7f92-4f9b-a917-b9bb8100de8b", "sighting_of_ref": "indicator--d478ebe0-8178-44de-89ff-32228ed6c492", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1f004f-8a1b-49fd-816f-1fa3f36c9786", "sighting_of_ref": "indicator--ce788038-68ac-49b4-9938-a7260cedba95", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a0ed1b-74c1-4e0c-8f18-cf05767883dd", "sighting_of_ref": "indicator--30039ea3-8255-42dd-a5a6-ac0e7e122faa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fba031b-9db2-46cb-a53e-0e426374ca2b", "sighting_of_ref": "indicator--9e752b68-6079-4eca-b62e-443f9d63c665", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d7e668-c426-444f-aedf-68540ddf9e96", "sighting_of_ref": "indicator--1df0edee-bd65-4e7a-a70a-a51f03108109", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b778c0-fb35-4bc8-9d77-e0734e6e3749", "sighting_of_ref": "indicator--c3e30805-581a-4ee2-b1cb-701724a8070c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e8d145-7747-4e2b-9e60-5af5f453b724", "sighting_of_ref": "indicator--2dec2afd-3a45-403a-9bfb-28d8d3ca2da2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed575dc-784f-44fc-b27c-8bdd98837802", "sighting_of_ref": "indicator--35127b1c-d11c-43f4-9632-ab3443deae43", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100282fe-d7f9-4ba5-925a-283215787930", "sighting_of_ref": "indicator--35127b1c-d11c-43f4-9632-ab3443deae43", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cef5057-70e4-464b-af53-97c135680820", "sighting_of_ref": "indicator--b8fe80ae-1b32-449b-a9c0-babc6c003870", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c860766-2bc1-42c2-9561-28684a35cff8", "sighting_of_ref": "indicator--a36fb84d-c73c-4b1f-a680-18033c64006b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e631df8-0868-47b3-bb14-9072997b3df0", "sighting_of_ref": "indicator--d2dd8c8a-c842-46bc-a680-784129806544", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103ba5aa-8e97-4c67-bc00-e4b4505b6c48", "sighting_of_ref": "indicator--d2dd8c8a-c842-46bc-a680-784129806544", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b2b5ad-8bdf-4e1f-ac40-f83b8468db6c", "sighting_of_ref": "indicator--1aba2a1d-2b17-44f0-af9d-33d078b64cb6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df49544-124b-4d34-b2e4-0b14ffb209dc", "sighting_of_ref": "indicator--15ce4708-0646-4dc2-8339-2c6bb1ba5b7c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b4fbbb-69e9-49b8-bd7c-a15d33847bff", "sighting_of_ref": "indicator--57dbeeeb-c5ce-4c66-87c4-e2f42c083457", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59782683-90da-4674-8473-307d9a78b2d4", "sighting_of_ref": "indicator--57dbeeeb-c5ce-4c66-87c4-e2f42c083457", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf3f242-8e43-4320-910a-98585d9e4404", "sighting_of_ref": "indicator--816df394-74c4-4a25-8fa5-d0b65a76b1e7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da4cd96-1a83-437e-b0af-b4f2f59e5ad8", "sighting_of_ref": "indicator--5f9e4097-9bd0-4d83-8dd6-460ff92c4070", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44693a48-3e57-42d2-a077-173881a68a8e", "sighting_of_ref": "indicator--23078251-875a-4356-b96e-1431729d8f7f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd6f7c0-7f54-4f4f-9e60-5a5cfbcaab48", "sighting_of_ref": "indicator--efdf1c4a-7cc7-45a4-b9f7-a8c2075bd91e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce74be5e-3d22-4fe6-bfc0-9e7c2464532a", "sighting_of_ref": "indicator--33ab29d0-7061-4afc-99c4-177a8abea34e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f115705-2e2b-40c9-ab78-993429f00b84", "sighting_of_ref": "indicator--3e7e3d32-3aa0-4247-b682-44f98bb6ce20", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729e570b-10a4-4461-96d0-6b7f49893381", "sighting_of_ref": "indicator--f083bf25-b99e-4bc8-be34-a609edfb0165", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6105e4a3-1c43-4538-8ebc-de1edd3f8261", "sighting_of_ref": "indicator--991d6b03-8b5e-4494-8a60-eda3910b8a45", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdc4fa5-d39f-4eb0-98b2-5238e7e6fef2", "sighting_of_ref": "indicator--ca997552-8ba5-4c6d-8fc9-e436537b3543", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a95f41e-1045-4040-88df-3b43acadba8d", "sighting_of_ref": "indicator--21d59efe-30bd-406a-9a4f-9ea2c059db2d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90626aaf-5148-4f09-b77f-9a93c94c8ce1", "sighting_of_ref": "indicator--70c8393b-7dec-4d04-8841-d98a0ad56759", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca39da2-02ea-466f-827c-2b887602e441", "sighting_of_ref": "indicator--cd94affa-fdc0-471f-9a8d-66b784a39708", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93fea4a-f8c5-4378-95c9-6645aa973799", "sighting_of_ref": "indicator--4abab003-0944-466d-8048-dc986f0a5740", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbae565-1c59-4de0-9b97-3457433b90d4", "sighting_of_ref": "indicator--4931535e-b4e9-4951-bb56-78c44c1297fa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592061bb-3eb9-4beb-97c4-ee6e561b57dd", "sighting_of_ref": "indicator--518e2779-f339-4f76-91c2-85bef86c1d0b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebe3e8d-dcf2-4603-98e5-63d0dc96b584", "sighting_of_ref": "indicator--e2f5f9be-7103-428c-a95b-c6078582a4d7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9e8d75-3a47-43f5-a56c-a01e50242dc8", "sighting_of_ref": "indicator--1c01b5bf-6b5f-4c71-876c-a573af09ebdd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5a2ae1-aeaa-4f3b-b8a7-ed48a53021de", "sighting_of_ref": "indicator--8cad7293-2cec-4b4d-9f6c-3c0b5b45f982", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52e627d-4563-4236-8b50-276c963ae5ac", "sighting_of_ref": "indicator--840c7899-f778-47f1-82db-b947b60bc9ff", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba88b7df-1c1e-4679-84a5-78c03864d2a8", "sighting_of_ref": "indicator--92c242ac-019f-4919-943e-062fe205928b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c7fba8-17e4-4384-8df2-dbdc198017d7", "sighting_of_ref": "indicator--62c9357c-24e5-4e58-8e7e-818f2a19c274", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f9466c-c0b5-404b-9b7d-bace5d7c1f36", "sighting_of_ref": "indicator--cd5b5f2c-74e3-4939-95b3-63ddbf00278b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73f2feb-f015-4b15-ae36-93ddb75dbddd", "sighting_of_ref": "indicator--f26423c4-5ec8-4e3e-9e99-b7c85cc25d80", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c57efca-7568-4258-aa78-a3afca3d2504", "sighting_of_ref": "indicator--e535f07f-1c69-4d3d-9d8d-172cf47bc4cd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7e2226-0392-4eae-9ed7-d86fc18ab4db", "sighting_of_ref": "indicator--24bfef3a-d8f2-424f-92ae-b59f784f9d32", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b42e05-9ca9-441a-b1b0-57d41046fe3f", "sighting_of_ref": "indicator--63b9bfd7-6582-4b53-a88d-2303393656d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcbf140-10e5-48e5-ba51-cc004070bc9e", "sighting_of_ref": "indicator--ed5af8fd-eb56-4f5c-833b-985d5b3675e0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b343462-56fd-4aee-9ac7-421feb9954df", "sighting_of_ref": "indicator--aa04b1ca-fa37-408d-89a3-87f04ee78eb5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043a62f2-6666-49d4-a434-56e2bae89191", "sighting_of_ref": "indicator--ecf0df88-1da3-4a57-bd13-ea779e40c2e0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11d19a2-a715-4499-9387-bb47c7575a5b", "sighting_of_ref": "indicator--592fa5b6-aa1b-47a7-8156-80dee7617503", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8fd1b4-0a98-455b-97e8-8cd214a087c5", "sighting_of_ref": "indicator--7f7ac874-1b0b-448a-80b0-513cfac6c881", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718c1fe9-5590-4678-b8f6-83aedb365f65", "sighting_of_ref": "indicator--d3f60511-53d1-49a8-a255-3e87315e8b56", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029d95d8-9c2b-4757-9487-5dcd442f209c", "sighting_of_ref": "indicator--1732959c-b14d-4724-bfae-8af87e8937e5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fd4e5f-4d00-4cc6-88e2-f71e27df1dd6", "sighting_of_ref": "indicator--acf23965-bc4b-4def-b480-6562aed2cb8f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66b51ad-9752-45a5-b449-2cadebfd42cd", "sighting_of_ref": "indicator--57632b21-05e3-459b-856c-fea7f0d8a6ce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a6ccef-4750-4601-bc2b-dbb36620dfd4", "sighting_of_ref": "indicator--0a50ee9e-4e86-4b50-b759-1a2eab091043", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e53031-242d-41fa-a637-fb6004fdf476", "sighting_of_ref": "indicator--32fa60fb-630d-48e5-96e6-44a21db605ec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018cd72a-00f3-48b8-a2c3-4c3d705eab1c", "sighting_of_ref": "indicator--8d982a32-126c-4397-8930-db5f8710e5da", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4a6ab2-9447-4974-899b-dc290644cb2b", "sighting_of_ref": "indicator--8f1d6dda-bb1a-44a9-b2eb-82ac61971866", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e53a3df-cf17-4915-b048-cc993883af96", "sighting_of_ref": "indicator--91fc8a3e-a1be-478b-8469-f17656d18a95", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d340e2d7-cce9-4d45-9da4-eb790702e33e", "sighting_of_ref": "indicator--da271799-c51d-4cf1-b028-ae4395668a86", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de448c2-e91f-456f-9855-46656b0ed167", "sighting_of_ref": "indicator--51c1ea1b-b674-44fc-9ffb-8e09b327999b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad82ed5-ce7f-4a27-931f-3c86385dd60a", "sighting_of_ref": "indicator--53647a30-afeb-419a-acab-727d97cda50d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72aad0c6-bccf-410d-91be-18c4724a70a3", "sighting_of_ref": "indicator--59484a3f-ed82-4f67-8b70-ea04f7618ebe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5835e888-23ec-4308-9fcf-fcc282f01bf1", "sighting_of_ref": "indicator--7db488a5-de5d-4765-ae6d-034ba7fd85e8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2193d878-b409-4bf6-bc69-2c55a6c59858", "sighting_of_ref": "indicator--bf5bcd18-48e2-4f0e-b432-609f5b68181d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a7491f-7452-4d36-b17f-29dd4012e5d1", "sighting_of_ref": "indicator--89bdb634-abe9-41b9-aa86-1a3d36de2e79", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adb1588-a47f-4dcd-8c48-062d16e91d53", "sighting_of_ref": "indicator--e3d73ae3-6dd0-4254-a1e7-ca44a395c1be", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0af948-62c8-4589-bbc7-6ff6bfc1aff7", "sighting_of_ref": "indicator--5e5f02a4-7cd8-4729-afc8-070eb0f135e5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8095c62-0d90-4f4a-8f58-019ca25327c5", "sighting_of_ref": "indicator--9f10cfbf-9596-4b9b-903f-cba02f5b51a0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ef3857-00e1-48d4-a1c5-625da2bc05a2", "sighting_of_ref": "indicator--f1d10dec-9a83-4b62-a511-91ea01b50da2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4f02c9-1fc6-4643-bdbd-6595c4017553", "sighting_of_ref": "indicator--1047c6ea-7351-4a4f-a140-c4381ca289e7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d254c1-c418-413e-8d9b-38838262489e", "sighting_of_ref": "indicator--db4b4f0b-a87d-4360-b9a6-4e740016e978", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a941d40-dd7f-45d9-bebb-b4e5c22c337a", "sighting_of_ref": "indicator--de560b3a-d356-4d90-b0ef-eef483f0d9df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27c40fb-9ebf-48c8-b557-b253baf35ff1", "sighting_of_ref": "indicator--929cdcd4-5750-498f-8d30-89ffbce8960e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a8f39b-9e60-4f50-8c91-5d6b5b36ad1f", "sighting_of_ref": "indicator--e872fa7c-c6ef-400d-bc95-3a74003c5829", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837537a0-37bb-485e-b4b3-15f4b22c0724", "sighting_of_ref": "indicator--c8ebcbed-bb30-41c2-8cee-041565ba71a1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f6f400-67a8-48e0-afcd-4512f6150b79", "sighting_of_ref": "indicator--c1799145-c8e8-417f-a520-28079700bd6c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100ceb0a-74b4-4785-9aab-14b35d439bc2", "sighting_of_ref": "indicator--c3787957-cf7d-45d1-beac-23ef49ce92bc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca82722-dd06-4dac-8569-4b55f55febbc", "sighting_of_ref": "indicator--043c84e5-7d31-424d-a239-9b4cb5d1cb84", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3aa206a-180e-4888-9719-eb29e65866af", "sighting_of_ref": "indicator--47bf1f9c-6d4e-4f24-b482-81ae3c889e49", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31a076c-a882-4451-ae98-dd3cade5491b", "sighting_of_ref": "indicator--569206f1-73f5-4a4e-be29-c1b4f76fbd08", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a904fe-f164-4140-8771-27cd3dba9b6a", "sighting_of_ref": "indicator--edca6459-ce00-43d6-8b64-9ef7684a785c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef98d60-75a1-4c19-b5f7-ecca7f7ee59d", "sighting_of_ref": "indicator--786892fe-4f59-4e36-97ce-ab70cd1535ba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983ddcc1-e403-4f8e-8bc6-57edd690d2a8", "sighting_of_ref": "indicator--9600f2a7-fd52-4a13-8f35-e13fc3d8af10", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc6b43c-932f-4af2-ab78-7e13ad4c7b75", "sighting_of_ref": "indicator--6d24b5a6-806f-4054-a8b4-4efc3d86adf4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6369965c-7b12-42ef-a3ae-5895914dcedd", "sighting_of_ref": "indicator--0d4d9dd3-fc2c-44c0-b436-f69f7b05c245", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5b3843-ff8b-42b6-86ee-d862c1f6775e", "sighting_of_ref": "indicator--4ebb8ace-e851-4397-97e1-006912c9a001", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7fc3c3-287d-4f95-9a36-198c77b14295", "sighting_of_ref": "indicator--7d66a85b-c38d-46be-82ec-96585501645e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36d8616-7dd5-4a87-8c83-a3aab557c1ed", "sighting_of_ref": "indicator--1b938332-8c1b-4b5b-8b20-5b1708fd3d91", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a114cd6b-8953-4d78-bc46-3c2501be86ff", "sighting_of_ref": "indicator--9cc40d65-0ab2-446f-b229-a9d47e9bfef9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894efbbc-775f-459d-834a-c3f6f9295128", "sighting_of_ref": "indicator--4ba32930-d941-4594-b6dd-51081e9c3bb5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b35936-3da5-4d64-9e99-28c41396a7ce", "sighting_of_ref": "indicator--4a6a43db-e5e0-4140-9966-d92ba980a432", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdf4073-6334-4c14-9294-4814d874e43e", "sighting_of_ref": "indicator--ed25b30a-659d-48d4-8f5c-9ea40b7b830b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733c073f-46c1-42cd-92e9-5afb83a0b365", "sighting_of_ref": "indicator--deea3690-03d1-4489-b1eb-868688b9469a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a106f7a8-5693-43d3-9ef5-7571800885d0", "sighting_of_ref": "indicator--44bf03c0-d640-40d0-8727-819ab7c721e8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007b4e79-dca2-4f27-8d03-e32dc283dc95", "sighting_of_ref": "indicator--df461120-2a75-4b80-aa86-910a8d697cc9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87be4c5-57d0-47d1-89cd-6b564a2e826b", "sighting_of_ref": "indicator--f33b42bd-ed60-4eaa-8232-3479e492c6ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82bee46-4009-4a15-9eb9-6e0996410b5f", "sighting_of_ref": "indicator--e5034618-c0fd-4051-a342-27ca7caee3aa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8893f05-c1df-462d-bfbc-db8112aa564c", "sighting_of_ref": "indicator--77b180ce-187c-4a5e-b68b-ed4b6a7c6769", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb42ee5-222e-401d-aceb-7ff42deea98f", "sighting_of_ref": "indicator--2238a9fc-0e74-4c7b-9af9-7f87e47d7f01", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f2e24c-03ea-44e4-8800-9c8d3f906190", "sighting_of_ref": "indicator--bff70b31-da7c-4b38-a90b-f6160ca4bd39", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd0b567-3ca8-491e-ad3a-5f15b93710c5", "sighting_of_ref": "indicator--05970646-80af-4a4e-8293-96a2d2460c84", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b9f67e-6371-4dd3-af60-6e07826fdb20", "sighting_of_ref": "indicator--fea0572b-87bc-434d-873f-356af5194eba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f98daf-df64-4cf4-9906-f47b22ea8ccb", "sighting_of_ref": "indicator--1519e473-d770-4555-aba3-3e4582460a15", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7826a69a-2065-4f62-bba0-c28597ddf60f", "sighting_of_ref": "indicator--529527e2-7240-41d0-904d-0a9203d90aac", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7081ae-c647-42f3-ad17-56bea292a4eb", "sighting_of_ref": "indicator--3865aef5-0141-470a-82b0-7731683ef6b3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fca19cc-a29d-4ab8-96eb-58cda7b2476c", "sighting_of_ref": "indicator--c128be6d-a7bc-47d3-8404-5caff6358875", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae8f94b-c969-408c-b039-a9d4676aca15", "sighting_of_ref": "indicator--d3e13640-6f6d-4f2a-91d9-47ac91ab1bfd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff99145-a85c-42f8-9ee7-c718b6c454f2", "sighting_of_ref": "indicator--eeeaedbd-b17b-4035-8ece-0016ed54ca91", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2435ca6f-e129-4b8b-a6a2-6ce862010605", "sighting_of_ref": "indicator--c267a593-6d6d-4526-9fff-481fe5542e43", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bec98b-013b-48fa-8160-9a85f601cd79", "sighting_of_ref": "indicator--ebc1f420-cffd-4d24-abe2-3aba1096bda2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92a7f2b-3875-4d51-a242-d7b9e2007d8c", "sighting_of_ref": "indicator--afa14d02-4263-4f13-9ab2-a70cc22b1f01", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7146ec3-b67d-45cc-92ed-34f596727faa", "sighting_of_ref": "indicator--20cfaf06-2095-4ddf-92d0-5168054e76cd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4dbc07c-f955-4615-9b06-8e0558bcf11c", "sighting_of_ref": "indicator--149c1080-a580-4d98-a4ba-572d6af14878", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac098992-aa23-4dcc-8fc9-acadb071fa8a", "sighting_of_ref": "indicator--da736e52-beb6-4e44-ac78-c2c9ca9a69e2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc922b8-fffd-4d35-9b7c-1c59cf6654f1", "sighting_of_ref": "indicator--bc7f3cf2-be77-4e14-a466-4453eecc81db", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70820b7c-b2c0-4af6-a31f-1cbb0adecdb0", "sighting_of_ref": "indicator--56046ac7-0ecc-49df-b924-14a4103bad8e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e106df2-1e36-4ed4-a96d-48c490a31fcf", "sighting_of_ref": "indicator--1632672a-e276-43fa-a0e6-2edd4b13e183", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc58925-d2b6-4a44-bc17-6d3799ebb612", "sighting_of_ref": "indicator--0a1731cc-1810-45f5-a757-38572c985920", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d950f028-3bf8-476f-a950-3f196793efce", "sighting_of_ref": "indicator--49728338-587f-4152-97ee-bc83ee86a95b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4d7a79-1d22-461d-b524-59b22c7d40f4", "sighting_of_ref": "indicator--9f738528-2e55-4738-88e1-4693d7f5b473", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669dc41d-5731-4958-b5b7-1f48b7ed942c", "sighting_of_ref": "indicator--d28fa4e8-e7a2-4712-b51e-a72a62ea856a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365d8ffa-bb37-4f27-b9de-8044bf9390bd", "sighting_of_ref": "indicator--5ed4843d-8481-4107-ba15-ac0b3af9d95b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b0fb26-3402-42cf-a196-7cdfe981d54b", "sighting_of_ref": "indicator--895660b2-e710-4d30-bf4c-1b32d41b0a56", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cd9c47-231b-4177-a5ba-0885033e214b", "sighting_of_ref": "indicator--37000a17-cb65-4aef-a2fd-5e876b0ea8a5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b26819-4a46-4afe-adb3-62832d2235d1", "sighting_of_ref": "indicator--306a626b-d1e4-4c54-ad43-276ac5bcaca6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783f73b6-e159-46ed-b400-557ad304f8be", "sighting_of_ref": "indicator--bad58093-85df-4ab6-ac3a-f52ce84fbd32", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170ffb81-ffb3-4849-a303-aad61b6b8be0", "sighting_of_ref": "indicator--7820bc3e-86df-4999-a7f3-e3c31345bb5a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0bfa12b-029c-4407-9fea-324cd47d4c18", "sighting_of_ref": "indicator--75474078-133b-476a-8eba-7ada4994d62b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a8ae9f-2b0f-4694-bfd8-28cff0373c05", "sighting_of_ref": "indicator--eb5ed293-ca8f-458e-b5da-6e730aea1561", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d954a8-a636-455e-8330-02c3be5e9a3b", "sighting_of_ref": "indicator--d4e711f5-4376-4263-8ac2-a8b5c49289ff", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97646d59-d04d-4195-874c-22a73d1e5190", "sighting_of_ref": "indicator--9a8dbc73-35a2-4ccb-a9c8-12495e64e619", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334cd999-ae53-43f5-9249-a1f121119fe7", "sighting_of_ref": "indicator--f9a76973-cced-45be-b16a-7a6e0671c8a4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e003d708-4ec0-419d-b2a6-e748a13ec57f", "sighting_of_ref": "indicator--0a20556b-be06-448b-8b8a-81b676b2a839", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055d6c3a-559e-4d39-b020-78c1be6babcd", "sighting_of_ref": "indicator--1b3af599-3a2c-4c0a-a6b4-bd39f1e34c8e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66239312-1ded-4692-b068-735b814283af", "sighting_of_ref": "indicator--90c67484-892f-43ab-aab0-a8a44e883bdf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fa0881-0fb0-4e2c-892c-457be3fcc851", "sighting_of_ref": "indicator--34297b03-753e-462e-b4af-cfd6da472f37", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10d9264-6c24-4f2c-8598-7911798491c3", "sighting_of_ref": "indicator--42d0339b-e52e-4be6-bcf8-c643753d828e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3ed5c3-3671-4628-952b-9b994dac5d59", "sighting_of_ref": "indicator--027520a2-18bb-4cef-b4f5-e07f8787ed2b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667b0668-7529-4d4d-92ad-5822fa838b72", "sighting_of_ref": "indicator--e19893c3-3f4f-4333-995d-bd4aa59b7616", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b689330d-4d31-49cc-a7bb-a43c3135a868", "sighting_of_ref": "indicator--af8f10f9-2df2-4d74-b000-3e0ee5f34312", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f949ce-5022-41c9-bd59-be61ae5c869b", "sighting_of_ref": "indicator--66f2290c-39e1-4725-8417-ea80a4b87b41", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ba49b4-e733-44fe-915a-150b081f8804", "sighting_of_ref": "indicator--4bc41159-bcc3-4f56-9f1e-154ba8f96475", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3802ba3e-9f08-4244-bc3a-5599ef46acd9", "sighting_of_ref": "indicator--95692319-eedd-49e5-9e43-dc301d9228ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065e9ad1-a7c7-4a12-a014-42b4474d70e4", "sighting_of_ref": "indicator--f6f316df-9757-425c-bb60-4096ee374ddd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7cb733-b402-4a8e-bb38-4db09391f56d", "sighting_of_ref": "indicator--085cf37f-220b-4c37-bcbe-64439afe22c4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faef7fcc-ee75-4044-8bda-97c653ae02f4", "sighting_of_ref": "indicator--a3531c70-9a3c-46bb-a3de-f0c82a56b4c8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9ef7ab-b2f6-40d1-89d2-c7ef2f7e1cf7", "sighting_of_ref": "indicator--650a3365-03d8-479f-8a79-a4f34bce8f47", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66f71a7-2ce9-4412-86b0-fee0d73a3ef6", "sighting_of_ref": "indicator--ae7e8b65-c11e-4de8-8607-021a41a3c9b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42911d50-47f8-43a9-b946-2df550fb6fee", "sighting_of_ref": "indicator--73db4966-0221-4ad5-a3b7-c51babdd8551", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc1d6ca-3c1f-41ec-9400-0a8db8cd08d0", "sighting_of_ref": "indicator--4d59acf7-e048-4060-929d-63133a1ac910", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbaba4ab-6357-4a7b-b1c4-08c098bdad9e", "sighting_of_ref": "indicator--c738c560-56a0-4cce-9d44-837de7334dff", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfdfb9c-0d8b-4f4f-ba0c-606137a53c90", "sighting_of_ref": "indicator--bbfe9f19-1478-49c4-8b90-5f29d275a9b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc701f3-fb14-41da-b8ea-1fcf6743d2e3", "sighting_of_ref": "indicator--915e7ecc-d849-4cf2-b583-aabb3c74ae42", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2daba03b-5177-478d-8612-da2330789839", "sighting_of_ref": "indicator--120777e8-681d-4c4e-a9d3-09bf5284f882", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c901027d-c473-4ac1-8a97-00d42612e956", "sighting_of_ref": "indicator--e3ed4ce3-b6c6-4061-8799-2989636809f8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e32e1ec-c636-4b8d-9870-5c6aec6c4f59", "sighting_of_ref": "indicator--4ce28ddb-6114-4523-9a8c-45c9eda42de5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb815801-6b54-48b9-8f10-438acbf05bb6", "sighting_of_ref": "indicator--8482485f-8d9b-4e6b-851f-d17006c3c0d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504e6625-89c6-4e7a-a698-28cc4e1f5a31", "sighting_of_ref": "indicator--edea7549-555c-470e-bad3-ea22bda08ce0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357889fd-6874-4664-8a3d-bc09e137739d", "sighting_of_ref": "indicator--edea7549-555c-470e-bad3-ea22bda08ce0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306da5de-69ce-4b45-b5bf-6f6bd2fde5c7", "sighting_of_ref": "indicator--cb17ccd2-0daa-4d05-a209-135d5b84c334", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0ae3ca-a473-40e6-8ba0-a713c0a3f63e", "sighting_of_ref": "indicator--cb17ccd2-0daa-4d05-a209-135d5b84c334", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ac7da0-07ef-408b-9efa-1fda7a3b3d48", "sighting_of_ref": "indicator--c7fa6f47-2759-4853-bfb9-4e420bf58d6b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f558e77-d44a-4887-845f-64090c3a0117", "sighting_of_ref": "indicator--afc53ba4-46ed-4240-9a47-68d1660ee5e7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7657e4-1413-4b95-b320-adfab80b471c", "sighting_of_ref": "indicator--afc53ba4-46ed-4240-9a47-68d1660ee5e7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8a713d-60d2-4b46-b9f4-9a16435cc4d6", "sighting_of_ref": "indicator--bf091480-cfd0-4807-b41d-9f7fbbe17ce9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d2dbe6-36a0-427b-859a-9fd6de2342ba", "sighting_of_ref": "indicator--3b8de919-d01e-4064-a011-badac49b9970", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0461850-733e-4d56-ae64-6edd923a8999", "sighting_of_ref": "indicator--5a5b8065-123f-4722-9d18-ebfb465e4058", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833a6506-9158-4c38-a782-7f9d352b08fb", "sighting_of_ref": "indicator--60eb4777-e8ce-4ed7-9535-e77fa4e61174", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983d2fa8-f474-455b-9b45-dae88d87b8ce", "sighting_of_ref": "indicator--04354e5c-1674-492d-8766-516311511b46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d265dff0-3602-4059-bc64-1ad0f8869ac0", "sighting_of_ref": "indicator--6f8df94c-66d7-4b40-a2ce-3746a43e74a5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d026f6e-fdf5-4d15-a5ad-0e2511e4c80e", "sighting_of_ref": "indicator--fe65ef4a-f14a-4899-9cb2-82557eed45bb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ce5f23-a595-4dac-9635-9632de11068f", "sighting_of_ref": "indicator--0b733d04-b2f3-4160-86cd-849ad74ba7e0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddc3ecf-7518-433c-9eca-144abe4f178e", "sighting_of_ref": "indicator--14ce07d0-bde2-4c74-8a3a-32121aea7ad3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89b2fbb-df99-48bf-9c3f-eef8eb7fef04", "sighting_of_ref": "indicator--fa3deb86-42f0-48bc-9b7a-9d88253989f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1690b37a-bfb4-4682-b319-0de285aa9b5a", "sighting_of_ref": "indicator--f8494992-a502-4f35-9bfb-ac3f64e7a618", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946606f2-3cfb-4931-8e27-30d52ff48a5a", "sighting_of_ref": "indicator--223a31b7-eaea-420e-ac0a-d89863a677bb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96c0c9f-540f-4a13-b6d5-9f1fd6df8b15", "sighting_of_ref": "indicator--365ef1b5-d334-415f-9750-ec8917018023", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad63ad4d-18ba-4fc6-9f25-36ef189c7055", "sighting_of_ref": "indicator--dcad00ef-4b58-4ad1-9b6a-da3aed9cd6b7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036a1124-017f-4e4e-a689-8255ece7c4f0", "sighting_of_ref": "indicator--17c1dbc4-ab59-464a-a4bb-53513f37c434", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349efe61-7526-4a6d-bee3-37cd4e2ece8b", "sighting_of_ref": "indicator--e7771811-c403-40b8-b317-a5667ee5136d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32905813-7e70-4952-9170-efecdf378e05", "sighting_of_ref": "indicator--4407a394-3b24-4b33-bdfb-11d82869a6bc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44eab2f-eb45-4148-be7e-f93958a1c622", "sighting_of_ref": "indicator--fa39ba59-8ab4-4c6f-a2ad-1b15aaebb346", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac65c312-a23d-4b71-b54b-4df899b0da0f", "sighting_of_ref": "indicator--835e1bb0-1a7e-4f27-96de-d122f3c3859c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d948cd5-8058-4cdd-829c-9b9a728fddf7", "sighting_of_ref": "indicator--2c86e8f6-cd0c-4a01-9b8e-9e5201521d54", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a620070-55fa-4ced-b7df-e3e89d9d5050", "sighting_of_ref": "indicator--577bac93-1b50-43c2-bc7d-95d0f0ebaf3f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a00fcd-bfe2-40bf-a83f-be645112305e", "sighting_of_ref": "indicator--faadb18b-586e-4e1e-a075-0628cbf50cf1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a8d3eb-eca1-4245-9a89-a928cb64f00a", "sighting_of_ref": "indicator--e00b9c1c-b75f-4f4d-8e25-c52a4636645f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b024b3a0-4f38-49bb-a869-c3ede30e78ca", "sighting_of_ref": "indicator--9940bc2c-ec04-470b-93f6-ea681bb48e24", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a941eda1-ca79-4071-95c3-5a21fe506f55", "sighting_of_ref": "indicator--1ddd73a7-4e37-42fc-8bc7-e8ec44ee49ff", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f57e74-9c71-4f81-a775-4d88a50a89dd", "sighting_of_ref": "indicator--42527d6d-de5c-46f9-b7f2-a4ea1979aab8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b72e73-4483-47c4-9105-0316240addf2", "sighting_of_ref": "indicator--e0e2c475-3e5a-4b07-ae89-63b8c2627951", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5887638e-b2fd-4a90-8d85-f0479795ad81", "sighting_of_ref": "indicator--1e245151-64c6-4e6f-913a-355335152a05", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c234522-6f7a-4674-a1fd-7e2112bfd124", "sighting_of_ref": "indicator--e2229363-ab77-4e94-a158-52e61e6a0b44", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573043e0-da6c-42dd-b60b-936d7c720a6b", "sighting_of_ref": "indicator--34e257a1-468c-44ad-9b2b-05aad3f7c4f5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfade981-f372-494b-9984-10430cacedf9", "sighting_of_ref": "indicator--7657de69-61b3-4a04-875f-c0af1ab293a3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0af26b-1cef-45f0-bfae-5b7d75d10523", "sighting_of_ref": "indicator--7657de69-61b3-4a04-875f-c0af1ab293a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61632b4f-a1f1-4cc1-aca6-37ca43f82c7c", "sighting_of_ref": "indicator--6ff509c7-c7f7-4775-a74b-5c67e74d96af", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97b9a4c-a605-4d25-b05f-e8e018594d2b", "sighting_of_ref": "indicator--0d97f2a2-fbbf-427a-a69d-955c5d002fad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f10a2b8-a50e-4e28-9a8c-50e5c775dbde", "sighting_of_ref": "indicator--db10d484-de15-4d2e-9d97-6f111e538e56", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb5f08a-b044-4985-a99b-dca5e06932b8", "sighting_of_ref": "indicator--0a27f016-0c05-49cc-98a6-c0e6f8021326", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31f321f-f9cb-43df-8d27-a89887cc7fbe", "sighting_of_ref": "indicator--6b8ea1cd-b1f8-4419-9383-eeacd9cdb68c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54475f65-bb1f-4ea1-a0b3-6747cb6d7d9a", "sighting_of_ref": "indicator--2e497569-c0f5-4010-944a-1229d5ca4887", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042cf07f-3385-4e39-b0f7-1d42a5be5cc5", "sighting_of_ref": "indicator--2e497569-c0f5-4010-944a-1229d5ca4887", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6113417b-3ab8-49cf-9fb1-994a5db5c4ea", "sighting_of_ref": "indicator--e46110d5-3996-4f66-9fc5-61d399fbe946", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62ff2e1-21a3-4ba2-a3fd-b531d6e5c858", "sighting_of_ref": "indicator--9e80b65a-a1ae-40b1-aefc-f631336233d6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79fd475-986d-49e5-892e-f506b56d67ac", "sighting_of_ref": "indicator--23fd56b1-268c-4022-be1d-b0b003e72e1c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b520c780-78c9-480a-9de6-9a29011d83b4", "sighting_of_ref": "indicator--6eb7055c-7c11-4627-a3e3-b7ca07a48c34", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e80a28-c891-455e-a50f-9f3cc915d26f", "sighting_of_ref": "indicator--50d9c477-5d0f-4bc1-bf0d-0029ddd27d23", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48754c62-8898-4b55-803c-3d746b0529d9", "sighting_of_ref": "indicator--e2f7c843-e178-4291-ad53-93e1af3054b7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6765b8bd-e4b9-48ed-93c5-1dd60b2826da", "sighting_of_ref": "indicator--835bb155-6261-4327-9187-db7f51a18c42", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef05f6c-fe87-4d2f-8c5f-1c31b452cb5d", "sighting_of_ref": "indicator--ffe37742-1666-43a6-814d-a633aaf3a980", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee70866-6d02-494c-8bd9-19be956d7935", "sighting_of_ref": "indicator--fe6c747d-a035-4ccf-8500-e3b994b9dece", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca9bbd1-cba5-4223-baf5-a2c228d51ad0", "sighting_of_ref": "indicator--e2a52a5e-64cb-43cb-8f8a-b0c53b79d5c3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2e5f09-e7a6-4397-9954-0c49f1f40c63", "sighting_of_ref": "indicator--25c3ff5b-c7f1-4041-995c-0bca55ffe68f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e576535a-8a3f-42dd-aa80-dfb181cf0252", "sighting_of_ref": "indicator--0f3ff038-e412-4fa7-9b8e-156844a113ab", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b586aef6-8d4c-4c84-bb0c-d59bddfcd412", "sighting_of_ref": "indicator--dbbf2150-c015-4ee8-80a9-5a241d4ed6ee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10967369-6ad8-4126-94da-ff78addd6333", "sighting_of_ref": "indicator--b47bddaf-a47f-448c-9a65-0b63a6887d7e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406c3def-b428-42a0-a91b-9a104237f689", "sighting_of_ref": "indicator--45ea2bcf-9339-4362-8395-431366ae37f5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c3295e-6ace-4616-b98e-0e29c1b75f3c", "sighting_of_ref": "indicator--24057f42-8418-434d-a5a6-f3d301d5786b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc64890-7c73-487c-90a0-37d033d2a624", "sighting_of_ref": "indicator--24057f42-8418-434d-a5a6-f3d301d5786b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d3c154-eecf-421a-80a2-158e6fe612c1", "sighting_of_ref": "indicator--8fd614c5-c30a-42f4-bb0d-1d96c5eb843e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e5595c-6c71-4f5e-b157-a8f5293b9987", "sighting_of_ref": "indicator--d1ea709d-24bb-45da-a405-f5cc71d7c0fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232dca56-d20b-4328-8261-089d0daed08e", "sighting_of_ref": "indicator--dd13d10b-eca9-4840-93df-6b6e56302783", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063ba8f9-b746-4338-adb6-f08d02fb34ec", "sighting_of_ref": "indicator--02f3c089-dc27-4330-bd47-25fd748cf9fa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fc1720-85bf-4751-8269-36cb6e99e4bd", "sighting_of_ref": "indicator--c591c802-f4c7-45c8-b18a-12550c2e4429", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593c1c7c-598f-4d4d-bda6-14249ebf4fdc", "sighting_of_ref": "indicator--da4c9d89-80b5-4b50-a329-1dc4977264b6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3992c24-0c66-4bef-b2da-5f5e38429d6b", "sighting_of_ref": "indicator--6783b53e-f63e-48b7-bee5-2975321ecf00", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b172ef47-4777-4687-990b-bdf92cc86b91", "sighting_of_ref": "indicator--190691f3-6989-4e69-895e-f39fb898d4a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b90c62-80c1-4a76-a162-f8389da229f2", "sighting_of_ref": "indicator--7b213892-40db-453f-b571-be60185dcebc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b54bcfc-b294-47de-89e5-0ae19a19348c", "sighting_of_ref": "indicator--7b213892-40db-453f-b571-be60185dcebc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0da3d05-44c4-4a5f-853d-701092717a22", "sighting_of_ref": "indicator--5d552b07-862c-4935-b38e-493d9070cc70", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0047d50-5155-47d3-af14-65972fcefb65", "sighting_of_ref": "indicator--9f7545b4-7a62-4bea-8501-fd3370cbadda", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3014f5c6-8381-4adc-981d-aa36fca6828b", "sighting_of_ref": "indicator--a85c9e82-f0e6-476a-b367-6d231c4b81dc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53db8e10-c418-4c6e-861f-5f9098d4c6b1", "sighting_of_ref": "indicator--d0692b03-c809-489e-a676-4b76ad7a0c54", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d785b6f-1154-478c-b916-bfead255199b", "sighting_of_ref": "indicator--1775dffb-2d3b-45cf-8fe7-74f2f9427127", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe91f03-6b88-40fb-afef-b83f019cc52b", "sighting_of_ref": "indicator--195a6507-049f-4c7b-a0e6-0e4c91bbfeac", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64062967-9c6c-42aa-b7af-d6559f7be5ce", "sighting_of_ref": "indicator--38527445-5553-4855-997e-f42293014fa2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10295d0f-64a7-45d1-ab87-1a17d7bd8d37", "sighting_of_ref": "indicator--3dd4c047-8d16-4d05-8f75-108224d2d466", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3724113-f1ad-4209-b001-9f5c0b6cdfcb", "sighting_of_ref": "indicator--a06c2dae-61ab-4e31-8b07-48c6c4e37bb0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cc227a-6ca0-496a-b727-f3750f30bcb3", "sighting_of_ref": "indicator--a06c2dae-61ab-4e31-8b07-48c6c4e37bb0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4965aa41-dec4-4619-a9e3-38ebc5aa2358", "sighting_of_ref": "indicator--51b9014b-ab5c-4a5f-b678-1f70f996eda2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88834a3e-0158-4973-8dc6-964c8d91c8a8", "sighting_of_ref": "indicator--a7866ea3-3bbc-4dbd-a57b-5180c814ecd2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf8329b-4726-44c2-b1c1-7bcf050f7aff", "sighting_of_ref": "indicator--c000cd69-1cdc-4522-8af5-ea79f31623ef", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4456bd-ef6c-456f-81fc-05844ad8edb5", "sighting_of_ref": "indicator--d9393656-39d7-4ed0-85b5-d576e59ed1ba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3d6f8d-cf1f-4139-b390-87dae2028d07", "sighting_of_ref": "indicator--6516038e-1c8a-4b8d-b097-0c6be4d099ae", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6caeb460-ca88-4f41-a529-4058ad86a97a", "sighting_of_ref": "indicator--6516038e-1c8a-4b8d-b097-0c6be4d099ae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e275960-00a1-4828-9003-d4469c017b7d", "sighting_of_ref": "indicator--7c1dcd18-28d8-4cc4-a420-dd7c31786cb4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731f3ece-28ef-41f4-9586-2f4d4658108e", "sighting_of_ref": "indicator--7c1dcd18-28d8-4cc4-a420-dd7c31786cb4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bb9a90-fb2f-4e1a-aada-36f11b2000a1", "sighting_of_ref": "indicator--2470c7a5-b68f-4fc7-859d-d7620c7fe1dc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53029a69-b37c-4884-a22a-efcfc83396b6", "sighting_of_ref": "indicator--e22b3b0a-4f24-4a28-ac0f-3e6682333146", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47126434-b515-4be4-9db6-59d103ec78f9", "sighting_of_ref": "indicator--dd1783eb-6787-4800-a1f1-559ccce13cb9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2caf445a-151b-47e7-9072-f78782486cbe", "sighting_of_ref": "indicator--82adf7b2-d36b-4232-a159-442d52258e3a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137b3035-2b0d-4afa-ada0-c7bac3902002", "sighting_of_ref": "indicator--36903304-91e9-4f45-a11f-b5d04d2765c1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55170444-8143-49cc-a965-647388a27a24", "sighting_of_ref": "indicator--09803977-c2e3-458e-b9b0-e2974e7facfd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d39d60-8cec-48af-a533-f9c336e70056", "sighting_of_ref": "indicator--9f22c4eb-2a4e-4cbf-8cd8-c7ea8ac26d05", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9055217b-3ca1-47d7-80d2-1728e4a6a9c2", "sighting_of_ref": "indicator--7020c87e-77b5-45c9-a4d9-ba63b6e0a6a8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3373d5-b5f2-4fcc-9cbc-6e52658e58a9", "sighting_of_ref": "indicator--b62cd459-944a-4a4d-a604-0bef44114b7e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b63fe99-b43f-4937-a876-865f43e1c44a", "sighting_of_ref": "indicator--72a3cc8c-4227-4a1e-8962-ebb0dedda85b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c65023-8ec6-4ae6-8446-6dbb06685b45", "sighting_of_ref": "indicator--9cac0da4-67c4-442e-af1d-671128e6642d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3ed7cb-0e85-49c4-8a8e-3624adfdc141", "sighting_of_ref": "indicator--e3ee3e2d-0664-419c-b001-a2c2360e9d85", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a72e5f-5447-4a67-9ede-f0d6aa6d8444", "sighting_of_ref": "indicator--e8750e05-ee64-4a59-a550-656921d158e5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494fbf68-a08e-4311-ba54-6b50c8137495", "sighting_of_ref": "indicator--e8750e05-ee64-4a59-a550-656921d158e5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3b08a2-ac01-40a8-98a3-702b12d2243c", "sighting_of_ref": "indicator--5354d2dc-9ad4-4fe6-a685-06314853fe60", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a35e6a-d742-4234-a428-d2bf97f455a1", "sighting_of_ref": "indicator--1f6ac678-9aa1-4005-ad66-b23f8c0dd144", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbdc30f-91c5-41b2-aafe-a48d5411a00e", "sighting_of_ref": "indicator--8668250f-cf93-4c00-b4f2-adfbb2d5c83b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c921b79f-9ffa-46aa-9d26-7838efe38123", "sighting_of_ref": "indicator--9a96b380-ca67-459d-bd53-9902ea5a9869", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71264a12-43be-4f70-a3ad-2798855cbc7f", "sighting_of_ref": "indicator--bd4488e7-8d18-4dfc-b9e0-19e83ced6943", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa559fb-ab43-475a-9071-99790774511d", "sighting_of_ref": "indicator--69f212e3-e003-48a1-920f-380b8362617c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7acbd70-d36e-4043-8ad2-e64244c45da6", "sighting_of_ref": "indicator--c4c82c76-690f-4531-8e5c-a382d49a6687", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303aefce-f2c6-45da-a6d0-2084551ae01b", "sighting_of_ref": "indicator--0b1c2124-f85b-4e65-820b-7d25903766dc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224aaf8d-b9a6-45f0-b11b-f1309ebf9884", "sighting_of_ref": "indicator--0b1c2124-f85b-4e65-820b-7d25903766dc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5167e36-ce68-4215-a520-5c30bf9817a7", "sighting_of_ref": "indicator--29e572a1-fc7c-412d-a29e-94e6ba55dd6e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fcf545-cd4c-4baf-b05e-c379f2e67457", "sighting_of_ref": "indicator--29e572a1-fc7c-412d-a29e-94e6ba55dd6e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa283ead-2d7f-42b7-b6b8-b3281fde19c5", "sighting_of_ref": "indicator--ca46dc1a-14c1-4650-aa55-5c27a48125ae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69da4c3d-42dd-48d9-b3a5-c685a3e9535b", "sighting_of_ref": "indicator--425b6b61-cca0-47ba-8cdc-67c1e4c0e928", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e903ec-fad3-40c4-9eb7-a8278863f767", "sighting_of_ref": "indicator--abc698be-3cee-4e27-8ac4-f029fa068f12", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7c0e8f-8772-4f86-a01b-5b788a271bb4", "sighting_of_ref": "indicator--018022a5-0203-4f2e-a72a-e70cfb0bd647", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c588e5d4-39a8-48c1-9a07-662ba4ab5327", "sighting_of_ref": "indicator--88a8f864-2072-4fcd-a02a-35d5cc8f9663", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3057379-9a14-4733-aec8-e7d5c529c876", "sighting_of_ref": "indicator--5e6045df-6f15-4d69-9463-70be3fe325d6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6a43d4-c17e-4084-aa49-dee621b9878e", "sighting_of_ref": "indicator--8a4d590d-781f-4b9a-ae73-80a4494d0ced", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e97140-59fc-47d3-8724-cd16a64b4af2", "sighting_of_ref": "indicator--98cb62dd-77d2-4a2f-a410-4b032ebe6371", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151ed259-1b68-4bb4-bb6b-9c00ef1bf435", "sighting_of_ref": "indicator--98cb62dd-77d2-4a2f-a410-4b032ebe6371", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951179cb-9903-44f2-8c05-be46724d59bf", "sighting_of_ref": "indicator--14f76585-2b7b-4371-81c4-5667c53c624a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ce00fb-9686-4142-acd7-5e6c7842dbb1", "sighting_of_ref": "indicator--57f1bbb9-4596-4757-ac5a-33f2e87dd2a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5029db-3512-4a28-8156-78867c0766aa", "sighting_of_ref": "indicator--a683a05a-8df3-4f3e-bbb7-3c1a94048588", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff29243-9ac5-4e8c-8a34-c71f36736a21", "sighting_of_ref": "indicator--c6851950-fea6-4aaf-8a1f-7c2c2adc7df7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1331951e-0977-4982-a1b6-7f56684b5e01", "sighting_of_ref": "indicator--c4e2135c-291a-4027-830c-4d012e81fdf0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cd3e5f-1253-4561-8c44-addc4a58bd38", "sighting_of_ref": "indicator--6e086321-a2d6-4c95-95fe-088810e91c69", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801dd2c3-994c-451e-bda1-ff64b716cb1e", "sighting_of_ref": "indicator--804172b6-4501-444d-b932-dd7fb3ee951b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562d18d7-c718-4f22-84db-2f57001c126e", "sighting_of_ref": "indicator--df1384d0-061d-4e87-a33b-aea5c7a01ab8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6ad504-0ab3-4413-8edb-b16132cb328e", "sighting_of_ref": "indicator--e5d9cbb5-cf70-4ec9-9506-648c33ab8a00", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a73ddb2-edea-457c-99ba-448c768d2c58", "sighting_of_ref": "indicator--52ff8383-fce5-4d3e-932a-bb032502bcdd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc349e8-fec8-4ebc-ac88-7417e1777bb7", "sighting_of_ref": "indicator--7d30267a-1411-4a08-b2d6-ab4d9e49c28b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8237cc94-6db2-4ab9-8685-87827982ea66", "sighting_of_ref": "indicator--0ac4a441-5052-4e66-b93f-8869a94379aa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1874a6-1fae-442f-852e-698e555854a9", "sighting_of_ref": "indicator--d8f71fda-5a43-4f54-9909-291b0ef374e9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82cdc42-80ee-498e-8423-31a97bbe6026", "sighting_of_ref": "indicator--718d9dfd-a7ea-4538-af34-d3ee411cb1a1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5e7112-29fd-4937-8c68-20bf81c22a28", "sighting_of_ref": "indicator--a4d3e2e2-6aa4-4949-b4ed-cf9d875bde5e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee51ffd3-08e6-4848-b322-aaea3b59ad9c", "sighting_of_ref": "indicator--a4d3e2e2-6aa4-4949-b4ed-cf9d875bde5e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5413bcf9-b5fb-42e7-84f2-10668244a1ad", "sighting_of_ref": "indicator--0f1082f1-7ffa-4ec0-9578-77ae189f52d6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09144736-57f4-4905-9836-91ef09254f3e", "sighting_of_ref": "indicator--c1180fd1-31bf-47ce-bbc6-5f598384ac46", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538f9f85-3272-4031-8007-06017f1fd148", "sighting_of_ref": "indicator--d28227a7-2a71-40ea-a00f-1b4ca8666861", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c623a839-e7cc-46e1-9189-374af818c27a", "sighting_of_ref": "indicator--39eb63f3-9a72-4d86-aab4-43dd0486fc77", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8ab3df-7ee4-4f59-b2de-866d2c6e10a1", "sighting_of_ref": "indicator--913ebe6e-bc03-4198-a1f4-26d6520bce46", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06c4b4a-abfe-49bf-ac33-3f45621a4fab", "sighting_of_ref": "indicator--913ebe6e-bc03-4198-a1f4-26d6520bce46", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbb50fc-2677-4852-9b44-e183fa9cb892", "sighting_of_ref": "indicator--352d375b-6806-4b9e-bb93-820c99ef2b00", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cffbb4-0c81-4f64-8505-fdae2a99e554", "sighting_of_ref": "indicator--3155333f-7ccf-485f-a3a9-b9fcb108f1ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbbc1e4-ba8c-4edb-a18a-55aad9f5710a", "sighting_of_ref": "indicator--de600c53-3d7d-4e00-a72e-8613a1b57405", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c89b722-1bd9-41e4-8a79-2b7f1e50200a", "sighting_of_ref": "indicator--6ad39a1a-269d-4997-9277-383bd58766b1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7096cc39-69c8-4983-9bec-dcf816810af0", "sighting_of_ref": "indicator--6ad39a1a-269d-4997-9277-383bd58766b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79722c0-6851-4550-ad10-357935def6b3", "sighting_of_ref": "indicator--df880cef-5adc-4b10-8889-8b4bf1035724", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ecc0d8-a849-40a2-8582-dd210cfe5493", "sighting_of_ref": "indicator--5f3ce70c-1f1e-4ddc-9b1e-31a88d534e94", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e43a5c-ecd9-4026-adf9-b445d00e3702", "sighting_of_ref": "indicator--b3c2b916-87f8-48e7-8c3a-7266331ea329", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17ae63a-8e79-4a9c-b54e-c30e5cb41b28", "sighting_of_ref": "indicator--548e4b7f-d5e6-403c-98f8-b49953a06f48", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cc0ad5-e14b-4f61-8fb0-2ec4432a704c", "sighting_of_ref": "indicator--961f1dec-0fcc-4358-8871-d1f94bc2ab61", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4ef939-cae2-4ce6-9d1c-a29592cfebac", "sighting_of_ref": "indicator--cec2dc6c-5306-4b57-bca1-b5119053380a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92729c8f-a56d-4308-885a-85d5a97a0046", "sighting_of_ref": "indicator--cec2dc6c-5306-4b57-bca1-b5119053380a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5205cdac-1ba1-4407-b7e9-a2a4cf2b688f", "sighting_of_ref": "indicator--b1be3fb5-6060-4587-b9db-90dfd1dda535", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef16f74e-478b-453d-aef5-3f5a5b32bd88", "sighting_of_ref": "indicator--41337506-1b8e-4aee-9072-cc56bd0521b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3317852-651f-4e60-b02f-7c8df21fb18d", "sighting_of_ref": "indicator--403e12bd-8d6e-4e2d-b3e8-6135719241e3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca6fec6-cff2-4544-b14c-e8d274f2d3c2", "sighting_of_ref": "indicator--403e12bd-8d6e-4e2d-b3e8-6135719241e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a445f9-e9d5-407f-8e79-0d32e4940352", "sighting_of_ref": "indicator--c83d7f37-8b68-4b15-b493-a1c9785febe1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7491a3-d47b-4f20-8e09-117aeef4c51c", "sighting_of_ref": "indicator--c83d7f37-8b68-4b15-b493-a1c9785febe1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a923ad1c-ef09-41ba-a235-90678931595e", "sighting_of_ref": "indicator--f4879e0a-2302-4732-8280-64a20aaf47e0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f48e564-c1fb-4aab-99e8-c1eeaf72e28f", "sighting_of_ref": "indicator--cf6dc145-4125-477a-b013-9fbc7c132352", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35024583-3b2a-4b11-9bea-6472d9b3fd57", "sighting_of_ref": "indicator--88231782-e003-44cb-96bc-26bfcacfdfc6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20039a01-394f-4bc6-9496-62c909c6b6cf", "sighting_of_ref": "indicator--89705a20-6b76-43b9-b9ad-547399f06a00", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a1c742-eabe-483a-a86a-9f01f7dadd3e", "sighting_of_ref": "indicator--8db7f624-edb4-4ed4-a4c1-529723c80f17", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c2d9aa-7093-47a7-b6ce-a82c0798d00e", "sighting_of_ref": "indicator--c16c0fb4-da90-46ad-8f9f-e08bfe75b198", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a9016d-0a82-4e07-9721-9b4a35197c91", "sighting_of_ref": "indicator--46db1920-7515-4584-a23c-2a3c7384be41", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ebe99c-0544-4b48-8ed1-ea4f3d961628", "sighting_of_ref": "indicator--2a3a7c32-9990-4e5d-b8c2-f8e066204d73", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d04ca0a-4a54-4c46-a65c-dc1b7134fba0", "sighting_of_ref": "indicator--2a3a7c32-9990-4e5d-b8c2-f8e066204d73", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7123612e-b6b3-4786-a8ac-8ac72c9e446c", "sighting_of_ref": "indicator--66613c8b-21ed-4b72-bdcc-e6c4c784e1cd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269b714a-316a-41fd-bfac-d67494dec289", "sighting_of_ref": "indicator--5b127b79-b1e3-4210-ae8e-4d3df0808c22", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c19935-0de9-486d-89a8-d446b7d904f6", "sighting_of_ref": "indicator--9e381193-645e-47f8-9041-1ef696e8354d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792ece83-63f1-44ec-91a6-89a9894ce71f", "sighting_of_ref": "indicator--b219d256-9e9b-4f37-a1f1-13a0f9b005c3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608e7e53-1046-483f-9387-d0828896203f", "sighting_of_ref": "indicator--9182fe38-c9dc-4fd4-b5cf-2878eb4f47de", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2406c2-befa-4b67-8416-d2870d01d680", "sighting_of_ref": "indicator--9182fe38-c9dc-4fd4-b5cf-2878eb4f47de", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a54ffa8-b508-4cad-bc06-4dc1a8822be1", "sighting_of_ref": "indicator--ac19c5b4-b0e8-4b48-8857-6aefb37e932f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae3387a-75c1-4ff5-b11a-f69ef2703812", "sighting_of_ref": "indicator--44c554a4-fe28-4d67-9d86-2bca0892cdb1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9a8929-e7c1-4a48-90dd-57497ab82f49", "sighting_of_ref": "indicator--6ab2c68a-9b0a-44b0-9c29-240e3c90c67f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5070a9-88ad-4758-a7ac-5f8e5571f65e", "sighting_of_ref": "indicator--6ab2c68a-9b0a-44b0-9c29-240e3c90c67f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294edb86-68f0-4e76-a978-010e7b6edfbf", "sighting_of_ref": "indicator--a5d693e6-4186-4917-add8-cfbbd9c3c4d4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3ce171-d828-426d-abb8-fc2d476bbfb8", "sighting_of_ref": "indicator--cd50f0fa-2b6a-4c71-b2a2-cfdb1e3e5f63", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871ae278-957a-492c-9547-d5094bd59704", "sighting_of_ref": "indicator--c3df60a5-c541-45d6-8270-6542f7ef53b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e35794-1d29-479e-8a71-cfa49cf2a3c4", "sighting_of_ref": "indicator--45630dc5-cb14-4996-8575-c564d6644d32", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2456e6f-69b9-4489-9753-8be5186eb866", "sighting_of_ref": "indicator--e015699d-696b-48a0-9c90-e09c3c5c4360", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2559eda8-b16b-40da-a55f-f519cb4cef7f", "sighting_of_ref": "indicator--e015699d-696b-48a0-9c90-e09c3c5c4360", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5c9cf3-3d28-45df-9db1-6eaf93502311", "sighting_of_ref": "indicator--649a0efe-b4de-4a20-bf0d-b71f32fc7b2c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e06d626-0167-48c6-89fd-9c1e2666afbe", "sighting_of_ref": "indicator--649a0efe-b4de-4a20-bf0d-b71f32fc7b2c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa359f6-5dd6-46ed-96c9-af692e519904", "sighting_of_ref": "indicator--ee8ee37b-db02-42b0-b010-62500befe63e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433a9942-3c50-4298-b775-8cce562d3b96", "sighting_of_ref": "indicator--ee8ee37b-db02-42b0-b010-62500befe63e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03bd8a3-64d5-4cee-809e-3a85f5980f78", "sighting_of_ref": "indicator--7d5f59d1-fad7-4421-a637-ae26a05726f0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73785301-9a9d-4344-8146-5654cd9d3be2", "sighting_of_ref": "indicator--7d5f59d1-fad7-4421-a637-ae26a05726f0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162cb725-e366-46a4-9572-b5007004eee6", "sighting_of_ref": "indicator--13bf937b-da5a-4c03-886b-333875bbfdcc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1041d55f-02aa-4d99-b671-6723b11adfc0", "sighting_of_ref": "indicator--ef499813-5eeb-4658-9627-6a38045dcfce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903f6347-bf08-4434-9440-48750bf3839d", "sighting_of_ref": "indicator--5c8c587a-635a-4008-be83-ec2d12844d89", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea63653-565b-437b-a7cd-c716b8c66eb9", "sighting_of_ref": "indicator--5c8c587a-635a-4008-be83-ec2d12844d89", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af49de2d-c505-4613-99bc-be394a345a5a", "sighting_of_ref": "indicator--d4ba4c13-191c-4a37-8c76-96af47a58117", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0500e6-dea3-4b43-a027-e5e6b4c5eaba", "sighting_of_ref": "indicator--d4ba4c13-191c-4a37-8c76-96af47a58117", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7037e354-c32c-4e08-a7a7-a9d289e34afd", "sighting_of_ref": "indicator--ccb05458-ec70-4c88-a692-bb7feef58195", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c11692-5d16-4fc9-87ee-c860a101ecd8", "sighting_of_ref": "indicator--69c016ff-c5fa-4e8f-a13e-69d915808b59", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7699175-432b-412e-9f9b-866fb7dfe26c", "sighting_of_ref": "indicator--6a9144be-e632-4aed-a1a5-3855af10a59b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8824cfa2-8dac-4820-83d0-e5c80ca99a57", "sighting_of_ref": "indicator--6bea1cdb-0570-463f-8a28-ca0cf2d4d524", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51dc0f12-58c5-4562-b690-f76373d1c9e1", "sighting_of_ref": "indicator--6bea1cdb-0570-463f-8a28-ca0cf2d4d524", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d388bcc5-ff12-4a14-a367-937665732407", "sighting_of_ref": "indicator--d5228dde-c7b0-4930-aeea-2e781387f862", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045c11fa-0779-4c09-92fd-24904c934909", "sighting_of_ref": "indicator--95c2feab-71fc-40f5-ae62-9606d968bb0e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1b5cf1-5cce-4a6c-b9f1-0490cc779103", "sighting_of_ref": "indicator--72b5ab19-f773-40f4-b49d-71726a496c40", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65cf07f-5d35-48e3-bbf6-152602a43ab0", "sighting_of_ref": "indicator--e8e2dc40-8a3d-4885-b3d0-8281c7e69a99", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a48de7-20da-41bc-bec6-77cd1089cf5e", "sighting_of_ref": "indicator--468623a2-064d-4bcc-a287-18ee76b22544", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf22939c-c55b-4dd4-aade-758414fc7ce4", "sighting_of_ref": "indicator--8341f668-1e1d-4ba1-b0fb-9afe0d8dbf17", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82ceb1b-7763-42c1-917b-0cdfddc32ec3", "sighting_of_ref": "indicator--bed2353e-455a-4188-9b8b-657391da6a2e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a700134-64fa-45f4-a038-162fbc9ba5ba", "sighting_of_ref": "indicator--e97c306d-861e-49c8-89ff-c8b390f7ee66", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b6bf7b-146f-4726-ada9-0ba359ba01b5", "sighting_of_ref": "indicator--2b60556c-8a4b-4291-84e1-24c9b08657d6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a03fa1-a4f9-4eba-8630-0dac13f087a3", "sighting_of_ref": "indicator--4cf9db68-22a3-467d-84cf-b4331c48da12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1734df7-c22f-4b26-8505-28a40881690a", "sighting_of_ref": "indicator--a13ff31c-aaa2-424d-a363-d5a3a232355d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc25bfe2-ac82-45ed-b207-630c13791d33", "sighting_of_ref": "indicator--24c8f112-2dd4-48e3-8347-6667553f7538", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446e2967-e1c9-4537-959a-8773c7749b20", "sighting_of_ref": "indicator--b10a1302-2661-4541-98e6-00e0dca4fcdb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3e452e-594b-4600-b04c-dcf7ad0d9e26", "sighting_of_ref": "indicator--4ed394e1-2383-4e06-9083-b334da32340b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5564f0bf-3f74-4305-9d1d-a3e24d98861b", "sighting_of_ref": "indicator--a197dd92-16a6-45eb-92a0-0c8b03fdbb89", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b7badd-d524-4fe2-82b3-a53529cd51a1", "sighting_of_ref": "indicator--9557f749-fb1e-4252-b4e4-40b920a052c9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248929ab-0df2-443d-8224-3dbbf7f8718a", "sighting_of_ref": "indicator--635a3f05-c984-4eb6-a686-1e9aca634dde", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced0924f-b1b5-4f52-8076-6fae7e054e9f", "sighting_of_ref": "indicator--08d74d31-cbdf-4954-a4b9-427522d74f74", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53e5e44-f9ea-4518-9847-71cc40b6b9b7", "sighting_of_ref": "indicator--a3e11c74-2106-41e3-b8cb-aba5df965a01", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7ccb9a-a84d-4d5b-9c17-2cd4d09ba3ee", "sighting_of_ref": "indicator--a39839f3-302e-44b1-94d7-61b0b856800d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43412666-8877-48df-a3e6-0c499b27cc7f", "sighting_of_ref": "indicator--6e77d1bc-cf44-40a5-99d7-40786ad66869", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570f1b25-44ff-436a-ad8a-b7ccb5df2bb7", "sighting_of_ref": "indicator--6e77d1bc-cf44-40a5-99d7-40786ad66869", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57e771f-b17c-4465-906b-2fb94baa03e3", "sighting_of_ref": "indicator--1ff36dac-cd00-463f-a949-7ed805e2c050", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc33d7e9-7d61-4ab2-b893-a8a6f22f5c54", "sighting_of_ref": "indicator--1ff36dac-cd00-463f-a949-7ed805e2c050", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e7dfcd-1db2-49fd-83e3-8aa4ebed617a", "sighting_of_ref": "indicator--5b32c0bc-54df-4f67-a469-ec62aa81050a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfbbc4c-fb19-4acd-a1e9-54112697a037", "sighting_of_ref": "indicator--7f322e48-1507-4d2b-a0bd-d8f4142a7613", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0714d1d3-b955-4d6c-a7d0-3ca6041adcea", "sighting_of_ref": "indicator--2e7bd993-b738-4482-b81f-a034ad658547", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4948f9ae-e33e-4975-9152-76fef9722df6", "sighting_of_ref": "indicator--e7db3e0e-2822-45bd-b03a-933132477d82", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355428fc-a779-4f89-8ca5-ba426a7e177c", "sighting_of_ref": "indicator--e7db3e0e-2822-45bd-b03a-933132477d82", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8b9705-40cc-4a18-83c4-f1c760de6cf2", "sighting_of_ref": "indicator--d760ef83-3d24-4d8f-8aa9-eb0e5aba3dd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9588f6a-aeda-4508-9ca0-c00cb01c7da7", "sighting_of_ref": "indicator--a8fccddd-8aea-4039-945c-3306fa04f012", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fd2a6e-5b6b-483c-9542-6b21cd0480d7", "sighting_of_ref": "indicator--a8fccddd-8aea-4039-945c-3306fa04f012", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6047bc5-8e5c-4e6c-a383-9823d6509786", "sighting_of_ref": "indicator--5bb47f83-8a0d-4c81-8a48-e341d4373726", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920c1de2-43c8-41dd-9ac6-dfbe5b46f909", "sighting_of_ref": "indicator--c9cc3278-60c0-4dd6-94e7-2de5aa37b173", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b260af9-b9c9-470f-885c-5806f98f58fe", "sighting_of_ref": "indicator--615d8887-3afc-4d66-ac3b-6d50b73044a7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fe3139-4067-473d-a3a0-53bb1e69a2e0", "sighting_of_ref": "indicator--d0c21249-aa17-4325-b177-2e674019a28b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8b3df4-5e51-4547-8d14-062f542cd8c1", "sighting_of_ref": "indicator--d97c0947-debb-477c-ae24-5f95031b6a9f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81304ff5-ab21-4715-90c5-77ce10215b7d", "sighting_of_ref": "indicator--b6e67583-774b-4681-bae9-a0de3fbae680", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1815b7-fdf8-4ee8-947f-0174d8c7b105", "sighting_of_ref": "indicator--2d7c015b-9ddd-4665-b637-44b978a4e137", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f816e91-3630-470d-b0f8-53b4ac1d8b0f", "sighting_of_ref": "indicator--f2d85ba3-087f-4faf-b99d-bb9b68acbeb4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbd0f0b-a269-424f-b027-89212f60f6a9", "sighting_of_ref": "indicator--41f5e797-2c95-471e-a685-ec49b70e62bf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146032cc-2039-4be6-b7a0-1b11f02455ab", "sighting_of_ref": "indicator--74f263e3-7561-4a2f-950b-1bff720644e7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20793415-3378-465c-bb60-0cd8051fb01a", "sighting_of_ref": "indicator--3e24f312-a8fa-421c-beca-dcfa32e2c0ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a26cc09-d59d-44c9-9a2f-6ec0e31b9d55", "sighting_of_ref": "indicator--a7ed4d7e-9a06-4013-8c3e-c11d6280c2b4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f954fba-5499-4507-85da-6730e15b6282", "sighting_of_ref": "indicator--648d3409-0a24-4cd7-b5d9-ad1790017048", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7089eacf-72e4-4766-b2a8-f94b2d0ff8a4", "sighting_of_ref": "indicator--8146ed75-b10b-4f2a-8145-1b09b71884c9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6e1aa6-f6ea-4d3b-ad52-159b78cdf670", "sighting_of_ref": "indicator--da9c2784-9993-4b69-838c-ac13e1b653af", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718da8af-c9ef-4e08-95cd-90ae6b2dc96e", "sighting_of_ref": "indicator--2c2e4b79-f513-4222-894c-1f6ca757e403", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5d21d8-cf28-4d02-a54c-8dab3cb240e1", "sighting_of_ref": "indicator--67c61fee-a7b7-4f3c-9c95-14965e025227", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11eb322b-1a24-42d4-a9b7-449de2a6954b", "sighting_of_ref": "indicator--1fb25168-7735-4d28-b72c-becfee37b12d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee62398-d908-4d02-833a-dedbddaddc44", "sighting_of_ref": "indicator--903bfda6-2dbe-40a0-a9b7-d33c03204027", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd9f3ff-3642-4913-8848-dbc53711d7fc", "sighting_of_ref": "indicator--314bea13-9ec9-4025-9f02-8e1056e177e6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b157fa-d54e-46fe-9678-60cb736762f6", "sighting_of_ref": "indicator--3dd6ea9f-d418-4a5f-b15e-b38cbc528c7d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7183510c-4f0c-404b-8be5-845a4feb95f5", "sighting_of_ref": "indicator--5568e246-1bdb-4345-b920-23666548cf11", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8c27b6-d8b8-4233-98b1-6f1f637ff128", "sighting_of_ref": "indicator--744f4b09-56b5-454c-bfae-27389d9c4587", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe60ea4-365c-405c-b3c4-919d6b7e870a", "sighting_of_ref": "indicator--614bf2a4-6837-4e88-9b61-ea7d8d39c501", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb817160-c729-447f-93e6-b7055a2b4c1e", "sighting_of_ref": "indicator--c966ddac-8d45-4642-acaa-ca25de98a8b8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2610ef-8ec0-498a-a2de-8bec41bedf47", "sighting_of_ref": "indicator--229b5ca5-d6ac-448d-b9a9-b9daea289538", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164dd348-1488-4a02-bb41-e28084911fdd", "sighting_of_ref": "indicator--83fe5433-f85d-4feb-ac3c-cf95c56d334e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a01b454-3cee-4a05-8631-014db0a2d9fc", "sighting_of_ref": "indicator--a9250bee-ea58-44fc-94fa-c229d57429d1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcf6a88-d59d-459b-8d51-0f156f519ec9", "sighting_of_ref": "indicator--6e196d85-8dab-4f76-bede-9f4e5dd6a4a1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6fb4b6-adfd-4fc3-96c2-7fb68fbe0e19", "sighting_of_ref": "indicator--fd2022be-dc4f-4baa-9834-813ef782a4d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b453041c-be4d-4ed5-a4ce-277878807a19", "sighting_of_ref": "indicator--0f97a788-62ef-4d7e-8ceb-82ec4bc96d1b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176fcbb6-0989-4a4b-87a0-1fdccabcd5ca", "sighting_of_ref": "indicator--85bde356-0463-48a7-8f13-170f39b20cf5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74245f59-2b57-4096-b30d-69ad90d977d9", "sighting_of_ref": "indicator--29896ee6-304d-4714-8c54-7e5e694db96d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035bf64c-f93b-4c31-95dc-a813965f5414", "sighting_of_ref": "indicator--03fa66a7-eeb2-47b3-bdfd-e347c07fa2d8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1894f82-ba1e-4598-b529-19935d1b7082", "sighting_of_ref": "indicator--03fa66a7-eeb2-47b3-bdfd-e347c07fa2d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e208b2-2b3d-447a-b7f9-b51f87128aaf", "sighting_of_ref": "indicator--c1aed011-220a-48db-8663-8634dcf6e469", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa367eb-9eb8-4cc9-ae9a-504d59959038", "sighting_of_ref": "indicator--dac3ae5b-bf71-40e5-a3ee-1362c0c2cd82", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3dd0b3-147f-4216-a8b7-a4e08b71ad04", "sighting_of_ref": "indicator--c5274b29-0b56-4367-825e-b3d16ebad58f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727c77bf-ffea-43bc-a248-e6ef9c480859", "sighting_of_ref": "indicator--817355e0-d2ee-4d3f-869c-d953d9127f93", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dea5bbf-8e2e-4b29-bb2f-c1a1d6111b90", "sighting_of_ref": "indicator--817355e0-d2ee-4d3f-869c-d953d9127f93", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969fa4a2-1448-4b96-ad80-0503f4939caa", "sighting_of_ref": "indicator--35823b39-a3d1-4094-804d-29c075062f04", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50db4776-a436-46cc-bfce-8ca5c434b5e1", "sighting_of_ref": "indicator--85732768-e901-4854-9929-93c35d7a1724", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a7ce2e-f636-477e-968a-0b39c2b156b7", "sighting_of_ref": "indicator--03717b91-2158-46df-b3e0-a6ccce3849df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f49cbe1-7c2b-48e7-969f-1f86837a8dfa", "sighting_of_ref": "indicator--25c171a7-70dc-4b3a-9111-c6b10a681665", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ec66ec-9a41-4426-8a93-205f7afed447", "sighting_of_ref": "indicator--f82c3c4c-b694-4f3c-82db-33c1ffd87229", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1a958d-5623-438e-9899-1023524fa5f5", "sighting_of_ref": "indicator--8cd63b12-179d-4ee9-aa6b-9a605f67ce2d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ab7a07-a44e-49c1-aa2e-7acf47448efe", "sighting_of_ref": "indicator--54a564c5-aa0d-4a15-83bd-5875466577ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b10239a-51bf-45b6-a9b8-9c2871b8a19e", "sighting_of_ref": "indicator--1b7f9b7e-33c0-497e-827c-02629ef67d09", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43732db3-e8f4-4029-a356-11f694e48f05", "sighting_of_ref": "indicator--6d2c355f-8c16-48b8-b09a-4d4013e19d1b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41fdf8e2-4db6-41b2-88bc-9a8acffc3305", "sighting_of_ref": "indicator--6cc0dcca-78dd-4166-bc0c-0a9ec426ba15", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba0c495-bfde-486d-bfb1-cf137909684f", "sighting_of_ref": "indicator--dba791bb-db2a-4192-a785-9dd3aede30f8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706ff9ff-5dff-4e82-bcca-134e40aaa212", "sighting_of_ref": "indicator--6ccb8c7a-4b2e-4d85-b818-0fb8f1b46a0e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b8d00f-f2d5-4075-9049-67490e10ceb4", "sighting_of_ref": "indicator--675b2375-542e-4a99-9ffa-e34d76d0eaec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31153765-74a3-4cea-b1f4-83c9ab3ee13c", "sighting_of_ref": "indicator--a51330d5-9def-4e10-94e8-21e58b625368", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0614cab7-0a71-47fd-99ed-300ba54a8abc", "sighting_of_ref": "indicator--36f101e3-1401-42b9-8743-869e81dffeab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04556522-e5d6-45a3-b9f9-424a22a131ff", "sighting_of_ref": "indicator--76d0fe4b-c12e-4f09-a7bd-6538ba2f8ef8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416a4f6d-0f8d-4f50-838d-4bc7457df1ae", "sighting_of_ref": "indicator--c200f46a-c1a2-415c-b16b-b565aa3f3890", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5d216a-eebd-4d37-9277-5e3c3464b48d", "sighting_of_ref": "indicator--5a7652b2-af62-4fb7-ab3a-7ffdb7ec8837", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2442a5d6-7dbc-4e5c-82a9-41b1a7781c0d", "sighting_of_ref": "indicator--a3b967e9-0b37-485c-9654-6ac0a083aa15", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cda45ab-b2dc-4058-b86e-a7a8fb56284a", "sighting_of_ref": "indicator--218c98a7-2e71-4227-a4dc-7d5feacdec8b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d80a856-3d77-44a4-9219-26d4fc5b7327", "sighting_of_ref": "indicator--01881513-ec22-46e4-a25c-468fb8c1584e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65fff04-ec00-4758-9ca6-de95836e23cc", "sighting_of_ref": "indicator--c63d954c-9c95-47b2-81d1-4284938471c5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ba08ff-c491-46ba-91c1-21d5d1d0a697", "sighting_of_ref": "indicator--e92c87ab-10c4-4c62-bf94-9d2597dd5c7e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff549751-f418-4bb2-ae94-c1144a0136de", "sighting_of_ref": "indicator--816e6789-3db9-4ff2-8b64-8aa5cb3a7093", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4063f94-5873-42c2-974c-c9b56aa4a134", "sighting_of_ref": "indicator--fe8b44ad-1d1d-4629-9ae8-3de42a71cb5b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5720f4a5-fced-46d9-877c-1d3359d4e637", "sighting_of_ref": "indicator--cecce2fd-dc51-4fda-a3d8-fad8c232a721", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcab263b-a591-419a-a22d-c3c36cccc3f7", "sighting_of_ref": "indicator--705f0437-ee0c-4820-84f9-1bc8b734f102", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e5f966-199d-467e-bb8c-7a135d9c1d0a", "sighting_of_ref": "indicator--65cc5b01-9a7d-4f85-8724-2264ac559d9a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0d6a07-3a3e-47e5-8294-2030ebbd80a8", "sighting_of_ref": "indicator--12348e66-0861-4931-a9fc-011bf61a0f55", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82484d8-bb06-4138-9090-74c1e90faf98", "sighting_of_ref": "indicator--ac3351bb-2412-4974-b490-c9a9b47b2ae4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad36384-2213-4370-87ee-50cf62afa325", "sighting_of_ref": "indicator--53336b76-89b5-4236-a9ae-ddc4444dfd65", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93862389-d285-4198-834c-e04294c05adf", "sighting_of_ref": "indicator--cb18a322-c3a0-4ed6-b498-dc41b8543c97", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc1e7db-ab5b-4bbe-a32a-13aa831c372e", "sighting_of_ref": "indicator--7e4427c6-95e2-4abc-925d-cf04ff37a02b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92ddb6c-4973-471e-b156-8b6eea70d0ee", "sighting_of_ref": "indicator--be2d4f7f-d6e9-46a3-931a-9ede8926f5f4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2b32f5-6e71-4154-b517-6beccb6f9b05", "sighting_of_ref": "indicator--be2d4f7f-d6e9-46a3-931a-9ede8926f5f4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9338805f-1f64-432a-b2b6-cfd1dc00b0db", "sighting_of_ref": "indicator--21de717d-1e97-492f-b833-36c69f6d511f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28a5553-9f3d-47a6-bfd7-50a2a8af7c93", "sighting_of_ref": "indicator--a3f000fe-fe15-4b0c-b1f5-10a27dd94204", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908c621e-bfb8-4419-a3f6-aa1b7f32646a", "sighting_of_ref": "indicator--89b33293-0b58-4871-a890-92123387d64d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020e0104-cf2a-4e82-9715-f05337acc81c", "sighting_of_ref": "indicator--723a19e3-7e08-4929-9952-30d470af1ff9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8686b95-ec1b-4b64-9f2d-f5a87409bf95", "sighting_of_ref": "indicator--97989914-dfde-4491-86ad-7c0b4bd8f912", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1816b8-4e4f-46b7-aad2-ed285676583a", "sighting_of_ref": "indicator--9b1ea792-ae75-40ce-be90-779425f31b7a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3583f126-b7b2-4f61-bec3-44f3e0d4e5f3", "sighting_of_ref": "indicator--be95a1bc-5336-440c-b79d-f65e7836d982", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afe0f99-15fa-4fdf-ac2f-521df5370919", "sighting_of_ref": "indicator--333466f2-927e-48be-9316-8b69ec67b120", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4ab386-8aaf-4edd-814c-563c345ed391", "sighting_of_ref": "indicator--950b949e-3f5d-47aa-b660-ac8ae67a0df1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a5bb7d-d5f6-4137-8d18-19c3a90e5156", "sighting_of_ref": "indicator--950b949e-3f5d-47aa-b660-ac8ae67a0df1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a81b8e0-8b55-4a8c-a70d-d310f5d477fd", "sighting_of_ref": "indicator--e36f88a7-1261-4705-b2b6-59cbca31ad82", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7345ce46-a248-44c7-8ea7-01f1405353d9", "sighting_of_ref": "indicator--ca14d9a6-8f7d-42d0-b600-347231c8e82d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd00312-c018-47bf-85a7-942f28680079", "sighting_of_ref": "indicator--9aebdb7d-de72-464f-b43e-a1c2dddaf6ea", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f876cf82-0c6c-47e5-a13d-20710a0b5730", "sighting_of_ref": "indicator--b28c37f7-4fac-4a95-ace3-686f2e165817", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dbc095-6f30-4c4c-adaa-5dda0a0e600d", "sighting_of_ref": "indicator--5953a6eb-3e2c-411e-aee6-669117f2d7ba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267d1e71-dbae-4455-b86f-589b88acdbe6", "sighting_of_ref": "indicator--ddd1f4d2-d5d6-42a8-8f7c-7340e6cb9543", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79924aeb-aaf3-4f34-bcba-c1be885f01ff", "sighting_of_ref": "indicator--d7effc57-25ee-4412-b099-e931ff09d69c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f363e07-b8ae-4db9-9016-64c20c886859", "sighting_of_ref": "indicator--51d61a0a-b062-4014-9a1a-30928d272901", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9148881-75bf-4e4e-9450-feb604c22405", "sighting_of_ref": "indicator--9f12dda7-2fab-4336-80ad-2a1184a47735", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb01e7a-b5d5-49f5-bfc3-f316c4738806", "sighting_of_ref": "indicator--efb6e75f-03cf-4f3d-8194-e5839c1ca997", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfe43ab-0641-4322-be1f-119f1a50a4bd", "sighting_of_ref": "indicator--23cf8eed-fd1f-4af7-bea3-047745feb5d4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4602cae-80ff-4eab-8923-d50bd382b34d", "sighting_of_ref": "indicator--42a017ea-b393-421a-b2ff-b41157d285cf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64c7da5-fd09-45a9-942c-1ba26dc1034f", "sighting_of_ref": "indicator--a775ae04-888a-4b83-aac3-e9aff21e61ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad71626-db14-419c-b66a-eacc05498e6a", "sighting_of_ref": "indicator--b6afa0d1-a71c-4767-9164-a83f67b5354f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0353b7ab-da7b-4b08-9b00-cd700faa048b", "sighting_of_ref": "indicator--f98b47a1-b581-4cf4-9dba-2acb578a547b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d623056-6c24-4e92-acf3-9e60f3a0ed37", "sighting_of_ref": "indicator--16fb6ec9-7338-4a90-a1b8-cb3ca0fcc729", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7f3d23-0eb4-4cb4-8613-a45dc46b3d39", "sighting_of_ref": "indicator--f4698bbf-b73e-42b6-bbea-e621392efee1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304c858d-20bb-4e0f-b015-1677a7a6a0bd", "sighting_of_ref": "indicator--ddec436d-ab19-443a-ae81-31bf89898ce1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadef6d7-697c-43e4-8e02-0308ddb9a3f1", "sighting_of_ref": "indicator--cde615ea-10e3-489c-8799-7c2446e87acb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90bd32c-fcf6-488a-8c44-a3640aa106e9", "sighting_of_ref": "indicator--44ad1d35-0c8f-4a04-a267-e1de97301878", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defa470a-cd70-4430-84d5-f88c0b1a0110", "sighting_of_ref": "indicator--763264c6-61b3-4c31-bf3c-46c487ca5ce1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0b2c41-50f8-49f8-9293-df5e2c2fd81a", "sighting_of_ref": "indicator--d6b4ac2e-dad2-4e11-a9d4-76ba010cc0cf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df752e6-f96f-4d9a-a77c-d65410085b1d", "sighting_of_ref": "indicator--e1b27889-34db-4ed0-bac7-6f52ec02779e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d582dc16-288f-4dd1-b687-73d825263fbd", "sighting_of_ref": "indicator--09cb4ea4-e170-43d8-89ed-f4013b126e71", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f9ad8e-e368-4d53-b981-b328455d6a6e", "sighting_of_ref": "indicator--6bf37765-950e-4d5e-8425-ae9ea47c82ca", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a80269-f417-4376-ac61-9f00a5793a13", "sighting_of_ref": "indicator--536be9a7-0d22-4267-8187-85fc4092ddfd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af0d573-0e7e-42ca-ad46-53021a87e640", "sighting_of_ref": "indicator--01c69155-d219-4901-beb3-7e7b928d75a4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa18fe81-3195-440c-a43c-65b82e7d514c", "sighting_of_ref": "indicator--01c69155-d219-4901-beb3-7e7b928d75a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acb9706-45e2-41dc-b771-77e3dd0317f0", "sighting_of_ref": "indicator--27ac15a0-603e-4b72-8155-ea5df853c11f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426f2bdf-bba9-4ec9-928a-0eec978f59ce", "sighting_of_ref": "indicator--2d254f72-572c-4187-aed9-43d70760240b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd763f4b-2b4d-4eec-97c5-27cdc718cc23", "sighting_of_ref": "indicator--2d254f72-572c-4187-aed9-43d70760240b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784528ed-9f77-4a5a-8fef-258f55027fb8", "sighting_of_ref": "indicator--afb1b04e-3490-421c-90b8-9fe2ba1e0185", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020e4cff-e214-4986-98e0-9bfa1f5b7a54", "sighting_of_ref": "indicator--95594af8-b956-4687-b3f3-897ef1104ff8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43316b91-4bc5-4db5-8290-2b4648d8207f", "sighting_of_ref": "indicator--eae22b12-db2e-44a0-a9f2-204d8b01023b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1136183b-9ffa-4275-87cc-addd9f1d084e", "sighting_of_ref": "indicator--6d0832de-1868-40f3-a026-ed26e09abc9e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d66cdd-dafb-46f5-a75a-ba2a19c291bc", "sighting_of_ref": "indicator--82c9d085-8c2e-44a2-b1ca-d2552471ded2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1319d941-00db-4174-b946-61eafaaa0574", "sighting_of_ref": "indicator--90b7cb41-bdaa-487c-953d-49dbb77aeced", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2737587-efca-4918-921e-e3f717227efa", "sighting_of_ref": "indicator--a35e2e3c-f6c2-4070-aee3-c769c89efa10", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e9786c-aa9d-4266-8b01-107c9cd556f3", "sighting_of_ref": "indicator--d6296a68-bce1-42e1-a797-2fa107d24edc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf86cf3-10ba-490b-ab6a-23d6bf73cee6", "sighting_of_ref": "indicator--ce1c51dd-5223-4d2b-af6d-5cf3e186f448", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172ee767-0355-41e6-9498-dace0f1af6d1", "sighting_of_ref": "indicator--c606ed8a-19eb-404d-85f1-6151d242d03e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98faed36-7b9b-4988-a752-4b149a1e453c", "sighting_of_ref": "indicator--24728d01-c6fa-4986-8a2e-bb2a41463422", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d432bc-fabd-42ad-aa46-3027a5901788", "sighting_of_ref": "indicator--bc017568-e390-4432-ba28-d305e9af2ea3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1e17b8-4f3e-4cee-b664-74dccd1b6ee3", "sighting_of_ref": "indicator--d4df9dfd-8430-4620-a8b9-bd03c06c05ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f269f0-8f3f-4478-ac38-2bfcf49ff618", "sighting_of_ref": "indicator--d4df9dfd-8430-4620-a8b9-bd03c06c05ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bbbb44-bd3c-459e-b42e-c76863d560ae", "sighting_of_ref": "indicator--a568d638-1217-41b9-9341-b28ffcd8493b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae384d01-5285-442a-afc3-227383fed918", "sighting_of_ref": "indicator--8c358e77-c4a3-402e-85ba-9f2936a30cf2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f17ec1-a92d-4021-a468-f3a8e598fb7f", "sighting_of_ref": "indicator--9d6a515b-025f-4bb1-be81-738584a28504", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c64cf28-da24-4f67-9ee3-9518cda6670d", "sighting_of_ref": "indicator--7aa7324b-63de-468e-b709-4f94db5b75c5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c6d41b-0d16-48fb-a660-2340a5b6899a", "sighting_of_ref": "indicator--b371ff94-56ee-47ab-8c1c-c26273f038b5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ed9d12-a3d4-46a2-b7bc-220d6f6b7702", "sighting_of_ref": "indicator--790119ec-ae00-40c6-b777-72ca35985521", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d22e738-105f-4dfa-84a9-ae9422bbadfa", "sighting_of_ref": "indicator--dfe0575a-a4bc-41ed-972f-720731ddd49f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea5518e-7943-44c7-b86e-fb4356b1ea9f", "sighting_of_ref": "indicator--dfe0575a-a4bc-41ed-972f-720731ddd49f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae70748-12b7-4212-a00d-154d0fd1d099", "sighting_of_ref": "indicator--1bf931da-8e3c-423d-8189-25accc00fe06", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e12e16-43fa-4f37-8d8c-3c336c808ade", "sighting_of_ref": "indicator--d2bee403-54e5-4c2c-a1b2-9b052c475a2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6378235-3a83-4d6f-9cab-cd35e1b3364a", "sighting_of_ref": "indicator--cd4a7e85-a0b0-4f00-9c40-151126762915", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8602989e-767e-4596-b9d9-37a7d09510d5", "sighting_of_ref": "indicator--953c79dd-7a63-4d4c-a1f0-c13a68aaae03", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb6ec9a-a688-4545-9130-79320cb4f1f0", "sighting_of_ref": "indicator--b35a58c3-9319-4474-82b3-7d82de3512fc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250d1839-625c-4c74-a89d-3b055a1ade96", "sighting_of_ref": "indicator--126e9eb4-c416-418b-bc34-80b143eab8d5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3160da1e-8b4f-4123-9a53-82033e881d55", "sighting_of_ref": "indicator--197127e6-ccf4-496a-924d-e5c5b491f98a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec52799-8db3-4cac-934d-2c78e25703fe", "sighting_of_ref": "indicator--7f4a58a9-7208-419a-ad28-5c90a2d5f16b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9598e4a-4cab-47e2-936d-0a12e6e7f551", "sighting_of_ref": "indicator--e27fbb4b-f303-4eea-8e27-867cb96f9ebe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b422af3-5e11-4bce-846b-948ea981aa79", "sighting_of_ref": "indicator--1d656df1-9df5-4759-b22e-ee69b0ec0ed8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e3dc47-a18f-42d6-876f-de3332edf510", "sighting_of_ref": "indicator--856e1fe4-0717-4ac3-8441-697d39557512", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9518f1-ad75-4e79-8c28-6c5c1bd9a131", "sighting_of_ref": "indicator--56039695-6ff2-4ff1-a9aa-a40b546a57da", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83df96fa-a8fe-4fa9-86a3-ec0773827e58", "sighting_of_ref": "indicator--56039695-6ff2-4ff1-a9aa-a40b546a57da", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed24ff09-1a29-4106-984a-16c784a826c5", "sighting_of_ref": "indicator--a910b926-6d3f-4e55-a60b-ed67d844ae77", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3df33ea-29b9-4ff5-8a5c-9a8581f2e22b", "sighting_of_ref": "indicator--197c3d41-929c-4099-b4eb-b6d4cf4043d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11bc8d8-b816-4dce-bc78-3cca5ee29596", "sighting_of_ref": "indicator--8373c3fb-cefa-474d-90ef-d31717dc67ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ed279a-506c-4e52-9573-5ed606644c8a", "sighting_of_ref": "indicator--6aca4a10-3c8b-4353-b806-571f1a507a93", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0ef0c5-b649-4eb1-88b1-b209fccf0b6f", "sighting_of_ref": "indicator--1c0577d3-5b1a-41cf-a41b-4f0e657a766b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b72bc2f-3b3b-4b49-bb1a-16989785d9c9", "sighting_of_ref": "indicator--fa8fdccd-e510-4742-86b2-dd3c7b14915e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d1473c-9deb-4126-a738-3a5b7323d92f", "sighting_of_ref": "indicator--9b5c8dc1-57df-43ef-9a00-fcd5c7a00e04", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49141526-c063-4333-8640-0d0c94e787a8", "sighting_of_ref": "indicator--3b6c39b4-b6b3-4ec1-b42c-4c4722530baf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3fdcbb-3b9e-499a-8f5c-02e883940797", "sighting_of_ref": "indicator--0205485e-819e-45fa-abc3-aa7c7d601005", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a88ada7-47c3-4fc0-9317-e3c5b7f30472", "sighting_of_ref": "indicator--b4f44566-2ecf-4936-bf69-344d78a6449e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ea709f-1c85-4452-965a-6b3ec9d6df2b", "sighting_of_ref": "indicator--20d91ea5-aab2-44ee-8a48-1a9e0bdacc1f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca13d138-09b2-4c23-90a8-aea062aa44e4", "sighting_of_ref": "indicator--24a68b9e-6649-4518-9252-e510630e51cb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14181f2f-e2f6-40d6-bb39-776f28b03b94", "sighting_of_ref": "indicator--ac123f8f-89ae-4ee9-8325-79eb9f76647c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4337b64b-b23f-4320-8e7f-c1b0e3221e37", "sighting_of_ref": "indicator--6501791f-4962-4910-86a6-86e047ccbd8a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21caeec0-990b-4935-9688-c1dcec85a176", "sighting_of_ref": "indicator--d4e0a933-b262-48b5-8951-536049cdeac5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7bffabf-d9cc-4107-9438-b4bd9d1841df", "sighting_of_ref": "indicator--11208dfa-564e-4679-b6ef-534cbba4c416", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083236fe-84c3-4dec-bcdc-7f7c6c36c5f4", "sighting_of_ref": "indicator--2ac1b14f-d8f5-4c2f-be4c-a090140127ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2a95dc-761b-4a8d-afec-7fafdef5a51d", "sighting_of_ref": "indicator--90146a90-5747-4927-aec2-c834d4c08392", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89b8ebb-d34f-405e-b024-3987e4ea443a", "sighting_of_ref": "indicator--0c0a6399-132e-4e5d-9403-7d233988f131", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19f80ff-cf15-4253-bdfa-8ad8282158b3", "sighting_of_ref": "indicator--9e1e3f08-313c-40f8-b483-314507b056c8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f29ffc-8b2a-4815-accb-d104fcb2e586", "sighting_of_ref": "indicator--15638224-38b4-47c3-94b5-c8696dd9594b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bcd0bb-43c2-4761-9f36-4acf114b4ed8", "sighting_of_ref": "indicator--72b23b25-f1a1-439d-8d14-128c2b723a6f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7048c084-16b0-41d4-8940-0d15c63ebe09", "sighting_of_ref": "indicator--4e25d612-3a1a-4af8-ab4e-05819b2e218c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09416463-8fd8-4300-8dd2-d3ed050388bf", "sighting_of_ref": "indicator--5a143538-7fea-4b2d-afd5-c9dcf0b4c513", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d8704a-d2e7-4407-a3f2-e9047b45ad28", "sighting_of_ref": "indicator--aa99ef6f-6c48-4fc0-91ab-5a522d2c604d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941a894e-f16e-440e-8aad-21df19f82cd5", "sighting_of_ref": "indicator--161c01a5-4cb7-44e8-9010-41009fc55296", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d7f10d-ed76-448f-b504-78011972f17c", "sighting_of_ref": "indicator--2792b388-e8ac-47e6-ad42-1e03fb875136", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abd3302-8fdc-4ba5-a444-02efff8960bc", "sighting_of_ref": "indicator--2f489ea0-3b5d-460c-8e12-18f9b48d4d72", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83db17f-3025-4e90-a50d-0e0ffc58f74b", "sighting_of_ref": "indicator--9255133a-23ff-49d9-b088-10a8fca1ec3d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a7c639-8524-4e88-bf28-7ad39063209e", "sighting_of_ref": "indicator--a1a491d2-b872-4fb2-b308-760674af2a28", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16d30b7-e235-4856-95ba-c9db713fddd9", "sighting_of_ref": "indicator--f01bfe01-faf3-4fb9-8980-02e74310ee12", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48117943-0b4a-4839-a461-3702fbd7a98d", "sighting_of_ref": "indicator--f01bfe01-faf3-4fb9-8980-02e74310ee12", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0754a2be-39c9-441d-a000-983292c83da9", "sighting_of_ref": "indicator--7db88c20-4b38-41a1-b026-6d80d8a70531", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17218b57-5f2f-435a-ae50-9732c727fa54", "sighting_of_ref": "indicator--e0ee1125-54e1-434f-904f-8d85d01291e8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09aaba8f-685e-4e7f-a3d8-d698690d3cfe", "sighting_of_ref": "indicator--99f6cebb-44f5-4344-9ac8-a3ea4dbf015b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8444478-1302-4792-9d09-0392ce380190", "sighting_of_ref": "indicator--afaa1793-703c-41ff-84d0-5c585d974d89", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bf5337-9ff7-4c54-9dd2-1c77184e89f2", "sighting_of_ref": "indicator--07efc950-d122-41fa-a3b0-19ee605a0a6b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73120c88-f5a5-4a4b-b809-0e8e210b1629", "sighting_of_ref": "indicator--544ede9d-3e23-46c6-b69f-e55a095d88d1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1d466d-89ef-48be-97ec-2c8b1bb6a1c3", "sighting_of_ref": "indicator--1eaf8f9d-3d91-4e0d-b55f-e60e5fa2fa55", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abfb2a7-e0e5-425f-b079-c5776c5239c2", "sighting_of_ref": "indicator--2699c6f1-8d37-4a34-a660-d05289e2e273", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ed1e23-ca0c-4eba-87d2-1d08e66899d4", "sighting_of_ref": "indicator--fb55bf74-b6ee-4d43-affd-40c6385c49f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6b5146-41cb-4389-848d-0b60a2f49675", "sighting_of_ref": "indicator--e8888f69-8a65-4d1d-b9d8-48f662942102", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1628290f-e61f-4b9e-8c9f-a2678ecab427", "sighting_of_ref": "indicator--d7dd8db3-5a19-4441-a537-cdd56206f1b7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9c6f99-f53a-4b1a-9804-984de7d0ad41", "sighting_of_ref": "indicator--c6420f92-42d0-4079-ab27-f86ac6e87072", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d73495-29d2-4c95-8503-2e17d5d586a7", "sighting_of_ref": "indicator--c6420f92-42d0-4079-ab27-f86ac6e87072", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c72b85-ddb2-4580-8244-7308d1e2471d", "sighting_of_ref": "indicator--89131b34-83b6-4f8b-9ac3-98e5256a90d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1951ed7d-a068-4858-b9e1-c16c254550e3", "sighting_of_ref": "indicator--8f8d5010-243b-4dd5-92ab-941fbcc07ad3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef750525-43dd-40d0-9a0c-9c825cde6a26", "sighting_of_ref": "indicator--41c92cd7-e504-4003-97c2-5f95325b5425", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8221785-da4e-42f1-a0d9-517de6273cf1", "sighting_of_ref": "indicator--8586253d-f880-4201-b385-2f0cc9d93598", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a399304-2c29-4eb4-a760-7c7d606ece54", "sighting_of_ref": "indicator--357f87b9-ce45-4f55-8cb6-688dc230685c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52124c6-001f-4963-a362-1c422c9264d0", "sighting_of_ref": "indicator--c34d6bfb-eee9-4df8-bc7f-6246572fca96", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de06af8-c5ee-4d2a-8267-fc572785f1ac", "sighting_of_ref": "indicator--8a426fbe-31e6-450a-923a-f0849ab0ab3c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883b0e14-f01b-4678-a8c1-623e6b5a9e2f", "sighting_of_ref": "indicator--080863d7-abe7-430b-a219-ed91cb35a922", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02f024f-5d83-4e6d-81ec-5ffb6f7239e2", "sighting_of_ref": "indicator--e6b5324d-649d-440b-a9d1-b786bd4c5747", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d36e149-f8a0-4ac5-a194-f0c3a85c2cfb", "sighting_of_ref": "indicator--3f790903-3e17-4794-abe3-7a05ad4b800f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab611413-6855-4f22-8483-bbe217990fa5", "sighting_of_ref": "indicator--c39776ed-794a-40d1-95fe-ce6ef2772c00", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52c18b0-87f2-4a3f-9be7-f74cbacb8ac4", "sighting_of_ref": "indicator--37b44318-4a58-4bf0-9dbb-81e28ef35f5e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9995c3-ba68-4c82-b774-05ac956ff35b", "sighting_of_ref": "indicator--337a1525-42a7-4384-864d-21be93be8045", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0339de-eed6-4fce-bd68-ae5005500b83", "sighting_of_ref": "indicator--680c1e30-9d23-419b-8713-613ce419791a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3536da-7777-4f86-9162-29d53676bc95", "sighting_of_ref": "indicator--f7bbc390-5a27-4ef5-9bb8-64069f34eac8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefcdcaf-5658-4dde-b60b-f3f3e5ee822e", "sighting_of_ref": "indicator--bae427d4-448c-41ba-b1d5-dc12613ca54f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929c1349-b53b-4853-9428-939d1a97a23d", "sighting_of_ref": "indicator--5c73a3ef-c175-446a-99fa-b4d22babd7c6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19a889a-2f64-41e3-b2ce-b7a0920f27d5", "sighting_of_ref": "indicator--51f869fc-7acb-4773-a45e-65fab8077425", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3629cb51-73c5-447a-999e-5d8964e84b80", "sighting_of_ref": "indicator--65a7e54d-036f-4b9d-aedb-a9ac9f5a92aa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fb2df1-a513-442b-87df-0ba8e644c372", "sighting_of_ref": "indicator--41686997-aa87-4cfd-890c-53b0a84dadd7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d43da15-fa49-46f4-9aa3-e747d351f334", "sighting_of_ref": "indicator--b3373b6d-8b84-4243-9dd8-9522fa313849", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a95d080-cfe9-4c11-a795-4ef1442de229", "sighting_of_ref": "indicator--b4e7350a-54d5-4424-a20e-23f7cc22c499", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f13fc31-67d3-499d-8711-b1dfa6101ee5", "sighting_of_ref": "indicator--0cee6346-9ecb-4c57-a379-436a90b46873", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adc54a6-5782-44ed-a72f-d0fde3367e73", "sighting_of_ref": "indicator--7c1530fd-2a82-447e-ad25-28421203fffa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea18056-42eb-4d71-a992-3c8345535de9", "sighting_of_ref": "indicator--8e13c96d-0c62-4ed3-b4d6-7fcda63cd7e9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45848861-9fcc-4ddc-be30-941407a9fc29", "sighting_of_ref": "indicator--2dc68ac4-b0cd-43ef-886e-42eefb6e9e5a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4961ba8b-ece6-49ad-ac7c-9ae46bf704fb", "sighting_of_ref": "indicator--34305dc7-fca6-45d3-8995-467fa551350c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83c986e-d45d-48c2-b668-9614afaeee5a", "sighting_of_ref": "indicator--f33566e0-2234-4047-963e-d44b97668bdf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6518204-4541-416d-a0fa-54ba74c4ffa3", "sighting_of_ref": "indicator--b571162b-2467-40ed-8127-0a687f3b9c38", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7166bbb1-82e1-4832-bd88-b7ebdbf31bd2", "sighting_of_ref": "indicator--67f2d580-3e66-4ce6-8d44-3f9aedc67466", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e59177-bbdb-4f5e-a025-f7086ebb9836", "sighting_of_ref": "indicator--817cc82a-5626-471c-8495-7c2e3688d80a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b33495-787d-4208-a3f0-4fec529bbe4c", "sighting_of_ref": "indicator--2995c12e-91ed-40f4-942d-adc7585e142a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4fc33a-87cf-4f18-9ed1-aa98b6a5d33e", "sighting_of_ref": "indicator--9dfd0594-d4da-4618-b1cd-11c441ac0491", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1095ee-1c15-4c63-8bbf-4766c449136d", "sighting_of_ref": "indicator--548b2bbf-2b54-498c-ac0c-80446c4e2417", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93b7a85-b583-4114-8bf1-791d7cb396af", "sighting_of_ref": "indicator--ebd77f1a-1c84-425d-a871-29df77c3cfee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71b02a2-0278-4639-98d8-f4342d88ca90", "sighting_of_ref": "indicator--d4a27b67-8ce1-4e1a-9dd6-193dca46b1fd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df42d1f-dde0-431f-9ae0-2734bbe650ae", "sighting_of_ref": "indicator--3532377a-ad03-4727-8f41-113c886f6a60", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746cb9f2-2071-4db1-85a0-44d5a823b816", "sighting_of_ref": "indicator--8254fa4f-42a8-4c8a-9209-a4aced1bb55b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad0d0a9-dad4-4989-9dd3-ee2b56ff54e3", "sighting_of_ref": "indicator--fecc3af3-8b55-45cd-bd4c-12a3a059bfc7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36deb4c-e88f-4146-9800-be14194c2bc9", "sighting_of_ref": "indicator--fecc3af3-8b55-45cd-bd4c-12a3a059bfc7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e2458f-80de-46ee-ab3e-ddf947b918df", "sighting_of_ref": "indicator--7cb6a1c2-c654-4621-ac32-83d8b75493e0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606cf702-a40b-4eae-b5c7-8a20ffdd5b2a", "sighting_of_ref": "indicator--5f1833fc-ea6d-4fd2-a7f7-cb1e3b186371", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f153bb14-a1e1-406d-ac53-e1a373bf3020", "sighting_of_ref": "indicator--236e8f09-af5f-409e-a915-7f14dc3cfcdd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c3534c-769d-44ec-b8f8-0c0505709ad5", "sighting_of_ref": "indicator--bd1aebe9-0e50-46a7-bf23-b88450f0dc9a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228b7692-f211-496d-82e8-e4ee94083b69", "sighting_of_ref": "indicator--98f02922-d6d9-4d5a-98cb-af69de2d9a88", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3d00d0-0db5-4eeb-b4a8-5b7a372c3f87", "sighting_of_ref": "indicator--d831ea18-55bf-4488-b777-61acb3d4755a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340f89d8-10d1-4244-b881-414b249e1a6f", "sighting_of_ref": "indicator--c974f7e8-5eb3-4dfb-b9d2-3f0b0dbc3730", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71c13f5-769b-43ab-8d2f-bfa33269addb", "sighting_of_ref": "indicator--21d30cce-fcc6-4362-ac35-c84818fe1907", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f960590-b4f5-42aa-8dc8-b1f6ef9b10dd", "sighting_of_ref": "indicator--3463647f-7107-4b1b-be3d-bf5f33983ea6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1912889-0ce7-48eb-a1dc-e38c1827f378", "sighting_of_ref": "indicator--a70a3e48-363c-48ba-b176-608bd5d2661b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19bd62f6-5fce-4ac1-ae95-a4c4b9f22a19", "sighting_of_ref": "indicator--a70a3e48-363c-48ba-b176-608bd5d2661b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83bc8be4-af24-4247-9dee-cdedead1ced8", "sighting_of_ref": "indicator--9ee228e8-0a43-4d9e-9238-26a4e29f945d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145b613d-1268-4fdb-814e-97d1565213a5", "sighting_of_ref": "indicator--2eacd2b9-4066-4e5f-ac93-a8ca8a8897ce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acae9ba-4dbd-4a68-a407-72bb7e7c11db", "sighting_of_ref": "indicator--abb4e67e-ba93-41f7-b240-0164ae79fd56", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af28eed0-d225-4058-86ae-f13bd9b047a5", "sighting_of_ref": "indicator--ac468f9c-b462-46ba-a97b-5c7b0aa4673f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56f0786-c572-4581-a55f-9946d02fb9cb", "sighting_of_ref": "indicator--a48d9e88-1380-4264-8978-50b2d72cc182", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911e21b3-f690-4d1c-a423-f77a1da1b938", "sighting_of_ref": "indicator--baa78b48-13c3-41c5-9acb-4353058029cd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae67f73-02ea-4b27-be19-d0ee70d74843", "sighting_of_ref": "indicator--24486540-9469-4111-aa87-035849457e2f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9304dd40-47a6-4a72-b037-b023f7456597", "sighting_of_ref": "indicator--a5c366d8-5dc5-4535-8e1d-869acf6d5e91", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70a09cc-d862-4f45-be31-93ea28539472", "sighting_of_ref": "indicator--0b9a3912-ed73-499d-b329-60c365a212d3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cd3703-5e89-4817-a6dc-33ae817b54e2", "sighting_of_ref": "indicator--4c4d87a5-76d1-48a3-8cda-6e89c8c6f8f4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a010b8a9-f434-4527-bffb-ed28c44301ea", "sighting_of_ref": "indicator--4c4d87a5-76d1-48a3-8cda-6e89c8c6f8f4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aae1bd9-778e-40a8-8f9a-9d54f7a86918", "sighting_of_ref": "indicator--772cb150-3273-4f61-8213-928f65cfbc5d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3468d382-60f1-4c84-bdea-a18c59c6adb1", "sighting_of_ref": "indicator--d292a7ac-2614-426e-9858-a2889651bc71", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab6a81b-9fdb-4956-8bec-fb9281f20973", "sighting_of_ref": "indicator--d292a7ac-2614-426e-9858-a2889651bc71", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c89676d-dbc7-4aef-9e55-f955eaede11c", "sighting_of_ref": "indicator--63f5b926-3b36-49c2-a72e-f74ad2b776da", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e74d4a4-eec9-461a-bdea-00d7c8a38a6f", "sighting_of_ref": "indicator--db88aa96-0b97-4e2c-aa7c-372be53ad7a2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ef69ea-f50f-46f2-90f8-16afcf0d776c", "sighting_of_ref": "indicator--f5f22371-36da-42e0-b8b3-38bc8d8441d6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31904f5a-ae16-4980-9e6d-50200f22ec63", "sighting_of_ref": "indicator--54f2f639-8778-4688-981e-6cc7068feefb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a29d20-e83a-477d-b7c1-f597c814151f", "sighting_of_ref": "indicator--54f2f639-8778-4688-981e-6cc7068feefb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc087159-6cc2-480f-a8e6-ff291247413d", "sighting_of_ref": "indicator--f5bf341f-dc0b-4603-afc8-ecb0d7a199c5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3f5307-3634-4e68-af73-34369b1aa39e", "sighting_of_ref": "indicator--b5cc3920-8777-41af-94df-5064a8402fb3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65337022-a43f-4989-be6d-b5e0529e1ce9", "sighting_of_ref": "indicator--af7dca33-867a-4b6d-84b9-b2c92f652573", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978d671f-3030-4336-adb3-0b8d3ca7e175", "sighting_of_ref": "indicator--c6f8f6d2-d536-4888-9522-ce87135f38f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1741b60f-01ba-4c13-9e92-cd2c1e7cc031", "sighting_of_ref": "indicator--41b183d9-c68a-4c3c-be64-c89b1c452a03", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa6df17-3eb0-4112-b719-426eba847f75", "sighting_of_ref": "indicator--41b183d9-c68a-4c3c-be64-c89b1c452a03", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2eded2-bff4-4fa1-826a-7564cfd7e524", "sighting_of_ref": "indicator--e83d005b-11f7-4953-98d8-f2fcfd71a052", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57da1da-5422-49da-8f94-a9fe503fab25", "sighting_of_ref": "indicator--649c6166-01c0-4a9e-aa4f-142eadade366", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bbefb1-d50c-4b85-a67f-8686d247208a", "sighting_of_ref": "indicator--3f612f39-ff86-44e5-a986-f3ded8873346", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28532fe4-e5f7-4467-8c85-84e808bbbf99", "sighting_of_ref": "indicator--2a462aa6-3b87-4e87-b25c-59a84670b364", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed1adac-2c56-4e30-aba7-ec739e5bab5f", "sighting_of_ref": "indicator--2a462aa6-3b87-4e87-b25c-59a84670b364", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa781570-e890-4695-a894-bd4b47ceff00", "sighting_of_ref": "indicator--61020ec9-fc0b-4d04-b5d4-a807227ee6c7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431ba909-201f-478f-878a-fb4af391961e", "sighting_of_ref": "indicator--61020ec9-fc0b-4d04-b5d4-a807227ee6c7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78aaa649-ae4e-47d7-8c54-a356ad55663c", "sighting_of_ref": "indicator--ece449f4-c3af-40d5-9bab-6d43115d490a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2197b3af-6d42-4a4b-9ea0-5de5015929a0", "sighting_of_ref": "indicator--51f46d2d-73a5-445d-8a6b-d0f300df6a81", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d746907-b7ec-472b-8da6-4c792b4407d0", "sighting_of_ref": "indicator--f14407a0-4372-414b-92e7-c3414bfb2e63", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39aa79d5-4725-49b9-be4d-5609b88e9b02", "sighting_of_ref": "indicator--2fb23583-1f15-43ef-a971-3024c6435b69", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1b818b-5a94-4e6a-b648-3d1710a4195b", "sighting_of_ref": "indicator--82a78ecd-0312-4d86-873b-4982efd6f94b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187f5821-bc7f-414f-85db-78369ca082f0", "sighting_of_ref": "indicator--82a78ecd-0312-4d86-873b-4982efd6f94b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f157fbaf-e47a-4c5f-878f-9cbc456e5b89", "sighting_of_ref": "indicator--e2710f52-78a3-483f-99c7-7d99edf7f3fc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c28983-65da-47ec-ad48-e8fedd2a1cb6", "sighting_of_ref": "indicator--eb6fc1d2-9235-4240-9b25-deb30ca30634", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd567acb-4ae1-490e-9e97-82e568d8c0b5", "sighting_of_ref": "indicator--95955fa0-96c0-4ef6-bc51-077eccae7b6d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4e2185-c381-49f1-a373-a0f02c92091d", "sighting_of_ref": "indicator--95955fa0-96c0-4ef6-bc51-077eccae7b6d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d042a5-edea-4231-a51c-96bffe482785", "sighting_of_ref": "indicator--548e978b-f844-40e7-9405-610782a0b6a7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1038fad-2b01-423d-90f4-a384edc1df6e", "sighting_of_ref": "indicator--3f2ff212-8419-4440-8f86-ac305624e2c9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b3b2ff-8cbf-4069-aa1e-a07ed3c1a601", "sighting_of_ref": "indicator--820842d9-80e2-42c7-a039-82d8861a809b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d9694a-6125-493f-9da8-65afd10486ac", "sighting_of_ref": "indicator--d374e459-fb00-4481-8126-a3f907b82d52", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d28da1-c72d-4e97-a87f-088183fb2244", "sighting_of_ref": "indicator--0dc79977-55b8-4eae-8e8b-443e3657e6ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff73b4d1-c702-4410-8fe8-68ce49ca9b0d", "sighting_of_ref": "indicator--4c276dd7-973a-4da9-858f-09f146300dad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04dbd8e7-5214-47f6-8556-3526f1d499b0", "sighting_of_ref": "indicator--b32e7c12-df46-4550-b31d-e97f66aa16ef", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64124b63-8f12-4c38-a30c-34f86fe074f0", "sighting_of_ref": "indicator--34d0f67f-780e-4afd-ae57-f7bcc05258e7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551190d4-ba77-4253-8d68-208eb52b7862", "sighting_of_ref": "indicator--f3bb3d5c-a10f-46ea-990f-fda3d8d1d7a1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaecd43b-2317-4f50-89f6-89d7888550fe", "sighting_of_ref": "indicator--f3bb3d5c-a10f-46ea-990f-fda3d8d1d7a1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41958c7-2772-45cc-9465-677f7eb7f0eb", "sighting_of_ref": "indicator--fc1c619b-dd8d-4989-823a-792db5b7d077", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b72423-5d2b-469c-9896-0328d6666460", "sighting_of_ref": "indicator--8acff3ba-d90a-4f66-80fd-5afe32dfe10d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261ea246-5a1e-4abe-a9c4-f84df95d6633", "sighting_of_ref": "indicator--d18183b3-7b36-4b40-8489-9530efa94151", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cc81b9-dfb1-43f8-80c0-a8977e68423d", "sighting_of_ref": "indicator--0713f8d7-5872-424f-a7d8-ea3fc642f8e1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b2b190-d4a4-4be8-82fa-e2d8a9e98f24", "sighting_of_ref": "indicator--79762355-7642-4402-87a3-48958655013c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079b8b0b-8481-491a-93eb-b5ab90d9362e", "sighting_of_ref": "indicator--b00e502b-e146-4b75-910b-83d5de4f8ddd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5de11d-bef0-481e-a53b-c9728d3af0e5", "sighting_of_ref": "indicator--c5e377e1-9cf9-49de-8845-1f8c63ee0fc5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5464c1-6d51-4684-94f0-bd227053e986", "sighting_of_ref": "indicator--8d0f4759-8aea-4aed-889f-610c6df7d7af", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd7248d-5680-4d75-a7ea-3455ecd99241", "sighting_of_ref": "indicator--ab6f16f7-8a19-489b-a905-3717bd973a99", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff89442-6ebc-4637-9c26-9d292db272ab", "sighting_of_ref": "indicator--ab6f16f7-8a19-489b-a905-3717bd973a99", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d4d87f-6fc6-49f2-bd96-9cd25f3db75b", "sighting_of_ref": "indicator--a647c356-7bca-452f-904b-1cff0a400316", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ac937a-3393-416b-af5b-2bfa74cd7b3c", "sighting_of_ref": "indicator--58ccdb3b-b920-47b1-b264-e59fe152c0b5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623cabc2-4998-48c7-a733-705f516cd827", "sighting_of_ref": "indicator--f6ecbae7-2a1f-4060-8fff-f44dbb6901db", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79368586-2fae-488a-9e53-7a3cce269bf7", "sighting_of_ref": "indicator--af1c0885-9e6d-44af-a0df-6f9d526c54fe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a8497d-cc00-420e-818c-9dd5614cdc77", "sighting_of_ref": "indicator--3e9b7da7-c590-48dc-bbc0-e21a4cd9c9d0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc89e752-295e-458e-953d-1855df01f359", "sighting_of_ref": "indicator--3e9b7da7-c590-48dc-bbc0-e21a4cd9c9d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233d2904-bb62-4b17-acdb-083fadc206da", "sighting_of_ref": "indicator--43044a50-7892-462f-ac49-ebd4b204fbc0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b875124-6307-489e-b4c4-111637574c70", "sighting_of_ref": "indicator--05c82d98-523c-4701-9fbf-a4037abad933", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4841a237-9c7b-4414-acb8-96494fb1cf16", "sighting_of_ref": "indicator--3ecb73aa-0d56-42cd-a1cd-7e74e12abf91", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455c3985-3f52-42a9-a180-c00d19534918", "sighting_of_ref": "indicator--7ca410e1-9c74-44ef-b1ae-2811f9537030", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1521a73-e2f7-4d94-9bc0-733f342ccb5f", "sighting_of_ref": "indicator--9c186924-17e3-4996-9508-88c2a72c0a1e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebab8f81-40e6-46bd-8921-9e86dade2cf4", "sighting_of_ref": "indicator--9c186924-17e3-4996-9508-88c2a72c0a1e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9bf9d8-6557-4c88-9eeb-579e28da4966", "sighting_of_ref": "indicator--ee7fda71-a430-40cb-91fd-cc3b2671f3d8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6f857a-154e-4f51-8857-56776042a315", "sighting_of_ref": "indicator--ee7fda71-a430-40cb-91fd-cc3b2671f3d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e852ebd-c6c6-418c-8e0b-4ddf6fa02b08", "sighting_of_ref": "indicator--2a7906c0-c24c-4f67-a9f4-6a0447ff8f7e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee60392-051e-4349-a834-eec898854886", "sighting_of_ref": "indicator--e672b840-dc72-42cc-bb17-3a61471562f9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c6f25f-3925-42ed-abf5-b055affff0c6", "sighting_of_ref": "indicator--e672b840-dc72-42cc-bb17-3a61471562f9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a4d505-9a5f-4f7e-ab8a-a315b8bb3870", "sighting_of_ref": "indicator--f9288a27-e88a-4f77-83d7-8ed93c360cf3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae30e36-47f8-4859-9aeb-ef0fb4e48e91", "sighting_of_ref": "indicator--079e9d80-ca1c-4115-ae37-5812a19bb8f0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c452e2-544d-40d0-8b69-cdf745423367", "sighting_of_ref": "indicator--a8d1e47d-45a5-4c5a-ba5c-4e5dc0256e0d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb2f433-8c61-4c09-8d97-70bf6797c1db", "sighting_of_ref": "indicator--bc45ca12-682b-49f6-bdd6-4a06aa5a1176", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cbe5ca-e28c-4be6-89a3-51fcce0d05b7", "sighting_of_ref": "indicator--494d929b-13b9-4225-9040-1907529576c5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bdccea-e9a7-471f-99d7-5d3e602193ef", "sighting_of_ref": "indicator--d9483086-bc0e-45d8-ac92-ae18b96d9482", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf51cf7-0b00-4940-adf6-741e790abacb", "sighting_of_ref": "indicator--304d15bd-a2ab-4ab1-8187-534f82006a01", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8b1d5b-bd1a-4147-a258-228146b0c042", "sighting_of_ref": "indicator--9c2bab2c-8122-4d21-8f1c-f0a5690925b1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788ffa27-7ccb-4736-90d1-f62af97a69c5", "sighting_of_ref": "indicator--9c2bab2c-8122-4d21-8f1c-f0a5690925b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f33c16-cbc6-4652-aac6-89faa1d0775c", "sighting_of_ref": "indicator--ae427bdc-7601-4ad2-86d3-e11e75f63c14", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30ea46c-cbc2-4c11-a856-ab7d925dca6e", "sighting_of_ref": "indicator--e0089e70-894e-4073-be9f-4c34855cc7bd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38210b4f-c4ed-4729-81eb-67bd8c29abd9", "sighting_of_ref": "indicator--db048ae5-152a-4d26-815b-52f7c2decd63", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f5295a-3eb7-4bb3-8cda-94471dbd3764", "sighting_of_ref": "indicator--abc284b0-88d4-453d-8582-1a24bce46e0f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851b316c-213d-437c-9b6c-10cb96d244f4", "sighting_of_ref": "indicator--abc284b0-88d4-453d-8582-1a24bce46e0f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b644b97-e491-40f5-b936-d8abe1724fad", "sighting_of_ref": "indicator--60eedba4-1b63-456f-9c84-7f0fa9d1c479", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f5c6ad-07a6-415d-b6c9-69ed02d7bb0b", "sighting_of_ref": "indicator--127babad-a145-4671-a52c-ea01fb030cab", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519731f0-0dcd-47de-908e-b56693a80f6c", "sighting_of_ref": "indicator--eb8f2774-2246-4525-b934-b9c6147ae838", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a47611-e7d6-4e6b-af04-dbd07148d119", "sighting_of_ref": "indicator--5051e5b8-e4ce-4b5d-8225-bbfd598af99a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e877f6d7-5108-4945-bf0d-2bafd3a74301", "sighting_of_ref": "indicator--090e7741-b969-4df5-808c-6ee1ffb300df", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13173924-3627-4580-91bd-4d96e4495a7b", "sighting_of_ref": "indicator--090e7741-b969-4df5-808c-6ee1ffb300df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5313ab-0ce6-44aa-9aff-798e8375de76", "sighting_of_ref": "indicator--0fd96e5d-fd9c-4611-8180-c47d743811c3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd2d8bb-3627-447a-8f00-57f2903a44f7", "sighting_of_ref": "indicator--17fc634c-893e-43d3-9be2-0c666fa494f5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce96ad7-e881-4420-9cf2-318b0dd52743", "sighting_of_ref": "indicator--66088b92-53a2-4e3b-a2b0-3d51b751b4ee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cceb7ca5-0939-4fef-8bae-8d325ee25e71", "sighting_of_ref": "indicator--b6c4132f-ae75-4750-8bf1-38eb3e96ff73", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9cc218-a400-4f07-8e9b-06e6b5cf6e8f", "sighting_of_ref": "indicator--bc0919b2-2469-4eb7-9809-e5fc807c7062", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617fc718-7a37-490b-8517-12aad542cfbd", "sighting_of_ref": "indicator--fc842714-b943-4f63-a0bd-4a1986353f4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac9aa6e-c65a-4829-ad53-2d60abb30221", "sighting_of_ref": "indicator--fc842714-b943-4f63-a0bd-4a1986353f4f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a6ec54-c6f9-46ce-ad6f-355647bfd9bf", "sighting_of_ref": "indicator--b9661a68-ef3a-4330-b71f-7a0809a80bf7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fb9753-e3e9-4c81-b58b-fa71443e82be", "sighting_of_ref": "indicator--4cf3d8c5-0328-446f-bf7e-002419a192cd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57225594-7b9d-44d8-b45d-cf9d415cf72d", "sighting_of_ref": "indicator--15139f74-cdd0-45d4-a190-0d09dd9ec297", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e253034a-d9bc-44db-ba51-509da1655c9a", "sighting_of_ref": "indicator--15139f74-cdd0-45d4-a190-0d09dd9ec297", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df90f51-ea15-4bc6-b89c-1ecf0269d268", "sighting_of_ref": "indicator--0c5683a8-2e1e-4815-94f7-d6bd71ec90ce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4dc9235-2899-45a3-9336-0779ab4893b7", "sighting_of_ref": "indicator--26bfb154-1360-4caf-a686-42c7c287cdc6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5dd2ae-2687-46b2-8a21-99ea5576c2d8", "sighting_of_ref": "indicator--26bfb154-1360-4caf-a686-42c7c287cdc6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664c0617-8ee2-4fc4-ad2d-e4cffe4cd65d", "sighting_of_ref": "indicator--9db66250-8da6-42bb-9d79-94adb54e5c4d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ecab4f-82cd-4e2f-90a3-1481c1d33853", "sighting_of_ref": "indicator--4e6e6d14-4666-46b7-9991-6e5f58686142", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34d4e4e-4ce8-4e93-a798-ed5ad36f43a1", "sighting_of_ref": "indicator--f418c9c4-ed34-4113-847c-8be0e7e25f44", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad25dcec-da7b-494b-a626-d842b9f4fe33", "sighting_of_ref": "indicator--eb92f209-d709-4039-8e83-6cb544cc67f1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8846585f-6d2b-4fd9-8555-fbef18efb0bd", "sighting_of_ref": "indicator--0f9d6be2-e530-4def-9fa8-acef24a3af72", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9d75aa-386f-4099-a302-74e77745cb52", "sighting_of_ref": "indicator--0f9d6be2-e530-4def-9fa8-acef24a3af72", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6afccba-e4d9-404f-a109-2ad5128dc810", "sighting_of_ref": "indicator--b652b6ca-0f04-46f9-b55c-5489f29feec0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be765ba0-8178-4ee5-98e4-1b73e5195eb1", "sighting_of_ref": "indicator--11545707-5d41-4e38-9dc7-8fb3a4a08225", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1aa630-b285-48d4-ac16-6f3fbb3b1f37", "sighting_of_ref": "indicator--de840279-e35d-4d31-a22e-f629b36a9a5a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7becc2-fb76-4abf-8164-4dfeaf9b994e", "sighting_of_ref": "indicator--de840279-e35d-4d31-a22e-f629b36a9a5a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5582df-81f0-4dc5-80cb-84d1e24d7e41", "sighting_of_ref": "indicator--76a2d3c3-a98c-461c-8289-8661caf62a10", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ec4139-8826-4201-9148-111a5cccca41", "sighting_of_ref": "indicator--055d897e-3bf4-439a-b51a-1f8c61f16b2b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af91d1a-655e-4ef4-b5e2-28caadb0b85b", "sighting_of_ref": "indicator--1a951c1f-75f7-48e4-a981-db6d1d746aca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb54d8c-9db9-4b48-a434-c990f39cf5a5", "sighting_of_ref": "indicator--bbd146a1-857a-4291-9ff3-7acecc9815bc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba3cbd5-8b8e-4d2d-a750-28b753a9ff7f", "sighting_of_ref": "indicator--de261644-cb23-4f41-ad88-37a90a5de9be", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc847a7b-b59c-448c-b221-d8d6334a686b", "sighting_of_ref": "indicator--bbc34d9f-95ed-4732-baf7-2282b36bceb0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5dfc60-a1b9-4776-a8e2-e1222b7fbbe9", "sighting_of_ref": "indicator--edcbfdf2-a60f-4b22-9478-fc489a54ed79", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c27823e-3bb7-4c78-8456-b0898257a533", "sighting_of_ref": "indicator--12747382-d860-4494-ae7f-5a589690d822", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b09c1b2-fb61-4016-b1de-f6d6756ef6fb", "sighting_of_ref": "indicator--ec9ca1a2-d5b9-4413-ac2b-99ee3fc49998", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1058e3c2-4340-4569-aca3-e8b11c18cf85", "sighting_of_ref": "indicator--3304c3e6-7a43-443e-9587-30918eb33a6d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99c2c93-9a47-4eef-aa13-86c6997824ef", "sighting_of_ref": "indicator--3304c3e6-7a43-443e-9587-30918eb33a6d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219ede18-70cb-482b-b1b4-8ed55558fd65", "sighting_of_ref": "indicator--255d1909-d986-4374-8bb7-fbe081885a96", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf4ec96-5f7f-4a6f-a410-8a2839972fcc", "sighting_of_ref": "indicator--08d5ebcc-ec8e-4372-b5ec-4b22e5227071", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fba5b2-529f-450d-9ee6-f8bfd5a1377c", "sighting_of_ref": "indicator--eeeba9fd-7821-4388-9f6f-623efacaf55f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16ff07d-e1f5-4937-987d-6377bb3bbf38", "sighting_of_ref": "indicator--c230afd8-b46c-46eb-9a31-add7e8734bc8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75199d4f-9848-4f41-91b4-0892f21964b8", "sighting_of_ref": "indicator--28882f6e-e1ca-499e-a3a4-3ea16c1772bc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ada7648-0b55-42a8-bf6b-205b1d505a8c", "sighting_of_ref": "indicator--bf676125-92e9-482e-91d8-ad2dac561595", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083fc5c8-6c19-4f76-9bd7-1039a485b231", "sighting_of_ref": "indicator--6f041856-0fda-4f0d-a87d-a1a48941342d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb18c39-8c99-4eb2-99dc-ab9efe2a51f2", "sighting_of_ref": "indicator--6f041856-0fda-4f0d-a87d-a1a48941342d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6cc319-0f54-42a1-b488-3eeafe41f0fd", "sighting_of_ref": "indicator--4a58e5e7-0802-4b28-90e8-57177da18780", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c9144b-9d07-46b9-bdb3-c03da0f66deb", "sighting_of_ref": "indicator--8708098e-7577-46ab-bb84-73f8c025dec3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ab46c9-3ae6-426e-bd13-db73406ba8ec", "sighting_of_ref": "indicator--8708098e-7577-46ab-bb84-73f8c025dec3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7bfd33-591c-4f61-b3a0-5c8a1b2556ce", "sighting_of_ref": "indicator--1d840e7f-7797-4fbe-8448-b90f363d070b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c4c764-91de-42f2-8639-9ec74e5d6d91", "sighting_of_ref": "indicator--d05f8281-a7cf-4e45-9c22-48253052514c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56266c81-2af3-4c90-819f-fd1a69ff2211", "sighting_of_ref": "indicator--6b5cc170-e117-4b50-a6d0-b4ebbd43674d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7915829-1e24-4e6f-86d4-4c0aed8e358b", "sighting_of_ref": "indicator--227d56fd-def5-4b1b-8065-c435f593dc24", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a44f54c-9b13-4fc0-b7be-330866495de8", "sighting_of_ref": "indicator--5e43527a-06d6-4b5f-8365-7df6c992395e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7de795c-6096-4a53-907e-ea2205ce8852", "sighting_of_ref": "indicator--381be6a3-1daf-4b2b-b7ed-009fd18b5f15", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b29350-168c-4836-91a3-4bbcb7826344", "sighting_of_ref": "indicator--f560c456-8354-4b97-a180-06a463a06a94", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6477f0d3-cb0d-4fad-ae76-c757d1bdac7b", "sighting_of_ref": "indicator--190cd7b1-586d-4b70-9f7f-54b21600e3f7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff17dcb-e218-4a90-8f8b-c7ba71dc21c2", "sighting_of_ref": "indicator--75a54120-afb2-45b8-84c7-653207f467af", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b65a993-c055-4d11-986c-cff5ce1a0add", "sighting_of_ref": "indicator--c9b7edc9-86a6-464e-97ad-72fbbd83be65", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d837c11d-6813-46d2-8133-7ceed558128e", "sighting_of_ref": "indicator--8234c98d-9520-40de-a7d0-e6bbc679449b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d013fd-f026-4ffa-ab7d-d7a0f7758146", "sighting_of_ref": "indicator--fb8031f6-3126-4381-b211-66f656a00d90", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b278cdce-b613-4e27-a773-b7fc6829464f", "sighting_of_ref": "indicator--f0e5da2f-912c-4baa-9f00-37c2613c48ae", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fed41a-08c1-4a84-810b-b02096f77694", "sighting_of_ref": "indicator--f5a048ab-eb18-4222-83d8-e2cfeb4c8901", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822e2dae-3899-475e-84c3-33bf99dc4049", "sighting_of_ref": "indicator--a4cab868-0757-4a28-a8d0-84588f30cc1a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21d2b35-2ee2-4f9a-a3bb-20f3d6b67b57", "sighting_of_ref": "indicator--e3b9dedf-3e31-4123-b03a-afa62094f092", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a334acb-dad8-44b0-8d6d-cc2dbb9ce257", "sighting_of_ref": "indicator--2d9baae2-ca90-46c3-bc3b-276bee1d0c7a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de23b04-67ef-4f6a-8e3d-5b0756a94b97", "sighting_of_ref": "indicator--e15ac37c-bee1-4f6a-8a3c-90ff3d99c888", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c817a722-59cf-45a5-9dd7-1bdbaf19b9b7", "sighting_of_ref": "indicator--42bd364f-600e-4b7c-9340-5dec89adf528", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c79005-bb15-4ef2-bcdd-0da72cb235ad", "sighting_of_ref": "indicator--d6bdb3e3-0035-4e43-aa11-dc0cde71595c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b9bded-76d0-4a01-891a-d9d3ade4b5e2", "sighting_of_ref": "indicator--13472689-5efe-4240-b9db-8d4195c780af", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2bd2ce-51a8-4fd3-bb77-92b9737dff9b", "sighting_of_ref": "indicator--d1def8d4-a224-43d6-8905-95550443ce76", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e28ce3c-1739-498c-ab0d-f616f693350b", "sighting_of_ref": "indicator--05547542-8140-461c-b0d5-af4dbf84d21f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06460505-ee13-4b16-a078-4f1b15484801", "sighting_of_ref": "indicator--d4f62e73-068b-49b0-9ed4-fe95ee74de5c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34179f9a-2f6c-4be3-9d41-7b041a5d37f4", "sighting_of_ref": "indicator--7d7dd8bd-4c23-4dcd-b919-013f1a23255b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f9ea2f-c244-4f66-b002-9f8694f8f8b9", "sighting_of_ref": "indicator--f4aa6253-7b7f-45c6-8075-638db25ef5d1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32bcd1d-b36f-437d-8287-07e87dd210cf", "sighting_of_ref": "indicator--42ad7530-dd9f-4a50-b594-79bf860cd241", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdee080-5881-41f0-bfe8-02e2ce93ba9b", "sighting_of_ref": "indicator--a98bf31d-ac9a-4018-8b1d-6a54c54109ed", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5325b36-480f-4acd-87e6-417fcdcd90fa", "sighting_of_ref": "indicator--a98bf31d-ac9a-4018-8b1d-6a54c54109ed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fe2423-3b9e-41b9-a57e-2f785057fba6", "sighting_of_ref": "indicator--77265a7d-fc5c-45f2-8fc3-290c6d8ec5e5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf71135-c936-4a01-8f61-297618123904", "sighting_of_ref": "indicator--ff21f6e6-49e0-433e-ab96-c50bf42ba5c4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30368aa6-eab5-4ba1-8e15-09459a97c2e8", "sighting_of_ref": "indicator--ff21f6e6-49e0-433e-ab96-c50bf42ba5c4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b1b570-8c6d-4d28-9c34-525618ab3dcf", "sighting_of_ref": "indicator--797ba73c-e571-4321-8e0d-e02715eaedab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca9b04d-4ade-4ada-9f51-2dfb734d4317", "sighting_of_ref": "indicator--aca92d73-e927-410b-b7c8-a4e4e168913c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402b1d75-b69f-4534-ba2a-af4f5314a0b1", "sighting_of_ref": "indicator--05c3bbb0-90b0-431a-b16f-fa803ac516d1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84764a50-da26-4f42-8231-6cc393498955", "sighting_of_ref": "indicator--8b38eb9d-94c0-4504-a8ca-f11f7544a36e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48205989-97b0-4470-a619-0511c2975b29", "sighting_of_ref": "indicator--b02a8d56-3585-4be5-891e-bea2c040bcfb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d466a52a-d629-4156-aa13-d1fa35500ccb", "sighting_of_ref": "indicator--6d90dec6-30dc-4720-bc4b-16e4d4b0ca51", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e854046-118c-43d4-af09-5e2bc4437ea7", "sighting_of_ref": "indicator--6d90dec6-30dc-4720-bc4b-16e4d4b0ca51", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071cac22-c7bb-481f-884b-d43f48d0e356", "sighting_of_ref": "indicator--dc576ba1-160c-44dc-a32c-eaf74ca43d69", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67a7195-a186-4dc4-b2a5-368a4682639f", "sighting_of_ref": "indicator--56c4a263-7de1-4995-bff0-93563a8f39cf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bc7e32-b2fe-429b-9692-e5e809576470", "sighting_of_ref": "indicator--1ba9588e-50dd-4e7d-8f30-4c1cc0057851", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832d6d87-cb1d-40cf-9e57-9d8cb60ba810", "sighting_of_ref": "indicator--1ba9588e-50dd-4e7d-8f30-4c1cc0057851", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710fc38d-b497-453b-9899-f0053f2e2670", "sighting_of_ref": "indicator--272803b7-b37e-4c77-83a1-33cb6275799c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffbed92-4cba-4be0-a97f-5c58b7634083", "sighting_of_ref": "indicator--92a8311c-ea3c-4866-8b8e-91287ff00d8f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36366262-1138-4580-bb9a-80f855ff85fb", "sighting_of_ref": "indicator--6f6bc153-71ed-4aa7-88cc-12981c085b43", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c2fa30-1995-426a-a360-5164eaf0fcfc", "sighting_of_ref": "indicator--c46d1b1e-6829-4f02-976b-79e8a9a1294c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1efce5-1400-4f2f-80d2-981ced936b0c", "sighting_of_ref": "indicator--4d8804b2-0017-4371-9b19-d01581b60039", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5996bfda-12b2-484c-bece-bc906847a80b", "sighting_of_ref": "indicator--4d8804b2-0017-4371-9b19-d01581b60039", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86551eb2-b135-49ea-9c55-fcd727de481d", "sighting_of_ref": "indicator--ade9dc00-35ba-4786-908f-22714adfe440", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6181f9-aec6-432d-8aef-a6b3670b1596", "sighting_of_ref": "indicator--ade9dc00-35ba-4786-908f-22714adfe440", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617e7e04-1063-4530-96e2-7dfb7bac84c7", "sighting_of_ref": "indicator--1098f515-dfec-428e-9d11-9b47421f58f4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04df1258-ea5b-4910-bdb0-16a83b802c2e", "sighting_of_ref": "indicator--7de175f8-ddc5-4e56-a4f9-f75f87316022", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdc7b79-7330-4bef-ba19-2d439594f065", "sighting_of_ref": "indicator--7df14fab-264a-44ec-8032-ca0ec27c8a1a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b16d85-5bde-4330-88c9-d9198b34a2cd", "sighting_of_ref": "indicator--b3655ced-393b-41fe-9c22-6638a5083c16", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ae3495-122c-4124-9274-481d046967de", "sighting_of_ref": "indicator--7f72951f-d34c-4bac-a0db-47a4f143ccf2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda2e5f5-2b98-4629-86e6-5348cb138a68", "sighting_of_ref": "indicator--6b9a0d4b-1cd6-4c3b-a076-ed197c853b5b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa106d4-8f49-4de3-aa0c-841e57dc2b5a", "sighting_of_ref": "indicator--bcce1ba1-1850-499a-acd8-b9ed379cecbe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ca04ee-cad0-414d-8ad1-e5f31ed54b35", "sighting_of_ref": "indicator--5396e1dd-0100-468c-81e8-03ca0df397fe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680f7094-0005-40b3-ae24-81c98a4b7ef1", "sighting_of_ref": "indicator--78a9ddc7-e708-4cef-a434-d368f1fbbbb1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609a2298-5577-4ccf-9546-96e30bd96743", "sighting_of_ref": "indicator--435551cc-c874-42a8-bd1a-8cbf8b03e1d7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5589c1-c0bc-4a6a-aeda-b4687a4269aa", "sighting_of_ref": "indicator--34d4bf52-8592-4927-b0e3-5feb031a0a0c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3452b739-d234-48bf-b72f-30b179f53d2a", "sighting_of_ref": "indicator--86df3b14-8635-4d05-9316-81a3229547fe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e105719-cbd2-430d-9727-25060351fd8a", "sighting_of_ref": "indicator--ad57b20b-4963-4a6c-98b9-835796a7172a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f973029-6113-45db-ab43-a82daecaafd5", "sighting_of_ref": "indicator--90a198ec-f323-4b8d-a893-2316687174f4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8196763f-ad33-49cb-871a-1c32482b7165", "sighting_of_ref": "indicator--8d082701-0f63-4054-b4fd-a93be2e2e704", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a006d816-9e79-4fd0-a5d1-4878a6423659", "sighting_of_ref": "indicator--8d082701-0f63-4054-b4fd-a93be2e2e704", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b322fc1-1efe-4805-87a6-cab180ebd072", "sighting_of_ref": "indicator--6776c877-1610-4d9e-8284-c78ecd195c72", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0a0c21-4be2-4150-ba6c-2956d105d94e", "sighting_of_ref": "indicator--8f705550-db0b-4980-85ce-815446c90c46", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2657767-c5dd-4ce3-8fa9-d3aadececdce", "sighting_of_ref": "indicator--8f705550-db0b-4980-85ce-815446c90c46", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cee2d8-ca9b-40ac-9e9c-3c968f7db790", "sighting_of_ref": "indicator--ee753396-d594-4e13-9d9f-c2036810aa9c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0ca29e-2242-482a-9e04-b5652020531b", "sighting_of_ref": "indicator--ee753396-d594-4e13-9d9f-c2036810aa9c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9265a09f-9d68-491d-b4aa-f2e0b63a1832", "sighting_of_ref": "indicator--375ab2cb-e44a-4656-959e-890a0474d706", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a441af6b-7b3b-4b5a-9463-b68f48948b0e", "sighting_of_ref": "indicator--375ab2cb-e44a-4656-959e-890a0474d706", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790921c6-6640-46f2-8a7a-1c426afc63c9", "sighting_of_ref": "indicator--c5b27dda-b161-416e-a717-119507925dcc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7423d4-d5c8-4c8a-9693-6453d2bbe386", "sighting_of_ref": "indicator--10df2837-1b49-4da7-b400-6d42cb70c643", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daabb947-fdbe-4a8b-bdde-489f00a20fc0", "sighting_of_ref": "indicator--10df2837-1b49-4da7-b400-6d42cb70c643", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5669db-ea8c-4f18-be4f-a6c9e6ef6ccf", "sighting_of_ref": "indicator--30a2660d-86b5-4d82-8af8-3224faca232c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b35359e-faf8-4e2c-99d7-8fe9b984ccc0", "sighting_of_ref": "indicator--cf504a23-0284-489f-9240-b18838b1adbe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d841f8e-aa89-49eb-be74-58a00df8ef8b", "sighting_of_ref": "indicator--3bdfbcd3-8248-4391-86a9-cbf4b19c3232", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8a03da-4a95-463c-874e-7d100fde08e4", "sighting_of_ref": "indicator--01726059-9c94-4f4a-9f2e-5e286b58d6c1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff730a9-00cb-47e8-8f4a-cc3ce6865552", "sighting_of_ref": "indicator--b22fd837-908d-4edc-af09-6c63e0023053", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa0241f-4bd2-41bb-9171-1539ef057e43", "sighting_of_ref": "indicator--3facc83c-0c26-454a-a82e-aca6b76da0ce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ff9a08-1f6e-497c-a1bc-ab0455357efb", "sighting_of_ref": "indicator--7b770db7-6b5c-48ab-9345-1fa5fe46fe66", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628da0b7-890f-4342-8a5c-611d012b8803", "sighting_of_ref": "indicator--eb9bd702-8314-4a3a-9d54-9966c0c6cfd1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20666876-fd96-4199-8a93-be70e9aa7400", "sighting_of_ref": "indicator--70b4c00b-7009-40d9-a0d8-f9cc4a062078", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4319b6e7-bee5-42fe-82ad-4a1b7d95d4c7", "sighting_of_ref": "indicator--1d510d47-6162-4360-b034-83d35685291a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84d5353-b6a3-4e58-8a36-cbdf25d5e964", "sighting_of_ref": "indicator--3b3f60b6-ff8a-4eda-a4c2-93ad34be3dc5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f1ec74-70b5-4b08-89f7-6df2d93d1bae", "sighting_of_ref": "indicator--74adb4db-d8e2-46bb-ac59-75f571cb8644", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e17ed4-4626-4973-8b34-b988952118a2", "sighting_of_ref": "indicator--e2f404ed-a447-4021-86d5-efe670e0b18f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98191d8-166d-4680-939a-1d46cc4261e0", "sighting_of_ref": "indicator--4908b138-c11f-40e9-9b20-dc176b6ba3e2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f72afd-2250-4d68-8784-6cfecdc30f3f", "sighting_of_ref": "indicator--22aa7e03-006d-4492-943c-4e896b6d452a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf4f667-bdc0-4617-96cc-7f38bd8a061c", "sighting_of_ref": "indicator--1ab12221-09aa-4a70-a7db-bc9ded3a075b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea76de9-5df9-4f7d-8df6-d45440cd1da4", "sighting_of_ref": "indicator--103ae1c6-11eb-4051-a53a-895106403d34", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a402b10-ff1c-4892-8616-5f98e3777f5e", "sighting_of_ref": "indicator--9102672c-b2c2-4fbc-b2af-ba7dcb22a1a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c676e8-3660-4bb8-868c-667d0dfea389", "sighting_of_ref": "indicator--22deff7d-cd34-4547-bd0e-e495426af7ba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e40954-2ced-4ffa-89e7-ec4462f350d3", "sighting_of_ref": "indicator--cfe575f7-0c3f-4e01-9838-3d0021854be4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2483bbd-2c01-46d3-9dd5-25b948d58958", "sighting_of_ref": "indicator--659d5bda-6de8-4ad8-8be6-3cf08aab11aa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ff8ded-133c-49f7-8190-eba66d0d5441", "sighting_of_ref": "indicator--ccf1f487-3a46-4008-b681-5f72f100f71d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fb4b90-33b0-4a42-9b71-b2bb5df44eda", "sighting_of_ref": "indicator--6a8e71d3-dbb6-416d-ae5b-2778f59f9e08", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade16a54-037a-4fae-9bbd-db6d793c67d3", "sighting_of_ref": "indicator--1947e2f7-f36d-4591-9ec0-65e9b0c964b7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42df4e9-3608-4d64-8cb4-0eafb91b4324", "sighting_of_ref": "indicator--b05ebee8-99ce-4f5d-b0db-e305f39f7c20", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bab6e4-4b6e-484f-a8f9-1583bc7bbf50", "sighting_of_ref": "indicator--1313ff59-8194-4a4c-ad42-06cb7f7f0e18", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee8ef6c-c1b2-40d8-a8a5-e2e903ef49d5", "sighting_of_ref": "indicator--e5509cde-0980-483d-b56b-1183667ba69a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f91704-bffd-4d99-bd28-cd5285103afc", "sighting_of_ref": "indicator--8bbb4925-8331-4311-9c04-fa23fcd73249", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7917f2a-be7b-4782-997a-6e6058274a16", "sighting_of_ref": "indicator--47338666-1356-4fee-92a0-e19455041e00", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9049426-744a-4524-8bad-573878937d81", "sighting_of_ref": "indicator--79ce4fc3-dfa3-4d94-8d7e-53f98c24358c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eaee331-28f6-40eb-b345-e3b09d3b1b25", "sighting_of_ref": "indicator--c1ee307e-4745-421d-91ad-5d17942285fe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b73fd70-6272-4bc0-9e03-07f962da260b", "sighting_of_ref": "indicator--0e1abfa0-47ad-4a24-8084-38751b98f111", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf47459d-47da-4088-89f3-21da2f69da05", "sighting_of_ref": "indicator--4d50cd10-d9bf-4c9e-8ab6-1a275fb1ee87", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b526d9-c2b4-422b-83fd-3d4bfc8804fb", "sighting_of_ref": "indicator--5aa6730e-8f1d-48ef-8d4a-a3ecf97e25a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9532c38c-9421-404c-aaf1-cb7594a36132", "sighting_of_ref": "indicator--936711ee-e24d-40cc-b017-b3f05c5ef30b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94aff354-8567-4097-add4-2391de136b11", "sighting_of_ref": "indicator--6ae23413-137b-43d7-9cec-ab1f4e839b69", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fd7fe9-2e9f-4292-ac0e-b8eda3c50190", "sighting_of_ref": "indicator--45afbaa5-1ae6-40af-9f75-2cc6b940b702", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa769c5-ecf8-49ac-a417-d7813be23a58", "sighting_of_ref": "indicator--d1a28377-77a1-47f9-81a0-ed4e9b4b618a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737ef71d-0ac1-4722-9daf-e6da33b016e4", "sighting_of_ref": "indicator--d1a28377-77a1-47f9-81a0-ed4e9b4b618a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a398e0bc-083d-4ef5-8396-ae388dcda38d", "sighting_of_ref": "indicator--3af73cbf-d5a3-4ba0-9bcf-7d9618a97156", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f7cb40-afc4-4a8f-8485-da12166cb7ca", "sighting_of_ref": "indicator--f3737570-4f0f-49b4-b588-b0073af616b2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6b7a02-0520-4e96-9454-75787a51c935", "sighting_of_ref": "indicator--85371fa8-f768-49d7-861d-da3e4732bde5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af213acb-d93a-4ec7-9cc8-a1b1d7de3f37", "sighting_of_ref": "indicator--4fd0c4fa-8566-47c3-b743-61df3a409f5e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc52431-1be0-4aa9-93c9-0dd381576150", "sighting_of_ref": "indicator--4fd0c4fa-8566-47c3-b743-61df3a409f5e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf72384-ab5b-41ee-b749-aa1d34324d30", "sighting_of_ref": "indicator--9af4d8bf-55b9-45f9-8c1d-097721fd754f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85674398-56b0-451f-a27a-100bbebd758d", "sighting_of_ref": "indicator--8c8dfd33-191b-49b9-88bb-fa63ad4ac308", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653a7e1b-e014-4ee7-9073-76132998f6dd", "sighting_of_ref": "indicator--4b7995cc-0138-4de0-830e-c48ea67bc39d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c43cb02-a5c9-488f-bc84-7846046869ec", "sighting_of_ref": "indicator--5167418f-01aa-45db-9f7b-de20a68106c7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2711baa6-d0df-443c-925d-1c82313e169f", "sighting_of_ref": "indicator--5167418f-01aa-45db-9f7b-de20a68106c7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8158ff58-8340-403a-af56-ab503454301d", "sighting_of_ref": "indicator--068f0203-f441-4112-b291-a7a0b290c4d3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b515783-d3bc-4339-b3a3-ea1cf9196531", "sighting_of_ref": "indicator--068f0203-f441-4112-b291-a7a0b290c4d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54fb8e8-98e9-413a-88db-efae1ce6b536", "sighting_of_ref": "indicator--898900c3-fe61-449c-98a4-d41e13599ce7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a318f19-5dec-4610-8178-f8a23cfa5b92", "sighting_of_ref": "indicator--898900c3-fe61-449c-98a4-d41e13599ce7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1cee802-f8eb-4035-805f-4104b1cdc20d", "sighting_of_ref": "indicator--f9701681-9ca0-4e98-bb24-4944c08473bd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d87227-f9ff-4649-9838-a2c919bd7505", "sighting_of_ref": "indicator--f9701681-9ca0-4e98-bb24-4944c08473bd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a9ee0c-dfde-4eef-9e7b-c5dee1100c08", "sighting_of_ref": "indicator--2ae7d7c9-f3a3-43fb-b495-5a7b9660b9f0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff259a1-791b-44ce-813a-7d33d818111b", "sighting_of_ref": "indicator--7f9a994e-d414-40a8-bc2e-d2b7e69688ad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c6b537-77c1-4344-a145-4db012106024", "sighting_of_ref": "indicator--3be9c5fa-ee8d-4672-af65-c44e13dd6b53", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9413d737-266f-4d77-a394-cc2cadd17f09", "sighting_of_ref": "indicator--2a264444-78cb-491f-be98-4d6b4102e6b7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2305bc25-a745-4608-8adc-c29ac44cef4c", "sighting_of_ref": "indicator--c873a319-6b15-4dbb-93af-eda2cb1af8de", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2908c3-6165-4c3e-b72c-206cd1629174", "sighting_of_ref": "indicator--1b0f2bc4-f39e-4d4b-bb8b-98fa15fe8ef9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400699ae-6d94-440d-9cfb-7b4692dc5d16", "sighting_of_ref": "indicator--fe77ebed-e96e-4ad7-90e5-7f2491a0fa04", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f098594-fc4d-49c4-ad4a-c183ab405645", "sighting_of_ref": "indicator--3f5700e7-877f-4f6d-a9b1-43f38769d935", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06200229-c708-4cc4-bce5-de801244ec7b", "sighting_of_ref": "indicator--f70f2842-d304-4c2d-9ab5-6dad03bd49ed", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7574409f-7a85-4949-a6a6-157a62a47be4", "sighting_of_ref": "indicator--db7a492b-9102-4109-9593-c6785eb051a9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3febe791-aacc-42d8-9429-1834a15a4c50", "sighting_of_ref": "indicator--edc811ed-2229-442e-913d-64b40c5af64c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93efb64b-6207-4062-9cad-b69b500e3cdd", "sighting_of_ref": "indicator--193783eb-e3b3-4a98-afd5-69a02d901d2c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0afad3-8558-4896-ba75-52b4ed354c07", "sighting_of_ref": "indicator--e9762981-7d0f-4ae1-b12c-304889243648", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6083e59f-20ed-4ac9-84ce-4c00ee6b29e2", "sighting_of_ref": "indicator--7f35e364-09ab-4c41-8b3e-be7530069e2a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acaca15e-25f5-429e-b03c-440dfa1b0222", "sighting_of_ref": "indicator--8c31a01a-d7e7-49e1-ac37-b75c70c06a02", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7be2c42-a4f4-4b5b-b8a1-7497c27fef81", "sighting_of_ref": "indicator--8c31a01a-d7e7-49e1-ac37-b75c70c06a02", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd47618-f4ff-413c-b676-d8ffa805ee1c", "sighting_of_ref": "indicator--95a366a4-3de8-43f5-ad13-354af3f92f22", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7175374d-be93-4c95-9670-b43151b6584c", "sighting_of_ref": "indicator--6d7c4085-0e36-4733-bc89-3ad1803d6181", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed3c419-93e2-46df-99f1-43ce4fcfb164", "sighting_of_ref": "indicator--5c433430-6d22-4778-ab32-b3239a39200b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689eec8d-ba21-442d-aa07-03f32157c34b", "sighting_of_ref": "indicator--0678f010-16ea-4216-b890-04b3a4ba6e70", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1405e41-d131-4477-9df8-f9f6ed46a9e1", "sighting_of_ref": "indicator--122db8b5-6dc2-4dc0-8168-f020442e6888", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b6ae1a-5708-4681-95fa-373ea7f1ff21", "sighting_of_ref": "indicator--77543fc6-4bf8-4a2b-9cb5-c68e31dbe478", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2b04af-a30b-48dd-bf86-e86bd867f1e5", "sighting_of_ref": "indicator--585065a2-a4b5-4155-997c-bbcc95ec7ff5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849e0768-8c61-4f18-943e-5f5e48a641a7", "sighting_of_ref": "indicator--2256b5ae-91db-425c-8a75-782e3d0f0b8c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4dcf3e7-c6eb-4df2-8e95-971d37d7d477", "sighting_of_ref": "indicator--85583056-e595-4e3e-8941-d5303557edd0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03306b0b-b5c7-4633-9545-710e41cfd301", "sighting_of_ref": "indicator--9951642d-05f1-4859-94e7-76762c0fbbe2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b12cb3f-c272-4441-835f-396de35d74ee", "sighting_of_ref": "indicator--9951642d-05f1-4859-94e7-76762c0fbbe2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dd2b0d-5d4f-4b67-bf01-d8a7bc098d19", "sighting_of_ref": "indicator--3cd10ae5-bbfb-469f-ac02-4c491bec0736", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e96b4d-5665-41e6-8c94-6f3b6e9c7d96", "sighting_of_ref": "indicator--39695cb9-a9a5-4b6b-916d-597ad0f3f216", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0483faed-dfa3-492e-aedc-b8d05ed2ea3a", "sighting_of_ref": "indicator--39695cb9-a9a5-4b6b-916d-597ad0f3f216", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b933f13e-6ec8-4fb3-aa83-04aa53ab2669", "sighting_of_ref": "indicator--7067b7a4-4937-4246-8d79-dd839cb8de6c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d63d4ca-7c61-4a14-8c52-c44f442a331f", "sighting_of_ref": "indicator--857b793e-1520-4c08-9f34-3377d55aa214", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e644b8a4-e48a-4aa4-8f41-52425b961291", "sighting_of_ref": "indicator--d3fba777-f799-48ed-a0b6-1bec1e77a5df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f002be-1e35-4581-827b-9f1ba7cbb1f8", "sighting_of_ref": "indicator--445ed1b0-9d08-4ab3-a5e2-9ea14465813f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74871d4e-7790-4d41-8a9c-fb07897ceaaf", "sighting_of_ref": "indicator--84d3dd46-2cc8-4877-bf41-8f8d65bee655", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418794d5-1985-42e7-a6ee-cd0fc513581b", "sighting_of_ref": "indicator--db65dad9-fe8a-43ba-8f2f-87626d46db85", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a8b5e6-0cad-41d9-9c89-d46a4bc9d682", "sighting_of_ref": "indicator--792d43f1-97fe-4aaf-a0a7-93cca497635d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2521d2d-96c2-41c7-b698-7f34774b419d", "sighting_of_ref": "indicator--ede2d3bc-2edc-4ced-993c-683fd1a57aeb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2d1b7d-b172-4a4a-87f8-d06af3b630cd", "sighting_of_ref": "indicator--5bb49a27-13c1-4d48-9ec3-48d395f2df41", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a49f32-d5b8-4b9d-9c52-812657d37969", "sighting_of_ref": "indicator--ae2d3dcd-be74-4d3d-9a45-76964d74c0d1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fbe6f8-2cbc-4f8d-8abe-85800b01b74c", "sighting_of_ref": "indicator--4a385242-4b45-4ebc-9977-c916fadecca4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c89e66-6830-444f-8da9-97bd2476e2f3", "sighting_of_ref": "indicator--71ece133-405a-422f-9e16-4d03206e17aa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dcb1faa-0734-4433-b344-c0701c2e95ac", "sighting_of_ref": "indicator--081e74bd-f479-4d40-b691-2fb760ee22b6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf90031-c277-4730-8911-4fe03679f03e", "sighting_of_ref": "indicator--081e74bd-f479-4d40-b691-2fb760ee22b6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925678cd-07e0-44cd-a15b-c1d14fed6e2c", "sighting_of_ref": "indicator--b907da0a-77a8-447b-974d-1d31c4bdc7de", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a975425d-8890-4f97-bb96-9a6962d10e62", "sighting_of_ref": "indicator--b907da0a-77a8-447b-974d-1d31c4bdc7de", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3895632e-ad97-44e0-8955-e482c9137520", "sighting_of_ref": "indicator--4c77c6e2-508b-4dca-a62b-6a83178f0192", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db423ab0-000e-4583-b04b-8155e14b9146", "sighting_of_ref": "indicator--4c77c6e2-508b-4dca-a62b-6a83178f0192", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086a6f1c-516e-4a05-b896-b9126027db82", "sighting_of_ref": "indicator--983c59af-520b-4e7a-ace7-4cf734814a97", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db53292f-23fe-4f47-9e12-cd390033c8f1", "sighting_of_ref": "indicator--fb2df7d1-64fd-4ba5-9001-5f046915bc0d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb2ba9f-d99c-448d-a500-ef7b5d54b3a5", "sighting_of_ref": "indicator--a8d52a2f-463d-4da2-8283-1d30aae3f49b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a909b5-a133-4072-bb1d-b51b906803f6", "sighting_of_ref": "indicator--47a96910-57c3-4b77-bbe0-5ac8dd17c7fe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22078b69-098c-4495-b702-e1fc68fcdc80", "sighting_of_ref": "indicator--73b52cd9-3d9a-4578-aa20-b90de2dd4436", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e620f64-8059-4074-8b24-fc44e14061a0", "sighting_of_ref": "indicator--73b52cd9-3d9a-4578-aa20-b90de2dd4436", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0497eee5-a1a2-4034-88db-5be5550b5d9f", "sighting_of_ref": "indicator--600ef799-6c23-4931-976a-b8bfdb2d6f56", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735da83c-595f-45f9-b4d9-fe6f3453ab10", "sighting_of_ref": "indicator--0736d0af-4b9a-4b78-8498-0c8218fb6242", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af9992f-8cdf-4bcf-82dd-cbab991b2ef6", "sighting_of_ref": "indicator--0736d0af-4b9a-4b78-8498-0c8218fb6242", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd554d2c-f192-4af2-8d4f-c63d28ea40b4", "sighting_of_ref": "indicator--78a7d894-0987-4356-b6a5-b70937bd655b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b75eb5-db3f-4dc0-91e0-bb8d4b41606b", "sighting_of_ref": "indicator--b54bebe1-877d-415d-99d2-bff6859e0740", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7865516-702b-46b0-b1f1-8af1c03330b0", "sighting_of_ref": "indicator--ad9082e5-f4c2-46ba-9f93-f6d8c06cc6a9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752bd1e7-f92b-4e9a-ae50-16b0d1fead63", "sighting_of_ref": "indicator--9260630f-fdd8-47bc-b958-a320415cbafe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6d7d61-c920-47de-ab6e-dba28eb5473b", "sighting_of_ref": "indicator--174409d8-9b7e-4d1a-ae2d-5a42ae47155f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76630184-6fea-4dfc-8a18-582c0aa0b555", "sighting_of_ref": "indicator--949a2924-799b-439f-92f6-faf31403dd41", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766c071e-3c13-469f-9956-1dca91cde63d", "sighting_of_ref": "indicator--e5004dd4-f99e-434e-a279-77b72688341d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5a17b3-4ca9-45b4-bcd3-fe53b775a89a", "sighting_of_ref": "indicator--05dc12d2-7ba3-4ead-97be-38d3e0dd36fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee954594-0066-4daa-9588-3e0c391dddf2", "sighting_of_ref": "indicator--504bd29b-8c1d-48d4-b02d-c409a349fac0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a5c960-c92b-4549-ba2e-f2fe55535c7e", "sighting_of_ref": "indicator--90334329-3231-49f3-87fb-f3cf36360a03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb28e194-662e-40bb-a9a6-b2e1a9421033", "sighting_of_ref": "indicator--49d81e2e-c16e-495e-b1cb-abc384ac3cc2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2550634-754f-4970-8b35-31902edce6a8", "sighting_of_ref": "indicator--ed62e0cc-c2b2-47b3-87b5-12e347e8ef85", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97470db-eb61-4105-a958-9ac4ee4d8c77", "sighting_of_ref": "indicator--691b131b-fd34-42f0-9c8a-060bac544aa1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67b16ee-fdb9-48b8-b938-4f9f53c1a672", "sighting_of_ref": "indicator--acfb6e2f-783b-4e7a-a153-66e30f1b8818", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9535a8-a42e-4312-951b-f665523dbd96", "sighting_of_ref": "indicator--195d2503-a35e-4fdf-b044-b349832e28e6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b947c237-763a-47ef-a6a4-f8f8e382b145", "sighting_of_ref": "indicator--195d2503-a35e-4fdf-b044-b349832e28e6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0b24c5-67a2-4617-96b3-11774ced4ba7", "sighting_of_ref": "indicator--cafbad07-f2e5-484f-98de-96683551c08a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c825be-8468-4f25-9e7f-1fe9cb814a24", "sighting_of_ref": "indicator--2cb2f957-8780-4159-acb6-f6f16b766fb1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31775b86-e523-4cbf-b216-eb0adcfddf9c", "sighting_of_ref": "indicator--b7fcc11a-3cd2-417b-b4e3-d240db2bf06f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ecbd0e-c306-44ae-bd6a-a19cf6f90bec", "sighting_of_ref": "indicator--5eda01f2-0828-4a2b-afc7-d31b48c0c0ae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e87a63-e9e2-46c0-bab2-9ed809a2bfb5", "sighting_of_ref": "indicator--751f60e1-fec6-4580-a535-23a570f66726", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3962de11-8003-4707-845a-055c8fca3fa7", "sighting_of_ref": "indicator--31016da4-358e-4d36-87c6-992a4a16e18c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5c44ba-bc67-409e-aa0c-80b187839357", "sighting_of_ref": "indicator--c4b6e0cd-762c-4a21-905c-6fe479ad8a0a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902f2b0d-96e0-4aeb-9030-0ba2d6fd8818", "sighting_of_ref": "indicator--f5938815-d61a-4fed-997a-65993eb46e88", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c308b3bb-5980-40f7-8451-208076c2ea1a", "sighting_of_ref": "indicator--4aaef125-8940-4dc3-9ddd-63947ebc7cb3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d330f1-674b-4032-8268-023041ff8563", "sighting_of_ref": "indicator--55172862-b001-4b29-9bd0-971cb9464680", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5197741-09e7-45a1-a182-d00238ff10b1", "sighting_of_ref": "indicator--91aee9fa-a9e2-4730-86bc-6ee6bee9ce8e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca3718e-8e8f-49ff-b85a-3fe3b0eb94d8", "sighting_of_ref": "indicator--ee841351-9689-4338-b195-d0743fabdc68", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9a04eb-0791-4fb7-8acf-00c8086efd33", "sighting_of_ref": "indicator--f2c72ab4-faac-46dd-9031-29f008cc2431", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a85547-2e43-48eb-a990-d471564f407e", "sighting_of_ref": "indicator--901aac62-fce1-49da-9fe5-dd17f76a9718", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97854a1-1527-4879-80e7-f477b825bc5c", "sighting_of_ref": "indicator--fb197a31-9c8d-4ecf-8bad-74f68ff0e85d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fac4c3-0249-4044-9658-bb9d41d0c686", "sighting_of_ref": "indicator--244f80ef-be81-43d9-8d86-65b56112a57e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d016ecee-c246-4bcb-9a36-447973c499c3", "sighting_of_ref": "indicator--92931de7-8964-412e-a43f-a1b84c22174a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fa80bd-4f43-43f3-b70b-e79ea733ec67", "sighting_of_ref": "indicator--868f5b24-64b1-4287-b2e8-2d4a5feb59c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de10caff-346c-4409-89c7-22f9c1d7b985", "sighting_of_ref": "indicator--eece3779-00b0-43b4-851b-8aa2e16a41b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40369e83-f52f-4a6b-b21d-a0f7e4b97c45", "sighting_of_ref": "indicator--18a299f2-57db-4a8c-82a3-77046c16a0c1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba0c5aa-abed-47aa-95e9-1d7191920fd9", "sighting_of_ref": "indicator--8a77ef44-f899-45a8-8f61-63c1fb27b4b5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbd4b98-d9e8-4bc0-990e-d9c7ac5afc2d", "sighting_of_ref": "indicator--e70ae43a-e313-498c-accf-3a10c8067b12", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f895df-d8f1-43d7-9d93-da5ac9dc718b", "sighting_of_ref": "indicator--c4b31fee-9721-47d1-b006-db36d3714f10", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe7e660-af5a-42a2-b5eb-229d4761a8bb", "sighting_of_ref": "indicator--9ac8fd65-e28f-4b8a-928b-09baa2c423d2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7048e43d-a9ad-4760-832f-c4e03178bea7", "sighting_of_ref": "indicator--e411e8a9-400c-4b3c-8d35-b65b257e5ee6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582ab089-d065-4bae-8e49-e55466d19451", "sighting_of_ref": "indicator--bdfb82e1-11c7-4bf4-a6ee-1b8dc46c40a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8713d5b-668c-4113-b4cc-12ca56a47397", "sighting_of_ref": "indicator--8fb74c8d-60b0-4047-882b-54ccb44da5a0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44be9ec3-2dbe-476c-a0a8-bcd6bb1b02f8", "sighting_of_ref": "indicator--6d4e662b-c86a-48b4-b462-d75e9d199a8c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69681385-aa1d-4bc6-a7dd-2d6dfdad21bb", "sighting_of_ref": "indicator--f7c1f2b5-b9c3-48e3-bc83-2152639ddba5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca57242-7552-4128-ba45-2d0822d687a2", "sighting_of_ref": "indicator--f7c1f2b5-b9c3-48e3-bc83-2152639ddba5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba3db26-5614-4a27-83b2-0a2d800b0a96", "sighting_of_ref": "indicator--a471a09a-8fd2-4791-92b7-3c9c3891ee05", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29479dcf-b4d6-467b-a711-023f5a26cc81", "sighting_of_ref": "indicator--0d131be3-7293-4d9b-91bd-c2d05ac83006", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fab3e4-919c-4b49-967a-e77bc8ebd42e", "sighting_of_ref": "indicator--f1be22e6-47b4-4ff0-91a2-3a86bc60c97a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e142039a-ce48-4539-9bdb-422af868f9df", "sighting_of_ref": "indicator--d6f1d574-355c-4f91-8276-a29da0373fd5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d18a97-9e91-44c0-924e-c90a91fef029", "sighting_of_ref": "indicator--7668b233-36bb-4570-89f3-ff47a2d789da", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f46b852-5520-475c-bc64-f1d5116d5cf6", "sighting_of_ref": "indicator--dbe4d38d-be54-4487-951b-14d8fc5b1d0e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98880ec1-b1f8-4ed3-be08-1da6ec185f41", "sighting_of_ref": "indicator--f4f1e485-9504-477b-8d87-92c2e3d71c1a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34510eca-1f7f-4953-816e-f3c93ea54e7c", "sighting_of_ref": "indicator--3e6541a6-e0fa-48d2-8fdd-e308aa544e5e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94ae4b8-18c0-4aa5-860c-14d7ec54b2c3", "sighting_of_ref": "indicator--dfc10c31-2608-4edd-b4a3-23e96ce97958", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131383b2-b87c-4d06-87c7-852dce681ab1", "sighting_of_ref": "indicator--0087e697-31f4-4219-a5df-08e997db034f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128748e0-4d9c-4797-9746-b4ad73eee392", "sighting_of_ref": "indicator--8ace942f-5477-4687-a692-c1f770efba7b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b546eb5f-91b5-4dbe-a53a-62860288868f", "sighting_of_ref": "indicator--ec5c9144-0aaa-4b45-9e05-c3201e572330", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7152bc30-9a0e-43ee-b216-aa04adcd773b", "sighting_of_ref": "indicator--55c83539-5701-4cde-ba6b-4f1d0fbe1cbc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c92b2c9-619d-4ad1-a16c-d6392548479e", "sighting_of_ref": "indicator--e0e99291-8601-435b-98ad-57c1a9e2928c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d678adec-cb91-4037-9d02-135be35ce8b1", "sighting_of_ref": "indicator--9b180c6f-a2c8-42fb-bb8c-04a76b248c2d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eccc4b1-6d0c-4913-a262-1d2e33ee89d2", "sighting_of_ref": "indicator--2328e0e3-7854-4472-b65b-88e3f8d0ab70", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6315de0-1092-4006-b088-79a414276aa5", "sighting_of_ref": "indicator--05406276-7b7a-437e-a12a-15494cd0a5a5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d6c86e-a33f-40bb-877a-caa22454eaca", "sighting_of_ref": "indicator--eb79ec07-e203-40c0-81d5-3675afc6478f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b33715-7fcf-4d99-8481-93512273b073", "sighting_of_ref": "indicator--509738d1-2cd9-4626-b94f-c375e20ff289", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40106484-5f41-4648-809c-f04314c2d0c7", "sighting_of_ref": "indicator--1ce5240f-6b15-4251-bb11-5ec2ec4dc5e1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7574bf-de4f-4f76-ae76-3b1a93dce81b", "sighting_of_ref": "indicator--72ddee75-d397-49c0-b285-c87643c50df8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba2f384-9d9e-44dc-9c21-050921922649", "sighting_of_ref": "indicator--2c763c0d-bcec-4973-8f9b-5104b8281951", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6e3b86-7188-430c-8d50-2acad94c0e2a", "sighting_of_ref": "indicator--e57096bb-5369-4aa7-b337-eb8474bb766f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca51aedd-0e01-4f1b-92e9-e7c7f7c99974", "sighting_of_ref": "indicator--a0de5b07-e895-4de4-9254-222ecd99fd4b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7f643a-8b43-4770-aaf4-6c0c1a4461c9", "sighting_of_ref": "indicator--a0de5b07-e895-4de4-9254-222ecd99fd4b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d49d192-71e9-4f67-a880-5fb8eb4130aa", "sighting_of_ref": "indicator--d4382fd0-56c7-484f-af83-00793a76dd8c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6bce85-0d85-4e14-83cd-bfd8cb1fd7f8", "sighting_of_ref": "indicator--d4382fd0-56c7-484f-af83-00793a76dd8c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d9a0a3-674b-4178-86f9-c601fbdfefd8", "sighting_of_ref": "indicator--410d84a1-88c6-45d7-8a5f-41371fac47fe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69752634-e38c-4481-b833-a9d77b36582e", "sighting_of_ref": "indicator--410d84a1-88c6-45d7-8a5f-41371fac47fe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92d58b5-2a5f-4eae-82de-0f1e7445c6df", "sighting_of_ref": "indicator--005b1b39-a373-4fbe-b1ac-d16389e13a45", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7487d0d8-a777-489a-b68e-a1fbaa76a065", "sighting_of_ref": "indicator--005b1b39-a373-4fbe-b1ac-d16389e13a45", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e92998c-9c18-4b88-bc27-40638197476a", "sighting_of_ref": "indicator--f4c7c954-0c0b-4f1c-8dcf-89f1c519177d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47506a66-aa84-4ece-92b5-035bc7949932", "sighting_of_ref": "indicator--d473f6f5-a530-4352-8990-31e8448e1601", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ebcf72-f80f-46ab-9a6a-cc15d60ff19f", "sighting_of_ref": "indicator--73f9ddac-da2e-496d-9941-14bba3886b53", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94430a87-0cc3-4cbd-865e-9f339cfc7d63", "sighting_of_ref": "indicator--0abe3c71-59e7-43f6-b930-194e6fbf1c7b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3454b07-dd32-470f-8297-474e797d5270", "sighting_of_ref": "indicator--4c8d5e8e-c16f-40bd-9a9e-ce22c2d93cab", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a405d7f-a4cb-4a0a-bdfd-2a77d92762ac", "sighting_of_ref": "indicator--b993939f-130b-41fc-9d10-8cb970ace036", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e1ec7f-62e5-43c6-9131-728b092d1bb0", "sighting_of_ref": "indicator--da14a7c1-870a-4f29-ab82-0a58b45ee44f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7038ca-1bb9-46fc-b36b-0df12954d03d", "sighting_of_ref": "indicator--1f57e7e2-5f17-408b-ab4c-31503311aa2a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff0f3d9-4ee1-40bf-a1fe-d9d5ca9a65d8", "sighting_of_ref": "indicator--55712f1d-a5a2-4f2f-b7c6-66ae5426280a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d981119-9985-40f4-8736-56a08a0c126f", "sighting_of_ref": "indicator--987c511a-da5b-4d90-b4e5-f986833acc27", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19fb279-105d-468f-bacd-3361146693e0", "sighting_of_ref": "indicator--51646640-c28a-4b57-b9f4-0bb56e583664", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72c443f-6513-4796-ae51-767e28c8bc22", "sighting_of_ref": "indicator--4deea2c0-d10c-40b3-a876-298209f53a6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c5073c-9adc-4103-baca-1fbee39b79ec", "sighting_of_ref": "indicator--33f7de2e-103a-4dac-913a-845388dc0a8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1124f054-b520-4459-a5fc-2d453f0589b7", "sighting_of_ref": "indicator--ecd3462e-09ef-46b5-adea-c6e04dc86e9b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c741e02-37e1-4512-9b42-c877cb6e3ddc", "sighting_of_ref": "indicator--ecd3462e-09ef-46b5-adea-c6e04dc86e9b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6cca40-7dc9-4797-8b61-1f3db2e05511", "sighting_of_ref": "indicator--aa46246b-f3a7-420f-9dcf-132b28b3411e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f6b99f-59c4-4258-b950-4148dffa5807", "sighting_of_ref": "indicator--aa46246b-f3a7-420f-9dcf-132b28b3411e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1989eb82-106a-4cda-aeb6-d0ff66173df6", "sighting_of_ref": "indicator--4bdabf7b-26a6-42be-af45-4a926f015b50", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219a3bbd-8138-4aaa-8baa-a73411ce77e8", "sighting_of_ref": "indicator--54e94da9-79a4-440c-9398-94183449bb4f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba066a7-ad30-4eba-b3d5-5c9e88cbc4df", "sighting_of_ref": "indicator--54e94da9-79a4-440c-9398-94183449bb4f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff75b296-2e46-4ed9-aa00-cce1b0f9866d", "sighting_of_ref": "indicator--1bfb7761-43f1-428c-b38e-a8b5ac677ee3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03f8739-07f3-4bc3-9392-e6e1b0446c71", "sighting_of_ref": "indicator--1bfb7761-43f1-428c-b38e-a8b5ac677ee3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c98430-aab4-48ad-8ebf-e9dae85dd173", "sighting_of_ref": "indicator--e651bb5b-b677-4e04-8b01-782b9236442d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc129de-73f6-438f-be5d-41c515f3f204", "sighting_of_ref": "indicator--d12256a1-f23a-4367-b789-11a625acb596", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f07e98-5a9e-45b4-a1c7-595644e8057c", "sighting_of_ref": "indicator--82ef583c-b4f6-4003-a1d4-1e666adb7508", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f562c1-c10b-4d44-b33f-fc6d5e003463", "sighting_of_ref": "indicator--1e065eaf-6cfe-4438-8793-29259baee785", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85af4ef2-e3f3-4ea8-86a4-3ff6a1f4db66", "sighting_of_ref": "indicator--d9c6f5ea-7fff-43ab-ba94-0ae4228b86b5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529c1250-65db-4ddb-8153-a53c5e291fb8", "sighting_of_ref": "indicator--d9c6f5ea-7fff-43ab-ba94-0ae4228b86b5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d901a4b0-d9ad-4cbd-8e03-d91c5e01d08f", "sighting_of_ref": "indicator--bc5acbcd-b52c-414e-bcc0-1f6cefa521c3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d91cb1-25a1-43d1-9761-caf470f3e214", "sighting_of_ref": "indicator--7508e4a1-2127-4ae7-846b-b0050bfaa44e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0887be7-6d11-4e9a-8da2-06e0788c5503", "sighting_of_ref": "indicator--afa0fb2c-45a8-4701-a439-f96f1310589f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4dafb1-83a7-494d-9b4c-9d9efe0df6c3", "sighting_of_ref": "indicator--28cbe8ba-fb81-490a-b3ba-36ca3f3581df", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02746d68-a760-43a4-ae82-2cbf41d33df6", "sighting_of_ref": "indicator--d64dc810-440a-441c-b199-2d73b4ee3089", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8281f8-62c1-4f07-9e5f-907f5aa5e95a", "sighting_of_ref": "indicator--b8359732-4dbd-44ba-a8ee-ba0f31272b97", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bca9bcd-9f9a-4caa-a122-a6ea9ce12eaf", "sighting_of_ref": "indicator--b8359732-4dbd-44ba-a8ee-ba0f31272b97", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab65074-9289-4758-9c44-451c0d3c1478", "sighting_of_ref": "indicator--e3bfcbe6-136e-49c4-9af4-549195ca0d43", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5261347-5494-4976-8814-783be607d34b", "sighting_of_ref": "indicator--f3e14125-d3b7-4f5e-8179-cb14fb0ef64f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3751c4-6dc9-4780-be87-8df631bc255f", "sighting_of_ref": "indicator--af17f0fc-65d2-4d4b-9377-ed211e2dc477", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6700d0d2-2477-4c66-84d4-4a4c23c7727f", "sighting_of_ref": "indicator--22831990-8ff8-4cab-a52d-527f9c71aa5d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b241fd1f-c417-4f7e-a081-d9347084ba99", "sighting_of_ref": "indicator--e2e76e81-df54-4ddc-84fe-47ddb6b30320", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050c19ac-f0de-455f-8711-ba41031a5c1a", "sighting_of_ref": "indicator--f13b1441-994c-4794-af4d-04fa77b31b6d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74168e78-7d22-427e-af19-48035e144096", "sighting_of_ref": "indicator--64c3ede4-2a51-4a36-8528-98ce4c4644f0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52676871-aa3a-4651-a2df-e1ebb9332a82", "sighting_of_ref": "indicator--9e53ab37-502f-4917-86df-41ccd5feac12", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc1018c-e5b7-4089-b564-e4b251b7c470", "sighting_of_ref": "indicator--652d1698-e5c4-4d03-8889-68e2f5cc9dcf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec82523-e8bd-4a82-82e1-ce29e16f45fd", "sighting_of_ref": "indicator--2d8396d2-15f2-455a-be57-7b111eeb37b4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d66f4cf-7d8e-4277-a090-da5fdb902419", "sighting_of_ref": "indicator--4adca306-cffe-4fe9-8e6b-0f1ad0baac97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb26d726-18a8-4122-8d71-e8ece68611f0", "sighting_of_ref": "indicator--eefb7dd5-9ccf-4ef9-befc-09ee94b616c1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8468cdc5-13fa-44d6-91c1-181fbe64365d", "sighting_of_ref": "indicator--eefb7dd5-9ccf-4ef9-befc-09ee94b616c1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc31786-51fd-425c-8be8-c46454433967", "sighting_of_ref": "indicator--e5a17d5a-22ad-4294-9efa-c41c33eea0e9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d0ebce-b747-4032-8e26-b6f7833f827c", "sighting_of_ref": "indicator--f217f042-9f41-4883-b969-4b60fabacd1a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e41c650-971b-40ca-b5d5-1aaf784c42d7", "sighting_of_ref": "indicator--4b50055c-3476-434a-9dd0-e0e97105d9ba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d2e35c-0aab-49fb-b674-89f3cd32ca5c", "sighting_of_ref": "indicator--99655738-12d6-42f7-9e23-f0894e06490a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92659771-5096-450e-8732-d63b85891c96", "sighting_of_ref": "indicator--99655738-12d6-42f7-9e23-f0894e06490a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80508dd-3c49-4dd0-8b89-8fb7a400c9db", "sighting_of_ref": "indicator--55150a56-c18f-45cb-8495-f0718733b232", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119a64f2-0ddb-4841-9aec-6ac7bdac51fb", "sighting_of_ref": "indicator--55150a56-c18f-45cb-8495-f0718733b232", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7c848a-2c0e-47e9-9396-b854ef148b33", "sighting_of_ref": "indicator--0d35fcfe-30d6-41de-a15e-6e873f1faaf1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992d3490-4aca-4c18-bfb3-42daa7beb271", "sighting_of_ref": "indicator--46116f44-f71d-4362-a83d-5d576970115e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55283d44-07c2-4930-b071-075ea5960edf", "sighting_of_ref": "indicator--46116f44-f71d-4362-a83d-5d576970115e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48eb389-3a5d-4ac7-9e10-3eca2bf74963", "sighting_of_ref": "indicator--e4f5d58b-3e0b-4f43-8f41-da7fc9960625", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5656a3-bb4b-4f39-8123-96eaeaaf415d", "sighting_of_ref": "indicator--9c611ed3-68cf-4ffa-bcca-e82f524c5653", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6833312c-cd8e-41db-918a-ead3a0edb57b", "sighting_of_ref": "indicator--9c611ed3-68cf-4ffa-bcca-e82f524c5653", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3540ead2-8a93-4056-873f-001e2cb71b6d", "sighting_of_ref": "indicator--f7b31a15-7913-4110-a65a-806087d182cf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905d94af-a62e-4ce2-a305-53f5c289419a", "sighting_of_ref": "indicator--293b6a85-c713-4416-8ec8-93b60dc8b2d7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b45ae2-664e-4897-81b5-081853074f0b", "sighting_of_ref": "indicator--0518fff5-c910-4602-ae66-af35069644a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666033f8-5ea4-4557-992f-a43218570764", "sighting_of_ref": "indicator--b8df21fe-020b-49a9-ba52-ed1a27edfed1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6bbf23-28f2-400b-b8a2-927ff99d9269", "sighting_of_ref": "indicator--23a39df6-0690-4ca2-9365-24ac3dc2d80c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9281b59c-0de0-4273-8286-695dc63536a7", "sighting_of_ref": "indicator--d2e2f650-e270-473f-8996-d48f95855ff7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3aa35f2-d2bf-4c98-bd4d-3a9c53c0179f", "sighting_of_ref": "indicator--fdea9253-210c-409f-a708-837b029a7df5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd60348-9f1e-4cc9-be77-04ae4962067c", "sighting_of_ref": "indicator--418f2427-f5c9-44e7-ab0b-d3c6352706af", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd010b8a-fe32-4ef5-a7e3-a5739b5e7d07", "sighting_of_ref": "indicator--a7137a1c-4a24-436d-8a65-3386dcde710d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6467d675-b9fc-4229-851d-17ef2e31ab17", "sighting_of_ref": "indicator--7282d519-1491-4fe7-af81-97b12a22e05a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b48608-f08b-4c95-bd06-5a0297f8d6e0", "sighting_of_ref": "indicator--94c8bae6-b1a9-4708-92f5-12587782cd83", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37bc8b5-356a-4404-88bd-732a8eb7e899", "sighting_of_ref": "indicator--bbf246e7-6c29-4680-adac-1ac01f75e6f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b01cff-98e8-468b-8653-069502ea0fcf", "sighting_of_ref": "indicator--4791ad19-1a43-41a8-8f1c-c4ced7df01b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3944ff00-f3c3-4584-93d7-10fd8f0d33ae", "sighting_of_ref": "indicator--53b73595-44d9-4b08-8080-e29bd64240f4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94aaf656-0327-465c-9500-ea5866cff30a", "sighting_of_ref": "indicator--53b73595-44d9-4b08-8080-e29bd64240f4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c770263-fd36-4a6f-a2fa-5832cfcf0c32", "sighting_of_ref": "indicator--f8106051-3a0e-4610-a26f-7a125260937b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e02b856-a181-4e3d-888a-3f1997534911", "sighting_of_ref": "indicator--544e5304-9404-41bd-aa4e-963f6c98dedc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4249ba-abca-4645-8f02-f645949315aa", "sighting_of_ref": "indicator--544e5304-9404-41bd-aa4e-963f6c98dedc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5811b9aa-e4f3-486c-8a4e-a7d1ceabfe3d", "sighting_of_ref": "indicator--04b2cfe6-1712-4d1e-8932-7b745e1530a5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9436c34-c69a-41d6-b037-e58921ed5422", "sighting_of_ref": "indicator--09c6db45-1fe9-479c-9b12-ce506b5d6692", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea9270a-1db4-45b1-856c-26bf07af7021", "sighting_of_ref": "indicator--92583c5b-2f2a-4a95-82e3-87d6d5257b34", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c0c5af-0f6c-4911-9566-7d28d63aa6b9", "sighting_of_ref": "indicator--50cfe04c-63ea-4a1b-be64-3ee12aba3f28", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c331e31f-9e1b-45f1-87ca-6b3d41698461", "sighting_of_ref": "indicator--3fac8d59-ee34-44e5-b515-89120342c208", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4981539a-2365-44e5-9d89-e295c7207498", "sighting_of_ref": "indicator--b67da3d7-1a5d-4373-9ceb-de492ca5a8e4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0c44e8-4d9c-4b6e-84e4-e55a2565afd6", "sighting_of_ref": "indicator--a5c33e2e-51ee-46d4-badb-42e39578d167", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a183ae3-6f87-401a-974f-1c0db81a7bdb", "sighting_of_ref": "indicator--89c182a9-e929-4c0c-a1cb-28b935250a19", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9665861-d0c7-4b09-af4f-c9b21b7f1e75", "sighting_of_ref": "indicator--89c182a9-e929-4c0c-a1cb-28b935250a19", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f00d1e4-b55c-4872-bc54-697d7acb0943", "sighting_of_ref": "indicator--9a0f650a-03c6-4fc0-a3d3-108dd9de1fc5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cfb8ab-74c5-491e-922a-ed7d6e4aa7e9", "sighting_of_ref": "indicator--4fb0f33d-c56b-4ba3-b990-53f12e3ea998", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807a9f49-a6b1-40a4-a24f-b223390b517f", "sighting_of_ref": "indicator--bc27a49b-9eb3-46d7-83bf-2f58b60bb0f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f5999b-2231-4cd6-9484-7aa4c9b89043", "sighting_of_ref": "indicator--858f5725-941f-4dc2-a8b6-14c85c4a26a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f0630d-cc63-4355-a7c8-c6012994d831", "sighting_of_ref": "indicator--b997d8d3-1ba6-4cc8-917b-77dc5d094015", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed39f06-d333-428c-98f1-2b93d33e78b3", "sighting_of_ref": "indicator--c4a0b55c-62fe-436d-9075-24c36c85d82f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc70bf44-7e8c-44c2-a9d2-c47aecbcbaf2", "sighting_of_ref": "indicator--1626f300-04fb-41a2-84e7-4dd843450b1b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acac1016-09ec-4e93-b518-dec1007d06ae", "sighting_of_ref": "indicator--65d217df-59e9-4d7b-ba4e-4d6e85383287", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a577545-3f86-4a6f-9e40-ebdfdebe4af2", "sighting_of_ref": "indicator--9391d660-d5dc-4f36-9e26-ababda8d3bba", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab8ac3e-4def-4951-bef1-69844d6f9024", "sighting_of_ref": "indicator--9391d660-d5dc-4f36-9e26-ababda8d3bba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0bd96f-3d08-4833-a4c6-83b69aef2dd1", "sighting_of_ref": "indicator--742bf890-3705-42b9-8956-5983cc1ba7a8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08dbb9a9-f042-4e7f-b93e-de188511d3b4", "sighting_of_ref": "indicator--f890a195-e5fa-42c0-bfb6-9dd6971a8e55", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce2ae03-ea8a-4e1d-96b3-a0c86b3471b6", "sighting_of_ref": "indicator--03e9bdb7-2b9e-47de-9218-1b509c5a378e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f037117a-6148-4725-93ed-5c215e11bb9d", "sighting_of_ref": "indicator--f000d38e-994f-4cea-9e11-a869ba529690", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0dc1ba-92ba-47ae-94e1-6dae2dfc6d73", "sighting_of_ref": "indicator--f000d38e-994f-4cea-9e11-a869ba529690", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c4d0de-5069-4c50-8b6c-68028e53c1fe", "sighting_of_ref": "indicator--fc644585-da09-497c-912f-7f4a65245597", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbd08f0-c93e-4751-a148-a86317136b5c", "sighting_of_ref": "indicator--064f6e2d-cf9e-4bc8-8d0f-86c86c51c495", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e51bb7-3fe6-41f2-92f3-f0755fe25b7a", "sighting_of_ref": "indicator--4bbffe84-ec48-4017-a472-62e6c4896be4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44d89fb-886c-44d3-bdb9-8e7dc389f7e9", "sighting_of_ref": "indicator--13e212fe-460a-4863-a983-2078e3766033", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5452384f-59a8-4829-bb24-a3436e965407", "sighting_of_ref": "indicator--27e76eb9-58bf-4a40-ad14-6a66550bd8ab", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5376ffb7-84c5-4369-991a-8ea733581226", "sighting_of_ref": "indicator--27e76eb9-58bf-4a40-ad14-6a66550bd8ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc64f1b-18e5-4665-9c10-972b99abe6ca", "sighting_of_ref": "indicator--240cc1ea-6d3b-46df-a431-c731ffe163db", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6d991f-3b1e-4877-a069-a5c7d8398096", "sighting_of_ref": "indicator--49044f10-d212-4eaf-8170-0768335be5c1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46092df0-6706-4b7b-838e-e7908cd8dc14", "sighting_of_ref": "indicator--d927e547-7100-41e7-ad5f-eeccafe73124", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c803b669-c772-459a-bb87-4e45c5c15b8d", "sighting_of_ref": "indicator--07a162c6-e73c-4f73-9ee3-49f83b6a9b80", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6351d330-089f-4ecd-adc9-58655ce8e2ce", "sighting_of_ref": "indicator--26de8401-6334-41c9-8a60-cdde63f93201", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e681c675-ebce-46f0-9a07-13ff3bc9e41a", "sighting_of_ref": "indicator--f2b2c1e8-cfd1-42cc-8995-076a3c7694a5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32d422d-17ec-45e6-b9f6-c2c46751a5c3", "sighting_of_ref": "indicator--7dd75060-cb66-47f0-9192-fb305e5d3557", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16e54cd-f60f-4a9f-a1bb-2214ef3ce3a9", "sighting_of_ref": "indicator--6922cdba-ba96-40a6-a89e-bf94975d1afe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62061f2c-1e84-4184-80e3-5567b5e72d41", "sighting_of_ref": "indicator--2a23d3f1-e5d4-451a-ba2e-a097b2b12e43", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e55b036-3784-4524-aba4-689392861762", "sighting_of_ref": "indicator--a89822c7-e0cc-4181-9dee-5197ebf1027f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d6caad-5296-402c-b1e6-52505404e747", "sighting_of_ref": "indicator--ba3e9a69-df98-4e5e-8131-df9e87f923f7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a76c716-ff38-4d8d-a4ee-70c50875eab4", "sighting_of_ref": "indicator--2bd4162a-98ee-4858-b3d6-f915b933aeac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5e24c3-465e-49bd-bf87-210b46ad1324", "sighting_of_ref": "indicator--0724ac52-b260-4aa6-93fd-a644045a17b2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee26f70-1401-49e5-a45e-b8aa382c5fe9", "sighting_of_ref": "indicator--2d62ea4d-c6a1-4600-abea-54599caeafa3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5d15f7-28ec-4c0c-90da-6a0ff149450b", "sighting_of_ref": "indicator--b2868856-5f19-4d19-84f8-624d51472ebc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d8bc9f-b0dd-4c69-932f-e07a400b0322", "sighting_of_ref": "indicator--b95512aa-6413-445b-bf7b-548e9c8f55a0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a46af0-1c1f-402f-9f7b-52dcd119585a", "sighting_of_ref": "indicator--b95512aa-6413-445b-bf7b-548e9c8f55a0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718f8913-6d3c-47ea-8ea6-efeb4b4324ad", "sighting_of_ref": "indicator--d41c18b7-6c51-4311-ba13-e4a2c5698768", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9d3399-e14d-450e-8229-85f936609c98", "sighting_of_ref": "indicator--d41c18b7-6c51-4311-ba13-e4a2c5698768", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ea3743-b601-4e96-98c9-0ae954a9771e", "sighting_of_ref": "indicator--205cfb9f-1913-40b4-96f9-3ee05eff2ca0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b33439-6202-4a2a-ba60-ec7e07285d3b", "sighting_of_ref": "indicator--205cfb9f-1913-40b4-96f9-3ee05eff2ca0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f1c3d9-a50e-418d-bb67-b6ab77056ad8", "sighting_of_ref": "indicator--2c46eb26-8948-49f2-a14c-ba53c65b85bd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ac5ec5-f343-4818-a012-71bbd477b8a4", "sighting_of_ref": "indicator--2c46eb26-8948-49f2-a14c-ba53c65b85bd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad603c7-5b9f-4121-8081-dea832def726", "sighting_of_ref": "indicator--8612b5fa-a989-42ba-803d-6dfc55efa6b7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c457f71-d1d4-4269-b391-8edcd2db8bd1", "sighting_of_ref": "indicator--8612b5fa-a989-42ba-803d-6dfc55efa6b7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3383c6aa-5945-40e5-a9df-5a997dcfedc6", "sighting_of_ref": "indicator--52fe4b0d-fe00-42e7-a7f9-1b06ec5a8c52", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4827d241-5eff-40b0-b19e-17ccdf5af1e4", "sighting_of_ref": "indicator--3cb2b07d-869d-46ee-97ee-3b298b382aeb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980f5ef6-3e87-4e81-abbb-d966685f7692", "sighting_of_ref": "indicator--204931c6-25c6-4746-bb2d-ad46b7076eab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe064b6-04c6-43d9-b434-060960075e01", "sighting_of_ref": "indicator--204bda01-f0fe-439e-8d65-393d8e3aada9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266a303a-2534-4e69-951f-3f0cf74fba0c", "sighting_of_ref": "indicator--ed1277b6-dee7-4fe2-9a39-b485ac549f0b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f63b13-79a2-46fd-a9a2-8d1b4198d765", "sighting_of_ref": "indicator--f64d99bf-a43f-4d54-922a-709481721e29", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4215675-e236-40f1-8dca-8b9d58714692", "sighting_of_ref": "indicator--c544d707-757e-4823-b16e-3751c30faa9f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06790491-7a9f-4ea7-8bcf-ad529829f89b", "sighting_of_ref": "indicator--c9fa67dc-1fe1-4f99-beec-08389b73f876", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39e4101-1557-4e23-a4c2-bf460963c39d", "sighting_of_ref": "indicator--0eaf9404-9bd7-4438-9e65-88c46307d364", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0267525f-76f1-4cb5-864e-d021b7bf949a", "sighting_of_ref": "indicator--375c5922-8226-42a9-bf1a-bd50c8f1458e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b18aa8-ed1d-450d-8173-c305fd327a49", "sighting_of_ref": "indicator--899fe0e3-5d42-4eb3-996a-d172044b54bb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0fe1c9-be79-4887-9e4f-b9b30971b183", "sighting_of_ref": "indicator--1da9a40c-54a0-4387-a2f3-dd7a0fa91e34", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6bf86e-1ed3-4f0a-9292-26bd4909098c", "sighting_of_ref": "indicator--ed79d66d-7e43-4e59-bbcf-5e584f87d37f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3033e21-30c4-4a56-a4ec-9ef61338e72b", "sighting_of_ref": "indicator--0f2f8d09-25dc-4d05-9d47-cb12410e6d70", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42690698-bc9f-49ca-a6ed-27b2935da600", "sighting_of_ref": "indicator--7e693a99-9617-4d6e-8924-1ef313837e14", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d2e72f-a5ab-436f-ac74-0ab405c79709", "sighting_of_ref": "indicator--adb9901f-6172-4539-a58e-19f0b9b62a0e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c911a0d3-373e-4ca7-9237-f895098985c2", "sighting_of_ref": "indicator--503f43e5-8c0b-4546-9a30-0c4e7be04b64", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74429bfb-f2fc-469c-a374-805fadb9830c", "sighting_of_ref": "indicator--3db24c8b-06c4-46ad-a2a2-8096a4bfe7cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897df3d8-7151-4998-af10-8a88419df073", "sighting_of_ref": "indicator--4ef521a9-b9d0-46ee-b17e-26a3aa399577", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d734d23-99fd-4878-bf7b-3984ece3752a", "sighting_of_ref": "indicator--78ca3493-f538-434c-8b6e-93fd3e9d9332", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece42aab-cbea-49b2-8633-b0e3a4f6cf89", "sighting_of_ref": "indicator--6c0a2659-183e-4381-9c1d-e5d6cf4060ec", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97bf367-3b24-4247-aeae-94080c87ffe3", "sighting_of_ref": "indicator--b67a1c19-39ca-446f-bcff-e95c01648a1f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cc960d-725f-45e7-a3be-0c61d160fd7c", "sighting_of_ref": "indicator--38e4e611-df83-4166-b258-9754972c0a93", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c425ecc-4aa7-4a72-84ef-d708f9a0170b", "sighting_of_ref": "indicator--fba07681-f864-4f5d-9fe8-b21ae6fd6f08", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64096c00-de56-4365-9362-c74ef93b341c", "sighting_of_ref": "indicator--96ae0525-a1e1-4628-bd3a-d31abb6d86a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6963461a-6c7f-4eed-ab41-d889a1fc1f09", "sighting_of_ref": "indicator--46f33a84-e703-46cc-88d1-12b113f1861a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b808eb-31d8-4f2f-b227-dc811d26f80b", "sighting_of_ref": "indicator--46f33a84-e703-46cc-88d1-12b113f1861a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744c58e6-fdf9-4c6d-80f2-491ace5d267f", "sighting_of_ref": "indicator--3b22ccc5-0d17-49f3-8ba9-bd5c20ff9761", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2399b5-28e3-4519-87c5-25cca9b5aa4f", "sighting_of_ref": "indicator--0e2fbae6-1337-48be-85f0-6f3e5986939a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c158b5-20de-4c55-aa9c-0697898f386b", "sighting_of_ref": "indicator--589e41f1-8877-447a-8abe-ebbcb299a196", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2b690f-15a3-408c-a2cd-1e9db4a95785", "sighting_of_ref": "indicator--06b36692-4927-4153-a51b-015e36f7e6f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ea31c5-9ee3-4b54-9958-ada730acf33e", "sighting_of_ref": "indicator--7aab839d-7f81-40f7-9033-e9e1143022ae", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8852ec8a-07e6-4cbb-9ec5-6a66a20f14b2", "sighting_of_ref": "indicator--f8811a07-5d1a-4c4f-b64a-a67ec06208b4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917f79bd-b010-4b0b-8f9f-d5257caea071", "sighting_of_ref": "indicator--f097e691-e98b-403f-9848-b45c396acb7e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8691e01-9a1a-4371-9aac-870b6df7a525", "sighting_of_ref": "indicator--f097e691-e98b-403f-9848-b45c396acb7e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702dfbff-83d2-4704-b881-5f6ddb0f1996", "sighting_of_ref": "indicator--f6b3b3b1-c49e-4892-9b38-97a322b794e7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1bb62e-ff55-4971-9df6-d8fa61987e15", "sighting_of_ref": "indicator--41d01ef9-2da4-41b2-ad8c-aed0b41b406b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f40422-f794-44d2-9927-94753facd443", "sighting_of_ref": "indicator--7f35b961-0325-4702-ad8b-7b8f3dc6c313", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991dbd44-5648-4c69-8ed1-d73441a6fd08", "sighting_of_ref": "indicator--7f35b961-0325-4702-ad8b-7b8f3dc6c313", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0563cd5f-99f5-40d5-9e93-a9f548ee6263", "sighting_of_ref": "indicator--f4c272b8-6a12-429a-9328-04fe2ce94ec7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bf8464-ad4f-4a3c-b5e0-6cb8622a9138", "sighting_of_ref": "indicator--07948ebc-0651-4862-a41e-26a6e9d9c929", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35375961-e34b-449e-82cb-07944cf39267", "sighting_of_ref": "indicator--0f9199d6-20f5-4eb5-ab60-09c9dd84edad", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee376d2b-588c-4025-aacc-2266b213a40a", "sighting_of_ref": "indicator--2b582b3e-e021-4c59-8104-e344a9cc5db3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84ec8c3-8dd6-4536-9a76-e68138bb3cf3", "sighting_of_ref": "indicator--9bd81044-9f1d-437a-a2ef-0eb057855a6e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4f6fbb-dce1-45bb-b833-4dfb23c9f1da", "sighting_of_ref": "indicator--708ce087-5d16-4a49-bc18-f26b2d010669", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3edafd-867f-4805-841b-8d112401cd0b", "sighting_of_ref": "indicator--f3ff5e0b-534d-498f-ad61-87da624f4d1b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cc4c57-b227-4686-8314-8ac20f2c8e4d", "sighting_of_ref": "indicator--800191ad-2ac8-46ff-88e4-cb5323b83edb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7a4eb0-9ebf-465f-b6c0-c4a6cebe8edb", "sighting_of_ref": "indicator--13f9bdc2-a563-4520-9dbc-f7580c9db399", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155a230b-53ff-4e1d-a34c-c9065edf2a18", "sighting_of_ref": "indicator--dd4d3bb4-459d-4ac5-aff6-df17fb1ba9a2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fb9cba-fef3-44d0-9f4d-0141a90d89d4", "sighting_of_ref": "indicator--3f3fa5b8-07b8-499e-93ad-4104d1b50d39", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875a5b2c-24b1-44c7-86e8-5fd11baadaee", "sighting_of_ref": "indicator--d16915d3-acb6-4d63-aa1d-aab94cf17ad8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b051c430-e6e1-413e-82e6-3a8e76aeb127", "sighting_of_ref": "indicator--9e1c8ef1-5844-42eb-a18b-086ecfbca8f1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced29ba9-233d-49ce-b614-88ad077a6e26", "sighting_of_ref": "indicator--e0576f28-1f74-42b2-913e-5e74204b6998", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0142221f-68a2-42a0-8aa1-6f37d34f082b", "sighting_of_ref": "indicator--5d8571c7-bec0-404e-aff1-0807a07be817", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b53d12-8b6a-4483-9c52-f6617021b981", "sighting_of_ref": "indicator--889b5329-79aa-4260-813e-4d882f3bd414", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e370e3ec-f38c-415c-aace-b88f07629c0c", "sighting_of_ref": "indicator--1d6a1f36-29d7-4676-83eb-48cee36ddf83", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd8094d-3229-457f-8c65-510fe9383e8f", "sighting_of_ref": "indicator--f63d0e28-e749-4ab0-b6b1-a9a40c081269", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c8d4b2-b45f-449a-8e50-65b994d9bc9d", "sighting_of_ref": "indicator--042c0f69-2ca4-4a2d-8e32-25a1e23c204e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d059ff-603d-452e-a394-ce6d5edef48d", "sighting_of_ref": "indicator--90f569c0-a2db-4954-a035-322d8a8aa4f2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3694e1d0-1429-48ca-b2d8-834447f62e59", "sighting_of_ref": "indicator--1e5f7db9-9d55-4859-be3f-58c23463220d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e83e66f-b7cb-4e6e-b192-e13d15ed01c5", "sighting_of_ref": "indicator--006ae895-d5b5-4ce0-b5eb-8268fb7dbeb7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb10de0c-a91c-4146-84e9-829167c4274b", "sighting_of_ref": "indicator--46662703-9ec9-4017-85e1-7cddc2f8dd53", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd13ab10-ebd9-404d-9eee-ff326d361b85", "sighting_of_ref": "indicator--79676fd2-f800-44a4-90bc-546bdd3f9f17", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5201b66e-5026-4068-b321-1751087db0a0", "sighting_of_ref": "indicator--12d01d67-e98c-4e76-a9cb-c5e53507d243", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f8d74a-d1fc-4991-99b9-fae8f08da9e9", "sighting_of_ref": "indicator--d5c83e95-62e1-49a1-998e-7423742858d3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08060a26-76a9-48bf-ba2e-4ff90fd9af1a", "sighting_of_ref": "indicator--3bdb0553-1747-4842-83d6-2068639ee082", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fd157a-7ef5-4cae-88a2-dfd1560459d0", "sighting_of_ref": "indicator--0fc8a6f4-12f5-4b50-a434-9df1d8a62415", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b4157c-b26e-4732-baad-7547288fd9cc", "sighting_of_ref": "indicator--16e12400-7ec1-4ce0-a360-293fadf93ae3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91eeeb0-c424-4b0c-bb5f-f60c0dee7d66", "sighting_of_ref": "indicator--a77a70c6-64bf-4482-a638-c73e1f09b82b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0f3dbd-fd15-49a5-9145-498652439072", "sighting_of_ref": "indicator--b8a578fb-b5c9-41ce-97f7-1cb4dcd94d97", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dedf503-f666-408c-8963-cd376a0d0a67", "sighting_of_ref": "indicator--b8a578fb-b5c9-41ce-97f7-1cb4dcd94d97", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898cfe43-77a5-4146-ac48-eb19e7ca7b06", "sighting_of_ref": "indicator--b2810f22-1381-454a-a4a2-8b49a9ac0c4c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab384991-5a8d-42ce-9ebd-9e30f1402444", "sighting_of_ref": "indicator--1c77f430-5cb3-458e-97c8-3465cc17694b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a1eff9-2467-4f52-b367-6eb8bc11f5a8", "sighting_of_ref": "indicator--58139309-1b0c-45b0-918e-16b39bbba904", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094913f5-940f-4787-984c-149a7b460d7f", "sighting_of_ref": "indicator--0b65470b-e077-4a2e-9a99-780b7e0ffc4b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cd423c-3496-4cdf-a021-86e4e011311a", "sighting_of_ref": "indicator--95533bac-30e0-4a12-b761-e29c2c9b72b5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e284a6cb-d58d-4dee-af05-c466748d9326", "sighting_of_ref": "indicator--4a6b4834-a962-472a-9f00-1ba30d5769b1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ada4186-3e50-494c-b100-7b7e6005b021", "sighting_of_ref": "indicator--c660eb4d-8feb-400a-96c8-1e8d549cf9e3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c61d362-59fd-4e7a-b96a-b2662043d8c0", "sighting_of_ref": "indicator--163a5ace-3ff2-4a2e-aad8-abf1268a7119", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05fee81e-1744-4819-938b-e42262fb4eeb", "sighting_of_ref": "indicator--ffe2d93a-bebe-4ff6-9cd3-664fe4c36355", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982bbed8-2284-443d-9739-dcc7f74b6e38", "sighting_of_ref": "indicator--afc5277c-c424-42b4-8c0d-3f03be3fb00b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68eda54a-6e01-4ff3-955f-206411d4c21f", "sighting_of_ref": "indicator--2ecba9e0-036f-4c82-8a24-5431c0fdcfda", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73650a20-01b1-4cac-9efd-d68e6c15489b", "sighting_of_ref": "indicator--88af8739-1eda-4121-9d18-e4426cf2405f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a0f566-f107-4328-a6a1-be3e46f79c60", "sighting_of_ref": "indicator--e99cc541-d122-40f7-aad8-87ba6c67ffb0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6106c32-37fc-45ed-94fd-ed968f6747e3", "sighting_of_ref": "indicator--c5363880-a224-4d6a-895e-5a0de694ad8b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce665fc-4d8d-48ba-aa72-4c499e7c38b4", "sighting_of_ref": "indicator--33d32076-64a2-4403-9bf9-15fc3c8f35f1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5418c6c1-9bb4-48d2-a8db-9ba859343351", "sighting_of_ref": "indicator--70456c31-937a-494a-88ad-0062c6f717c7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ebcbef-37b7-4f19-b683-ea77ae092e56", "sighting_of_ref": "indicator--64d8d5f7-34a1-4f26-8f3b-f39385151b3b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706775d9-5afe-49e6-a0d7-ca7c2046a44b", "sighting_of_ref": "indicator--37ed0952-8678-4ba4-ba4c-5ea531dff21e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a6e7ea-3403-4262-9f75-562c845e4c70", "sighting_of_ref": "indicator--e0a160e0-5897-45b0-8e72-271ae4660ab0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508eca9f-63d7-44f3-98ec-7549fee76740", "sighting_of_ref": "indicator--8f580faf-4ab5-4e5b-a23a-33c5f01d12b2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b011099-bedd-4ee2-8b53-cfb336d57b2a", "sighting_of_ref": "indicator--fead75c7-77a3-4469-99a5-ff8d7e37f19c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284cde2b-3021-4e3d-ad63-d86701af1ca3", "sighting_of_ref": "indicator--af39f5ee-278b-4f9c-909f-e1e40a5d2a54", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4d2ee5-df80-4649-b48b-51172666c1ec", "sighting_of_ref": "indicator--bd8530fa-78b9-4844-a0cd-c0af996efe78", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cf6a89-da42-4147-9371-387c4f19fc41", "sighting_of_ref": "indicator--c4df160f-c0d3-4949-9d99-8cd0d4952c35", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa29b082-a4f6-497c-9dbb-85b03cd2bf4d", "sighting_of_ref": "indicator--1c8d52e9-8383-4caa-b9b6-3ea74bd65801", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3783185-18ee-4f88-8252-5a4a0bed5d13", "sighting_of_ref": "indicator--eafbf1a3-e41d-4691-90ca-81bf2cfaf700", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3abadaa-5cab-4110-91b7-12779c7075c5", "sighting_of_ref": "indicator--27129ea3-758d-4571-acd9-dcd73ae0b82f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9115975-5f4a-4bcb-8bc7-c9e05d61c266", "sighting_of_ref": "indicator--02cd380c-7950-4c39-a6fc-3cdf0fc3f34e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4977288-585b-45e7-bbda-c8fb7cb4d2b1", "sighting_of_ref": "indicator--4eed8660-2ebe-4ec3-8599-c2fface4cd73", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce7a821-d340-4bd4-8b57-d9eed80076ac", "sighting_of_ref": "indicator--17d4a522-b5d2-403c-8dc5-70ff14e86a02", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c7b148-f568-4ea1-905a-95ec9bd0439c", "sighting_of_ref": "indicator--be73ad89-dc9b-4647-b4e1-8614f367d378", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba154368-37a0-43d4-a520-cb1c658b66c9", "sighting_of_ref": "indicator--0529e50a-8380-46ea-a291-ac9e43551bac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26c46e3-f74a-423f-a294-3811313e40fe", "sighting_of_ref": "indicator--95c763da-2a0d-466d-b710-a9cfeda0de36", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddc6255-0ffa-43ea-917f-5fc262a03479", "sighting_of_ref": "indicator--8297beed-03c9-425a-bb28-2117fd5d719d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b02725-238f-4f09-9e60-08251f14c2a1", "sighting_of_ref": "indicator--fbd66106-c098-4b92-85b8-acc4ec2eef53", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8cd6e0-8f98-4702-a15b-ffd6508db559", "sighting_of_ref": "indicator--57e21ebe-c8aa-4183-858a-56f2ac4c82f6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7582e94-9a36-4bb0-846b-123147826de4", "sighting_of_ref": "indicator--4fb0ecd8-9c9d-41ca-ac1f-7f55543af170", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4eafb0b-44ff-4de3-b862-dcf26b6166dc", "sighting_of_ref": "indicator--8a73796d-f1e1-4e83-af0b-7e1cc4b3447f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f7232e-56c7-4295-b244-1e467dbb1065", "sighting_of_ref": "indicator--eac6fcca-f661-4df8-b510-713ba88e38b5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897e6c72-2577-4e67-bd52-dfa641c088e9", "sighting_of_ref": "indicator--80279ee1-3faa-49ac-8380-e2c61b7a6e73", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659705ff-b85d-4c3a-a277-897a728fac10", "sighting_of_ref": "indicator--2a4d1569-68e3-45d2-bd2f-e2dbdbb6408d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b70f65-a377-4447-85f3-1f4c949ee40a", "sighting_of_ref": "indicator--5f1f1c7c-95d8-46b2-a1fd-080ce4a11ad7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4969ad-661b-4885-b447-efe1e2cdedea", "sighting_of_ref": "indicator--d8d665da-7def-4f81-845d-93d703682f2b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5b5d6f-89fe-43a3-b39f-842595c21909", "sighting_of_ref": "indicator--b447edd2-7d19-43a8-adb9-89ebecaf85c5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8b543b-e2ad-49f1-b7ee-001f70bcc672", "sighting_of_ref": "indicator--4c9b7bf1-2942-4fc1-9153-21f8c8544e6d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b3dae0-0867-40ca-9259-95a361b3c24d", "sighting_of_ref": "indicator--04f7b9a9-8c68-4aed-a216-ee468d193fe8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0112ff29-062d-4a8d-94fc-088aeaad0133", "sighting_of_ref": "indicator--de17f412-377c-4a2a-a092-f2d1c990e9df", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdc4be4-6bc3-430d-b67a-b1a19f459178", "sighting_of_ref": "indicator--314d93f6-7344-4694-83be-c96a8b94095c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6fc2b4-9cc0-4e5d-9e2c-8b800f879456", "sighting_of_ref": "indicator--c7a71e65-d02f-4789-bd05-68e14d237bfe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991958c2-b60c-40c8-bfe9-aac3253077d1", "sighting_of_ref": "indicator--535e9a83-2352-422d-b184-d1067458bd3d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb4d89f-656d-4ce4-b354-b2a6684e4e16", "sighting_of_ref": "indicator--535e9a83-2352-422d-b184-d1067458bd3d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e703ad0-de08-4508-80aa-3abb2b7b3767", "sighting_of_ref": "indicator--50f672e3-bef9-4e7e-9a03-4c06cb062a42", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae60a18-85f5-40f8-a223-20a8c81c00be", "sighting_of_ref": "indicator--3d595662-0856-4fd0-8949-53cc547f6550", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d192e01b-4a56-40f5-acf9-76c3b9784373", "sighting_of_ref": "indicator--e7145621-782e-4890-8f8f-4869625ef210", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff3eacc-0a99-4223-8061-cf52ffc14277", "sighting_of_ref": "indicator--9e7eb0ab-a944-4761-9176-e4603af29337", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa1ae3c-473a-4743-a1f0-362e807843cc", "sighting_of_ref": "indicator--34bb3518-d830-409c-973a-91e0aac89659", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dc4f5e-ff52-49ae-81f4-a8c5ea1c14c8", "sighting_of_ref": "indicator--34bb3518-d830-409c-973a-91e0aac89659", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3514fad5-0f17-4007-a7de-b51447121882", "sighting_of_ref": "indicator--6400af15-a44c-484b-ab74-8599c26998c4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a65b428-8a40-4d53-99a5-f83cbe54e48d", "sighting_of_ref": "indicator--e298abdf-5105-4ed2-807b-0eacadf8bfc9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c63ff8-d9a5-47cf-bd5e-49c59a00ca45", "sighting_of_ref": "indicator--5ff0a8fe-9ab9-4d30-8ed3-df07178a4ea6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c497110e-dea0-4409-9415-6ca11b91fea2", "sighting_of_ref": "indicator--f9851b49-ee48-4785-ac1a-6e1530353a53", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d49253-9a38-4080-993c-ff4c11bb3549", "sighting_of_ref": "indicator--3d00e2ec-d5dc-4ecb-ba39-afbec3435f0a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72466dc5-2318-4d83-8b9e-e415330261d5", "sighting_of_ref": "indicator--8297dad7-6678-4db6-807e-aa9b8542e70e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672feb13-9a4d-4f74-babf-ea097637c6a8", "sighting_of_ref": "indicator--8a7e5000-bfd5-4e99-bbba-9cc33808f6c3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa38886-eb9f-42f6-8f2e-15e14dd99cfa", "sighting_of_ref": "indicator--33504a95-3816-45a9-ba36-9c78992c07f5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcdd4512-8222-4b3f-b6b1-81d872d1cd62", "sighting_of_ref": "indicator--cf244fd9-6859-46fd-a1a3-46235035166d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca24eadf-3049-4366-a145-2b91e1becae6", "sighting_of_ref": "indicator--63544f88-abc8-4b21-9870-86a2e7da91da", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3521dcd8-10d5-4bf8-8d0e-cd7fc7dbc200", "sighting_of_ref": "indicator--028775e1-9b64-459d-83ee-1462f9baa48b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524dc3bd-832d-408d-b26f-97d4f5cdc2c7", "sighting_of_ref": "indicator--028775e1-9b64-459d-83ee-1462f9baa48b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e617923e-b47f-4e5a-ac65-009b7718e5ec", "sighting_of_ref": "indicator--d490ec9a-faf6-4c08-a489-6dfb0c94cb3c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a9d181-c994-48a8-a958-f7bc22c15686", "sighting_of_ref": "indicator--d490ec9a-faf6-4c08-a489-6dfb0c94cb3c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd527c5-ad8a-4acd-921f-01091c9f69b9", "sighting_of_ref": "indicator--4e59300d-811a-4581-8f6b-5afe4592010b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4f8c86-dc8a-490e-b63c-4a4dee57e193", "sighting_of_ref": "indicator--4e59300d-811a-4581-8f6b-5afe4592010b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51c2383-4b63-41b9-9045-4fe2b7897a98", "sighting_of_ref": "indicator--b18a07c6-96ec-4d61-83c9-4e04ecf5e0c4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9594b7-6d35-4d79-a5a4-a5925aab99cf", "sighting_of_ref": "indicator--b18a07c6-96ec-4d61-83c9-4e04ecf5e0c4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7738e751-9f3e-43e8-90e2-073b9681e996", "sighting_of_ref": "indicator--d3be91eb-eded-4b3c-8d09-8a408f70edf1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a13b2a-2c3e-412b-9899-34787f685316", "sighting_of_ref": "indicator--d3be91eb-eded-4b3c-8d09-8a408f70edf1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fae7b15-66d1-419a-833c-1de69ed126d8", "sighting_of_ref": "indicator--fd5f0b4a-3159-46ca-8eaf-ee2e2cfdfb77", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c9ba05-c301-4cfb-995c-636db2beea36", "sighting_of_ref": "indicator--b1f1d079-fdce-4982-bb05-6c3df32cbbdd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308364c2-73a8-4d53-9a40-4df8e0abf804", "sighting_of_ref": "indicator--dd3570be-0f09-4142-aa8f-cda72dd483af", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efa3b97-38f3-42a9-b662-e1278e47d468", "sighting_of_ref": "indicator--d78f627b-6497-4c21-80ce-1387515e1672", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de7307f-3d17-4ac8-a5f0-add5146a0290", "sighting_of_ref": "indicator--b5c1a174-44f4-4e52-b634-f4af26e5532c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d787bdb-5547-4e7b-b9dc-50b0b676b44d", "sighting_of_ref": "indicator--d7138001-213a-45db-ab96-b624c573555d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7501d20b-10c0-4641-8374-864560593015", "sighting_of_ref": "indicator--257c3ed2-c32b-4420-a609-16a68c417106", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64cc6ea-5b1c-44c4-946a-93b90155bb48", "sighting_of_ref": "indicator--4b4c8c0d-b1ef-47cd-949d-de741d356495", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f79862-fc00-4e48-9cad-f8a298fdc2b4", "sighting_of_ref": "indicator--51edae83-36eb-41cf-bd7a-eabada16d836", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60537357-fad0-47a2-a75c-c6f729fa2576", "sighting_of_ref": "indicator--cd010572-a799-4e87-ae1d-0a0f7855e811", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3aa9e48-56f8-4c4f-af65-dd78354fff9d", "sighting_of_ref": "indicator--3d39ab7a-5577-4801-ac60-5ae2477dcfe0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9487ffa4-04fd-4fb2-9084-f6b2b118ff07", "sighting_of_ref": "indicator--2076a0db-40b9-4d42-aa2f-5129243501c5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548ea2f6-2728-4a8c-920f-e9fe6ac32e67", "sighting_of_ref": "indicator--77e34127-d450-4e4a-98f2-93788ded0d78", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea09896b-6dfe-416b-b5f5-c9d56d20958d", "sighting_of_ref": "indicator--fa3f82df-e55c-4b94-8bf0-1a7187f2c857", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a70e103-e562-4891-8ba3-05c7c282c87f", "sighting_of_ref": "indicator--fa3f82df-e55c-4b94-8bf0-1a7187f2c857", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fbdc54-a943-40c6-95f7-6b3d17e442eb", "sighting_of_ref": "indicator--f71baa5b-e562-45c1-b0e7-28d043e37022", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab429fe9-e23f-4509-9954-a1b18f6bab60", "sighting_of_ref": "indicator--1a5718e7-1225-4111-8830-d8d939721f00", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f12f1e-72e6-42cd-9a52-397d65f31600", "sighting_of_ref": "indicator--6cb98b5c-95c0-4aee-b907-f37888c08565", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf53194d-0200-46b0-9209-4a68a6ec494b", "sighting_of_ref": "indicator--148bb3df-b918-48c1-9ac8-6422b2914caf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f664f800-9963-49c3-81b3-5aa23092830f", "sighting_of_ref": "indicator--d88e315c-67cd-417c-85eb-00e185933f1f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdf2ab5-547b-4623-bc40-fead33fc832f", "sighting_of_ref": "indicator--16c695a8-f7c0-4515-b3b4-cf52f8f0628a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a8cae6-feb1-4205-9f6d-c377c8f2f4fe", "sighting_of_ref": "indicator--dab9b1b9-8e55-4724-ae73-19137097bdd2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0034b8e-7b35-4b88-92fb-8045e648ad2d", "sighting_of_ref": "indicator--0ada0ba3-2b58-471b-8ea3-1cdf263972ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be198d1-ba0b-4fa4-bff4-80e035b8704c", "sighting_of_ref": "indicator--5ad2ef03-6764-4e15-8894-841c6f896a06", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35dc0e62-e4d0-4042-8ded-42b735caa037", "sighting_of_ref": "indicator--abb7e308-3e9f-4b9b-995d-5751927c53f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a03fe35-a4ec-4ea7-8d06-859e65defebc", "sighting_of_ref": "indicator--cbbc2fe2-c774-4752-8400-7ca3e0830804", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58e35b0-9cec-4b4a-a09a-f9b052d70cf0", "sighting_of_ref": "indicator--6ee99cd6-a3b9-44c2-93dd-e401fc396a7c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a8eeef-73a4-4f0a-839a-917026d48df6", "sighting_of_ref": "indicator--268cdf7f-eeac-4244-bc49-26b440a0f77f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcb3014-3c8a-4a74-af2a-576685f56153", "sighting_of_ref": "indicator--70701b4f-5257-4559-ba34-ad1ba3b1c683", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594e9ba3-f3e5-405f-8664-b14367e0d4cb", "sighting_of_ref": "indicator--527fc823-c359-4310-95a8-c1bbd82db82c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d254e6f1-7652-4b49-8b30-1c4c5ea6cba1", "sighting_of_ref": "indicator--1a3796f1-0a1c-497b-b5d0-4d8bbceb1ba2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31a629d-2ad7-4d0e-8c92-a9b18febae7c", "sighting_of_ref": "indicator--205966c1-ec9e-40c8-bf1c-29ecdd1b48e8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73a7085-5c3b-47f7-8f8b-53e45a6a73f5", "sighting_of_ref": "indicator--a61ebf2e-adf2-4db2-8716-da60c27ba960", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a7bf84-a18e-48c8-acb8-638875ea2549", "sighting_of_ref": "indicator--bac24009-cbc5-446f-a524-3c740d068751", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffc673c-d4c4-4577-a6a0-1e8a159e4452", "sighting_of_ref": "indicator--bb32d787-df32-4cf5-9bcc-aee9942dbf76", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b54c443-192b-4bd0-bba5-4f532e82047a", "sighting_of_ref": "indicator--1492ccd2-8575-4bc9-aba0-6790b24f4a6b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83be11a6-81a4-4173-8b59-d0bc2ece196d", "sighting_of_ref": "indicator--fc2c663c-7d25-4609-a25f-d7f4c80b6d6d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2928372f-de7a-4773-9ff4-be93a4be03d6", "sighting_of_ref": "indicator--e1e471dd-3eaa-4202-8447-f2ef834a4fe8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1047b33-e7c0-4e48-b94d-b4fdaad7b452", "sighting_of_ref": "indicator--24c75422-6718-4aec-bf90-be53c86054ad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a3d602-eb95-466a-bac2-3e69ef87372d", "sighting_of_ref": "indicator--1ad05448-9993-4dd6-b507-6651abf606b8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48a5a8f-73b4-469e-bfa4-5af7d932e1bb", "sighting_of_ref": "indicator--06ae518a-7c56-4853-bfef-aaeed6b38f76", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36e158d-ee31-4aa3-be8c-59f8134c124c", "sighting_of_ref": "indicator--76c12e20-1e94-45e2-b810-7cca1a88e10b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa8793a-e3d7-4661-9df8-3cfda224ac6c", "sighting_of_ref": "indicator--7a110fb2-e9d9-416a-b72a-968acca031ba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db1350b-ffb5-42c6-9105-5985f726c1b0", "sighting_of_ref": "indicator--1f07ff3c-3976-4127-994a-4f7a3892e68d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f10e1b-98c0-4f8b-abe9-9318f85f13be", "sighting_of_ref": "indicator--e7cce18a-80a4-4da3-8307-578970c433b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe5c470-a61a-4e3b-b330-f2a88e65f515", "sighting_of_ref": "indicator--e5b23ad1-60e4-41c3-8e7c-219da9d5a27a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d338b1-04a0-4157-a88a-a27da0255abc", "sighting_of_ref": "indicator--e5b23ad1-60e4-41c3-8e7c-219da9d5a27a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2a3758-52c6-4788-b351-c8361c3876c3", "sighting_of_ref": "indicator--b2ffbab6-23c4-4454-a4c6-6eccf429a916", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bac34b-dbb0-4065-bbe2-2b4213065c32", "sighting_of_ref": "indicator--7e62eea9-0d39-4189-948d-22ff44ad3ee7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a47330-f72c-4517-8421-7d0f4d53c2e3", "sighting_of_ref": "indicator--27bbfe83-91cb-4ded-98af-cfe33da1b0b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df4ec76-2eea-48dd-8cc4-a2a6d126d5ba", "sighting_of_ref": "indicator--dd7ebdd2-6741-44db-9c1d-e2adfcd218fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb63dea-cda4-45fb-8052-a914bf279d86", "sighting_of_ref": "indicator--35dd6414-be60-48dd-a840-56781d9950fd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0d4758-ceb8-480a-b68d-4c7503e5b6f7", "sighting_of_ref": "indicator--c331b648-0366-424f-a4a9-77dfe275839e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb43dd6-a9fb-4331-9b43-ce90b128ee6d", "sighting_of_ref": "indicator--6b13638b-7ee1-4d67-9c42-8d792ff3a65c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca0bbb4-befd-431d-94dc-1852d08f02f7", "sighting_of_ref": "indicator--6b13638b-7ee1-4d67-9c42-8d792ff3a65c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6024bd-faf2-4268-9576-f655901ac6a5", "sighting_of_ref": "indicator--05c46e5d-0df3-4630-bb3b-9d14ac2ccec4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5101628-a8c0-4ff9-9b18-1fc37f3da1bd", "sighting_of_ref": "indicator--0740e70b-381d-4380-8e76-dbd3b1ed0d7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab69bafb-ad3a-4bbf-bf31-69e15bab56dc", "sighting_of_ref": "indicator--047fa63f-0bac-4563-b9de-5aac7a23d127", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b11c727-71fe-4492-8e87-049d2f4d8fc5", "sighting_of_ref": "indicator--fa64463a-65d6-4c65-ba31-d4ef289dd471", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c71e0e4-8d3a-4c02-82c6-71bee03f629a", "sighting_of_ref": "indicator--4e04f17e-d309-43b1-bfd1-dc78dab1e47e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d6e6f5-3d04-49d5-aea2-07a8e1345fe3", "sighting_of_ref": "indicator--190df1f8-fa67-4fc0-8839-cbdd841d4e0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf72cfa-3c71-4f59-bdc9-572263023a9a", "sighting_of_ref": "indicator--412a79f2-f3df-40ee-8377-219891d504df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5c0353-8bf5-4b01-b88f-a303faa5b090", "sighting_of_ref": "indicator--d9a08d63-17e8-44ac-b66e-9d2be8e2d6bb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c4648a-fa03-46ab-a88b-81716785bc62", "sighting_of_ref": "indicator--ba7a79e5-4414-4d65-97c5-6dc005716166", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6648388e-6271-4b8b-91e4-c308b4ffcd3d", "sighting_of_ref": "indicator--ba7a79e5-4414-4d65-97c5-6dc005716166", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ba2a15-c800-4619-bf5a-fb97c92d1614", "sighting_of_ref": "indicator--44071a87-e746-4c89-928a-90fd3b38fb0c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9929bbef-bba4-4158-bdff-a18ce820d990", "sighting_of_ref": "indicator--8e5abf13-6b21-415c-8377-0ebc42d51f33", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46320dfc-9dce-4d23-bb89-555369b62bb7", "sighting_of_ref": "indicator--8e5abf13-6b21-415c-8377-0ebc42d51f33", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a11346a-c8ed-41d2-b3d0-b854c65a2b0a", "sighting_of_ref": "indicator--bcbfecf5-2527-41c5-9c1d-5d6faeea8fd9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a00a591-831e-48b8-995d-a8e39fdf90c3", "sighting_of_ref": "indicator--bcbfecf5-2527-41c5-9c1d-5d6faeea8fd9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7d245e-10af-48eb-830a-88e7e275ee7d", "sighting_of_ref": "indicator--849845f4-9a5d-425c-bcad-08c9bcc2808c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9904ae-f078-45c1-bfde-bbe76e05701c", "sighting_of_ref": "indicator--4250fdfb-2770-43b0-9727-e89e611112ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f01c59-f79d-4352-baaf-93d4b2d6275c", "sighting_of_ref": "indicator--4c2da8d6-cef1-4776-9bcd-0eee0814af8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e139476-1353-467e-b706-c36f5f2a24bc", "sighting_of_ref": "indicator--cc507895-0595-40c3-ace9-7e6709721353", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08dddc97-2f47-4eea-9c7b-aa42fa8d1fb9", "sighting_of_ref": "indicator--cf4377ef-84d3-4e20-b278-117f795a32a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18397f4b-1a4f-43c6-912b-9bb8286c7528", "sighting_of_ref": "indicator--4a13fa08-45e1-4994-9f34-d6a435bb42de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdbb95e-b916-447c-a5e7-836f8a1f3f87", "sighting_of_ref": "indicator--256bcf17-a991-404d-9785-3c5ef9b6a776", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf67135e-57ff-405c-8097-61af673eeb2d", "sighting_of_ref": "indicator--0411e21d-f6c3-48aa-9b94-458f7f00f8f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c999ff-8b27-4a87-a943-4c6ab33c1d9c", "sighting_of_ref": "indicator--453589d8-5659-4ec7-bb74-145d32fdda36", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8a658b-6418-4e7d-ae1d-9d51e73aaf90", "sighting_of_ref": "indicator--bac85c9f-e4c2-4085-870d-df7d0806f696", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6b7a66-484e-4b27-8beb-b061f814a994", "sighting_of_ref": "indicator--bac85c9f-e4c2-4085-870d-df7d0806f696", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8ae90d-18ca-4fb7-a3d9-ab9e46f1c230", "sighting_of_ref": "indicator--edacb159-a350-45e5-88be-5ea6859b67c8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0ecd38-6932-4ac1-b079-a72458c97f61", "sighting_of_ref": "indicator--edacb159-a350-45e5-88be-5ea6859b67c8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57da0dc-66bd-4cbc-9f95-513fe7a0fce6", "sighting_of_ref": "indicator--7d3c079e-bb59-4bd7-b49c-f212d8a4b9f6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15694132-57fe-4c96-a5cc-28868213ab8b", "sighting_of_ref": "indicator--7d3c079e-bb59-4bd7-b49c-f212d8a4b9f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34175b06-ca9c-4ff3-99b4-365478e28a15", "sighting_of_ref": "indicator--467d6d5c-6adc-4d77-b5d6-628e28f65e11", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19389bd7-4b9f-492d-ab41-00584667e21a", "sighting_of_ref": "indicator--467d6d5c-6adc-4d77-b5d6-628e28f65e11", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65989db-1ab1-4a0a-becc-6169ca497609", "sighting_of_ref": "indicator--2769fd0f-ef8a-40a1-9d69-3aa0bf23e946", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895ef542-c7f6-4d5e-b1ac-0ae6632f3624", "sighting_of_ref": "indicator--3a0cfa72-5a35-4baa-92ec-2bee565917a4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b598919-7cb4-4ca0-bfcc-d540d7eea40a", "sighting_of_ref": "indicator--29971b40-76dd-4572-a14f-6a18231278a9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e091a1d-620c-4071-a1b8-bea2a1853aae", "sighting_of_ref": "indicator--f995961a-94ff-407c-9560-671c629d6b2d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4478148-b272-4ab4-818d-b6e760385f1e", "sighting_of_ref": "indicator--7fbf055a-5894-48d2-a948-bd12b7c05401", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb79e516-4088-4074-b6a5-74a8cc915f8f", "sighting_of_ref": "indicator--107e2f15-342a-4bf6-88e2-c7b19274a498", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2202d7b7-baef-4d71-bc73-3c23ddc4031c", "sighting_of_ref": "indicator--74584fe2-f610-445c-be5f-77ec0406ae51", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5404e8d-5279-4f20-b992-7e50c8d673fb", "sighting_of_ref": "indicator--594125d1-51bc-4aaa-bba3-4922dd243060", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf9eca7-f407-4937-b2be-8a24c1651a73", "sighting_of_ref": "indicator--8b7a8cab-9e72-483d-8475-fb1005e1869d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeaf14d3-fa88-48b4-93af-84e2e252ab9a", "sighting_of_ref": "indicator--fb73cbf0-ee6c-4c8f-9bb7-d62ed6c5e7ca", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344bc40c-5689-46a1-9c29-4fe2a4f8f676", "sighting_of_ref": "indicator--f667847a-e510-4f16-adec-e1e56f49d4a8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef96f9d-0275-4ab1-adf8-92d60a3f5906", "sighting_of_ref": "indicator--57f88788-5cd0-41b1-91bd-414309f146a6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a40be6f-e3ed-4c61-b107-5db6002ee183", "sighting_of_ref": "indicator--57f88788-5cd0-41b1-91bd-414309f146a6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b7da6c-931c-4cfd-87ba-8201fed1fd4e", "sighting_of_ref": "indicator--1529cc32-6535-4960-8c89-d32f44127790", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7055752d-50fd-4a1c-9757-75099f323250", "sighting_of_ref": "indicator--399ae0cd-cda5-455a-a327-798b11a5c7d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58af026-bdf4-4e56-ae99-6a492769746c", "sighting_of_ref": "indicator--d2a4f8c6-1f96-4eb9-add4-b6303f4489b0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95460096-1890-4bbc-a1da-a791d5e4ca36", "sighting_of_ref": "indicator--46701bd8-8fd1-476d-9cf6-59e9ce5de99e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f68bb6-fc2a-40f8-8d11-deff2093e41d", "sighting_of_ref": "indicator--46701bd8-8fd1-476d-9cf6-59e9ce5de99e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0583ed7d-f1a2-4a67-861b-b48e1afa29f3", "sighting_of_ref": "indicator--564abe57-d1a9-419f-bfdc-cb534b9233ce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205f4e0e-67cb-4935-8b7d-86d737c29d36", "sighting_of_ref": "indicator--98373bc0-9c57-4503-a123-8426d0a651d7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dcb99d-3276-42bd-b4d1-7bfd6d786fae", "sighting_of_ref": "indicator--307fca00-1c92-4d35-9a1e-74f5f41de681", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbc14a5-1ef3-4c24-b9f9-1ced442a5641", "sighting_of_ref": "indicator--307fca00-1c92-4d35-9a1e-74f5f41de681", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5ec9e9-dd3c-4cc5-b559-1192a40ac500", "sighting_of_ref": "indicator--243277a6-7573-4372-b30d-3b0b13a98e23", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db25ee1b-3f55-4b39-8740-9ac96ebfbcd0", "sighting_of_ref": "indicator--f1d6cdab-5d80-4560-95e2-6e44ab09f225", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dc71ef-1c4f-4474-bac3-349c6f0d6a97", "sighting_of_ref": "indicator--b9f495f1-ecce-4f13-9ac0-bdec2fdf7950", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b08273c-3b99-4850-bcde-b4872cfe706f", "sighting_of_ref": "indicator--354c8ba2-b496-4fdb-8a28-0b02e345467e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b451be-c747-494d-88ca-1d8736b807f4", "sighting_of_ref": "indicator--354c8ba2-b496-4fdb-8a28-0b02e345467e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a4b350-cb82-4783-a03c-93ba602f7961", "sighting_of_ref": "indicator--cd7d1695-8b91-48d1-ae29-91b587e76c6d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31466e0-7fc0-4eef-a462-2662f5e74619", "sighting_of_ref": "indicator--a6d4ba12-75f5-4815-8ccb-949d8f522aaa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50208b55-95cc-4678-bee0-b86f5d955d67", "sighting_of_ref": "indicator--a6d4ba12-75f5-4815-8ccb-949d8f522aaa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c86cbba-5b38-4ae8-a686-aaa3a66a9b59", "sighting_of_ref": "indicator--39bc86cd-93bb-4357-8517-dbdaab0e7738", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846ab749-a200-4f2c-be50-ff76f3c85098", "sighting_of_ref": "indicator--39bc86cd-93bb-4357-8517-dbdaab0e7738", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a20984c-399d-44a1-82f2-4443253ce860", "sighting_of_ref": "indicator--a0cb216c-de82-438f-adfc-5ee1cd9f7d06", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7f16a6-9a74-4e9d-beb3-2bd13770e1d7", "sighting_of_ref": "indicator--a0cb216c-de82-438f-adfc-5ee1cd9f7d06", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a8994a-ed2e-49b6-9629-5bdd4b110551", "sighting_of_ref": "indicator--f6ef23f2-fcc5-4926-9b83-9a86bc1ca8d8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5eea26-6cf2-4a74-a29a-8b8c33a0e0fe", "sighting_of_ref": "indicator--84155afa-a81f-4693-87ea-056f443dfdb8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf8aab8-51f8-4928-9dc6-2af94fc4d0a8", "sighting_of_ref": "indicator--84155afa-a81f-4693-87ea-056f443dfdb8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fb3e74-b820-4d35-a641-569940b19454", "sighting_of_ref": "indicator--2cf7fd60-1a05-4e52-8bda-7f8ba0a9e501", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f782ec17-7e2f-429c-a3c2-297df2ff0222", "sighting_of_ref": "indicator--2cf7fd60-1a05-4e52-8bda-7f8ba0a9e501", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b24d050-4e31-46c8-8447-cbd0e9ef0311", "sighting_of_ref": "indicator--d2b71318-724b-4190-9569-c61c26ad33a4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de6494c-aad0-4e90-8f93-9e2181c6a042", "sighting_of_ref": "indicator--d2b71318-724b-4190-9569-c61c26ad33a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9314f164-f1b8-42a0-b1d8-3a07bdc7d75d", "sighting_of_ref": "indicator--0079421b-7efe-4ca4-ba25-3db2b34b3460", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4850a1a0-716d-4b48-87fe-d68057f35465", "sighting_of_ref": "indicator--1a928acc-3a47-4432-ab5a-db3fce326fe2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3302d218-8680-4f11-8ddd-bf7dac46be16", "sighting_of_ref": "indicator--8d750b75-a341-406d-85c9-27da486ac621", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c84e2c-a6f6-4a32-9cdf-59ed7f3b27a4", "sighting_of_ref": "indicator--6d758f9a-d88b-4ad0-a591-7e185ef664d9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f29feb-9f28-412f-9c70-b8fc3cbb989c", "sighting_of_ref": "indicator--6d758f9a-d88b-4ad0-a591-7e185ef664d9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239bf3b7-937c-492c-8cbf-9f9f9dada2c6", "sighting_of_ref": "indicator--9174343b-aa4c-46ce-a776-8b20a68f963d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d10421-db68-40d3-86ea-be762600dd17", "sighting_of_ref": "indicator--062d855f-4798-4df5-8f76-480373ad9aba", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f8a40c-31f3-43f0-8b9e-0ecdaa817c7e", "sighting_of_ref": "indicator--062d855f-4798-4df5-8f76-480373ad9aba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1103ac-bdd3-44b7-b3e3-a3edd236ca2e", "sighting_of_ref": "indicator--b3170d7a-39f8-484c-af49-9ee23585e244", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46eb1b66-bc4e-47a2-b93e-8473ab2d9c88", "sighting_of_ref": "indicator--54ac8d04-8a84-44aa-a9ff-1fb0005179ff", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831cf4f2-d584-4e0c-a2cc-a0936caea257", "sighting_of_ref": "indicator--06d75b13-dc74-4f9d-99de-dd0884ba30a5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6c4684-4029-432b-965a-e1294194fd63", "sighting_of_ref": "indicator--06d75b13-dc74-4f9d-99de-dd0884ba30a5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4ae55e-5625-4c81-a4f9-64a64fd401c6", "sighting_of_ref": "indicator--702fd9b0-a014-4ae1-a2a3-0d5e6542e9c0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2711cc-8751-482b-8f9d-0526d18c2052", "sighting_of_ref": "indicator--702fd9b0-a014-4ae1-a2a3-0d5e6542e9c0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22984e50-8df1-4228-9e00-4ff0fdc04639", "sighting_of_ref": "indicator--4997ee33-54cc-4c15-98ef-ef4d5fb9d6f3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0ce481-adfe-4478-8ef7-f68c1c6c1f3b", "sighting_of_ref": "indicator--4997ee33-54cc-4c15-98ef-ef4d5fb9d6f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4dfdc80-020f-4abe-bd6d-f8f2e2a0656a", "sighting_of_ref": "indicator--b0c480c9-bdf2-4e2b-84d6-1a627b2b5f7b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849c3530-4e9f-4056-8fca-816f04617a77", "sighting_of_ref": "indicator--b0c480c9-bdf2-4e2b-84d6-1a627b2b5f7b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b2d128-52d4-4d6a-ba92-b8817bb97b83", "sighting_of_ref": "indicator--b435fcef-76fa-4759-acfe-4af06d0801a0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f00667-d8da-47c6-9614-9e94c6111c17", "sighting_of_ref": "indicator--b435fcef-76fa-4759-acfe-4af06d0801a0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ea3716-cce8-4692-b78c-c93290280ac9", "sighting_of_ref": "indicator--1798219b-9215-4d0a-8914-cafe972aa159", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9a1ea2-4789-47ed-8323-7d29be537237", "sighting_of_ref": "indicator--1798219b-9215-4d0a-8914-cafe972aa159", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9b7dcc-fec4-4d80-a98b-f0d7440aab1c", "sighting_of_ref": "indicator--feabc199-a59f-466b-baf9-5e06e0d7ec4c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c22454-1d20-4eb2-907f-d0104820eee7", "sighting_of_ref": "indicator--feabc199-a59f-466b-baf9-5e06e0d7ec4c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3624150e-2f2a-4c89-bf29-ea3dabbc92b5", "sighting_of_ref": "indicator--a1363c4f-6861-47f6-9d34-abac67f113b2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd8974d-8366-4028-a6be-3df68bc684e6", "sighting_of_ref": "indicator--a1363c4f-6861-47f6-9d34-abac67f113b2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a256df-e9b0-4e13-bc46-43ff1fad621c", "sighting_of_ref": "indicator--0b83ae4a-0399-4378-9c05-4d9b8b542816", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31607f5e-0847-4231-a3b3-c01250ca693a", "sighting_of_ref": "indicator--0b83ae4a-0399-4378-9c05-4d9b8b542816", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8180cb-37c1-496c-a396-80f75f616ad7", "sighting_of_ref": "indicator--a9ab843a-2dc2-41ac-8656-968cedb55916", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d516ea-38e3-40c3-b660-2aeb1be7e03f", "sighting_of_ref": "indicator--03541651-de40-4e05-8817-c52d5414b7da", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bbc27e-aa35-4593-98e9-607957d978e9", "sighting_of_ref": "indicator--03541651-de40-4e05-8817-c52d5414b7da", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950d1bf6-5b0d-43c6-a4de-c0e16c23889c", "sighting_of_ref": "indicator--bbbb8349-45f8-4d33-9991-934ea0eea568", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73a563c-5544-4020-9008-c47694c17c7b", "sighting_of_ref": "indicator--0b8915d8-3690-44a2-ba15-c589b90e06fd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762b81a5-a3c0-4d3a-befb-da169ce5a746", "sighting_of_ref": "indicator--3a52ed0d-54dd-4219-a8aa-88d7b5c767ee", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d385242-e0c0-4967-a529-423373c36d9b", "sighting_of_ref": "indicator--3a52ed0d-54dd-4219-a8aa-88d7b5c767ee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76e08ab-a6a6-4fc2-b790-dff168bbec57", "sighting_of_ref": "indicator--75f65c44-a817-42f7-ac39-c23c692119d8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31be42aa-0e25-460b-b977-42316433e352", "sighting_of_ref": "indicator--8e90b683-d125-426a-990d-76505ac256d7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8682d475-7491-4661-bab5-16c46d50d41a", "sighting_of_ref": "indicator--b7acea5b-0756-4722-bbc3-a3c30ee908a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9998279b-45a5-4db7-82e6-841290dc1e06", "sighting_of_ref": "indicator--cf0b15ec-3063-45a7-92e6-70e667f57e2c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1abc33-7620-42cf-8485-bb94c6994421", "sighting_of_ref": "indicator--4f6bed45-14fe-4b00-99b4-4b8be0287e41", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f474d5d5-efc5-419e-a72c-3576ba25e972", "sighting_of_ref": "indicator--4f6bed45-14fe-4b00-99b4-4b8be0287e41", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c895b4d4-3785-4e8d-a469-961d05314188", "sighting_of_ref": "indicator--d0b0ed68-ff65-42cc-ad2b-08b36ca997c8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad68a42-77c2-4f9a-8dcc-13b30ad097bd", "sighting_of_ref": "indicator--d0b0ed68-ff65-42cc-ad2b-08b36ca997c8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad2d17a-adb6-4f0f-b185-ef0311882bc1", "sighting_of_ref": "indicator--6304147f-c955-4079-ad00-9d2d0f63f7f0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ada69d-43f4-43f1-bc52-8d4aeb690324", "sighting_of_ref": "indicator--ef79e638-81b5-4bf8-9b9f-510923e35636", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fb0bc5-d9b4-4542-a4e6-1fbb24d83fd0", "sighting_of_ref": "indicator--a3ff1ad5-da25-4a60-911b-0e7bf9f32950", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a72915-0951-4a94-9a7f-acf3694b9f19", "sighting_of_ref": "indicator--9a79874b-8e2e-4702-b6bd-e8bb3f87ff68", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3006fe57-1f04-42b8-a212-fc6ad2b58181", "sighting_of_ref": "indicator--db42848d-19b2-4758-952e-94c9b941e555", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62fdbf9-7ad6-42ab-b62d-83c945900ad1", "sighting_of_ref": "indicator--6b8b9b85-8d4d-4876-a476-e492d4a44a38", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c33c3c2-fc44-468f-95dc-54b841dd15e2", "sighting_of_ref": "indicator--1b5dabe4-406b-4c6b-a356-360e5bfc8053", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0a9b4d-829e-4f66-9e00-ec722fdf5ad0", "sighting_of_ref": "indicator--a56be980-48cb-4d91-a0a2-03056ff23b76", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5104741-17e1-4ded-b93f-7cdb551d9ea5", "sighting_of_ref": "indicator--cae4331a-0968-4474-95c6-2845ceb94c72", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479bfea4-2881-480b-9abb-6c30051a09b0", "sighting_of_ref": "indicator--19c9e275-8f34-426e-afa9-f20b40cc1306", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc882bb9-b807-460d-8cd1-44252dac59b7", "sighting_of_ref": "indicator--c91ce041-bbf5-4d98-a291-d20fa501476f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db3dbd3-c5a8-4b5f-93a6-f64ce669c43e", "sighting_of_ref": "indicator--c91ce041-bbf5-4d98-a291-d20fa501476f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82584160-b045-45fe-ae01-7e08980605c4", "sighting_of_ref": "indicator--ab53d928-0dd9-4cfb-8fad-03458f7daa6f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9b841a-99b5-4d10-a36c-048a88565dff", "sighting_of_ref": "indicator--ab53d928-0dd9-4cfb-8fad-03458f7daa6f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a696499e-9837-4d8b-a463-5a9721d143d4", "sighting_of_ref": "indicator--eab41058-f6af-426e-b686-3eb624af7009", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f607bf-954e-4de9-ba4d-2948d4a67b04", "sighting_of_ref": "indicator--739a57a6-0b5b-4afc-964b-91f09f853bf4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390ebd79-8805-4964-8443-4764822a2909", "sighting_of_ref": "indicator--38707d80-4ae9-4ccb-b34b-8c4e1b3d4ebf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02b546d-c069-4681-ac3f-5c6eca63736e", "sighting_of_ref": "indicator--d8ea0fc8-2e6c-41b8-bbf1-216babf40659", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e613ffca-7fe2-4cad-97ae-51173c9ff8be", "sighting_of_ref": "indicator--1e7e93e4-71d5-4a52-9b5a-4cc0d4cb2d20", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aaf83c3-205d-4ae2-9dcb-e4c81b1f6dcf", "sighting_of_ref": "indicator--5bd4f1f8-0729-4408-9fe6-0e0da7b97d98", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b02342-f44b-4b07-add7-68fbde503900", "sighting_of_ref": "indicator--564c65d1-b561-4120-ad15-e8478db7d826", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ae3614-6a38-448f-a8aa-332543a7ff31", "sighting_of_ref": "indicator--93c26fcd-7acb-4cb2-ad3b-5422af6824b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20702672-8b90-4b7f-9fee-a8b0260320f5", "sighting_of_ref": "indicator--aff2172a-d7d8-40f0-8349-c5ce81ec2302", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d4b551-d785-430c-93d0-546c295bb3f8", "sighting_of_ref": "indicator--aff2172a-d7d8-40f0-8349-c5ce81ec2302", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f21020-399f-4c95-98fb-6435aee2e06c", "sighting_of_ref": "indicator--6ffbc490-769a-4620-bb0a-984d6330db5b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0357508c-19a4-4fee-b8d1-05048332f8c2", "sighting_of_ref": "indicator--6ffbc490-769a-4620-bb0a-984d6330db5b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01fa77d-5261-4894-8bdf-b0e66765867f", "sighting_of_ref": "indicator--ec2dbd0f-38e9-4b12-a04c-ed211d4ea638", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7593ed16-0652-4be6-8e01-9c24f2a91ec8", "sighting_of_ref": "indicator--b56fa4d6-b9cc-4a02-811a-e184941cb15c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fe311f-5b35-43cb-82a5-01eafa88cb36", "sighting_of_ref": "indicator--ade13f0f-19b1-471d-8be9-4e1390c84b82", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943df27a-cf4c-47f0-a0c2-0466c5b84b6f", "sighting_of_ref": "indicator--2d8a7891-042d-448a-9e20-e93284f253c1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03f50fb-fb9e-43dd-bb30-2abf4a686c76", "sighting_of_ref": "indicator--f43fa457-9057-4d38-9254-77310a1dbf59", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6eaa2c-3b68-407c-b458-0115d861ee6e", "sighting_of_ref": "indicator--7af4f6e0-c131-4a57-ad86-32e28189e419", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faab7eb6-2803-44bd-ac2a-1bd8e5d1e10c", "sighting_of_ref": "indicator--200cb2b3-acb3-481f-bdea-842154f5cf9b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c13a1c-1246-4802-bcc8-0941cb8584b0", "sighting_of_ref": "indicator--200cb2b3-acb3-481f-bdea-842154f5cf9b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634ade93-7a6c-4760-92ad-28ffafb583a4", "sighting_of_ref": "indicator--96178ad4-c7e2-4810-aa87-2c49adf7e1e7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f454976-f13d-4643-8261-d7cb3cc0b994", "sighting_of_ref": "indicator--96178ad4-c7e2-4810-aa87-2c49adf7e1e7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4428b0c3-4946-40d6-877f-b1797f3fddca", "sighting_of_ref": "indicator--66c38a2f-3d62-4b57-b615-69c4209df4a7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56638ca0-2e68-406c-b19e-0ee7b19f42b9", "sighting_of_ref": "indicator--66c38a2f-3d62-4b57-b615-69c4209df4a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ce86a6-216f-40d3-b79d-252b43859ded", "sighting_of_ref": "indicator--0eec5488-e20e-45c4-a0ba-523d49d72939", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1176d210-4d8e-4215-8bba-2e851eeccab1", "sighting_of_ref": "indicator--0eec5488-e20e-45c4-a0ba-523d49d72939", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efe8f55-28a0-4d3b-ba3c-15ae2508c08b", "sighting_of_ref": "indicator--3e8afaa3-270a-40c5-bc11-9c324ff6221d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e87f6d-3920-460b-915d-0dd89e6d9257", "sighting_of_ref": "indicator--0c19634b-7e5f-45b8-bd5d-f30946ab52a1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1609a954-fa18-43e2-aa29-0a8c1e84c0b9", "sighting_of_ref": "indicator--0c19634b-7e5f-45b8-bd5d-f30946ab52a1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7631d23a-a742-4afb-a5ca-68678a754b84", "sighting_of_ref": "indicator--dccd67be-6e5e-4718-a1f4-6925353565ae", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9324090b-a489-477e-bf93-690a55dc7fe2", "sighting_of_ref": "indicator--dccd67be-6e5e-4718-a1f4-6925353565ae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a8b530-bb3d-45c5-a15c-73f14f0fee15", "sighting_of_ref": "indicator--4c59f534-fee3-44d7-b5de-baed8a22d3e8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f300325-52fb-42fc-93b8-ad2dd40af7df", "sighting_of_ref": "indicator--3d01c045-b8b8-4486-b49d-4f094133ffc9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073d35af-bdbb-4759-b152-96864d093c77", "sighting_of_ref": "indicator--78874424-07c9-41ca-81b6-a079dc1f82ec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fd2440-bb3e-4cd2-a435-02517a1e9c4a", "sighting_of_ref": "indicator--9ad46182-5d79-44ff-b9cc-d5c6196f452e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8d7060-0f9e-4df1-b442-77af631db9e0", "sighting_of_ref": "indicator--9ad46182-5d79-44ff-b9cc-d5c6196f452e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4121a96-4fde-4e5a-a2d0-65afb6ec43bc", "sighting_of_ref": "indicator--7017ac1e-205f-411c-a2b8-fcff427bb486", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8a5183-2bc4-415a-999f-f93dd407693e", "sighting_of_ref": "indicator--e8052547-0a00-4915-97da-0c67b8a1cc34", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdc6977-b5e0-4068-a005-6ac9b246d9fc", "sighting_of_ref": "indicator--0c9aca2c-7bfc-4fb3-9b13-10d10171325c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb43e3d2-9de7-4e2f-888b-4eabf17275fd", "sighting_of_ref": "indicator--0c9aca2c-7bfc-4fb3-9b13-10d10171325c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d73b19f-db71-4794-b01b-6448f1e78877", "sighting_of_ref": "indicator--1869077e-7795-4822-bada-d321a20ecd52", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9426cb9a-60a6-4aef-a3a5-7a06332fa3f9", "sighting_of_ref": "indicator--1869077e-7795-4822-bada-d321a20ecd52", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a408305-ab80-4752-8dd0-47b59985cfb3", "sighting_of_ref": "indicator--5fa975b1-cd04-4b8f-9a7a-6cb00eae4f59", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cd43c0-3aeb-41c2-8e82-767f5ebf5b38", "sighting_of_ref": "indicator--aabe59f5-6bf0-4149-97f8-f292a89b6ef4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d49f39d-1ba3-4a73-a326-99e9aeebafc4", "sighting_of_ref": "indicator--aabe59f5-6bf0-4149-97f8-f292a89b6ef4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8a4e00-a94b-4e42-933d-144eaa033494", "sighting_of_ref": "indicator--e41a5b76-fc86-48c7-90b8-6ce48b38e78b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cda13a4-6e3a-4848-8353-b1296a8ee74a", "sighting_of_ref": "indicator--e41a5b76-fc86-48c7-90b8-6ce48b38e78b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9577ba-4a8b-4faa-adb4-26cf41033a42", "sighting_of_ref": "indicator--c4d0638e-4873-4877-94ff-e619cb08390b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01794ea-d858-44a2-a7cb-eddc12abb214", "sighting_of_ref": "indicator--c4d0638e-4873-4877-94ff-e619cb08390b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdd92dd-ffdd-454c-ab91-1411b95a4a20", "sighting_of_ref": "indicator--69e10d7e-b09e-4bf5-91d6-b82b20a3d886", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adaef49-f11b-4e4e-8f4b-8e4778a7a9ca", "sighting_of_ref": "indicator--b34081c9-ec17-413c-ad67-71e8ab6da376", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8da457e-8838-4de1-af72-70ed58aaf6d1", "sighting_of_ref": "indicator--b34081c9-ec17-413c-ad67-71e8ab6da376", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32aa3301-2ea8-457b-acd0-26197e22c9dc", "sighting_of_ref": "indicator--9f043859-804f-416f-ae2f-a53c8c0b7093", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91329ea9-9e7b-4287-8f24-76d47e0de51e", "sighting_of_ref": "indicator--9f043859-804f-416f-ae2f-a53c8c0b7093", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffccaa9-1ddf-4e50-9a6a-93ed05e2c249", "sighting_of_ref": "indicator--21856623-3b51-4fb0-89ae-374d16b57250", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6cf4082-a314-40c9-8dcf-ba7fa390da7c", "sighting_of_ref": "indicator--21856623-3b51-4fb0-89ae-374d16b57250", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f698409-b3f6-44c3-a4b6-0eb3a1a893fd", "sighting_of_ref": "indicator--1a8b8ec5-0b6d-4d51-a095-cbc9d7ab1338", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a49c7e-e1e6-4870-b0e2-1d57210e13ff", "sighting_of_ref": "indicator--1a8b8ec5-0b6d-4d51-a095-cbc9d7ab1338", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555fce6b-ed00-4cfe-8632-e99b89097ff1", "sighting_of_ref": "indicator--48643433-12f2-491c-8323-0a11e96877f6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06321f67-76bb-47ae-898e-2bd853d157c9", "sighting_of_ref": "indicator--48643433-12f2-491c-8323-0a11e96877f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20280bd-8276-48d0-a1e4-450e64b45dcb", "sighting_of_ref": "indicator--7c59b111-a6f2-422e-813d-319c50227a3d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333149d9-60c8-4789-8c21-39b8aa4cede1", "sighting_of_ref": "indicator--7c59b111-a6f2-422e-813d-319c50227a3d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d02e355-dcc0-4246-882a-1483fe07fbba", "sighting_of_ref": "indicator--5fd7ce8d-289f-41db-809c-b1b5f1b6c973", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44f142a-d385-442a-b559-6a3525d5f416", "sighting_of_ref": "indicator--5fd7ce8d-289f-41db-809c-b1b5f1b6c973", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e838bfdb-0a47-470c-8c27-48a50b5087b0", "sighting_of_ref": "indicator--dc86bd54-3859-4785-93f1-effdf95c1cdd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7799f94-de6a-4dae-8f6c-a24eada64900", "sighting_of_ref": "indicator--dc86bd54-3859-4785-93f1-effdf95c1cdd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b258d06-2442-47fd-befd-ce3cf18d604a", "sighting_of_ref": "indicator--bcb04dd3-0b9b-43db-b5fc-1259c02d9fc3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cf9ac6-986a-4d4e-bc37-37081ff4ff8a", "sighting_of_ref": "indicator--ccbb40d4-a5af-4e27-b3e7-4f59f0de7b31", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a50597-0851-4c5c-bce3-141debc72b74", "sighting_of_ref": "indicator--431c5cca-2f33-4a33-bb0b-2e5bd1c07adf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb85dda-42e6-4c45-9c22-94187f4e5c66", "sighting_of_ref": "indicator--431c5cca-2f33-4a33-bb0b-2e5bd1c07adf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3d7cf8-7e52-4c90-8473-088cba05ea67", "sighting_of_ref": "indicator--8ba2fe66-872b-4eec-8c9a-9db7390cf89b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7dbb90-47e6-44b2-8b66-932fd7778448", "sighting_of_ref": "indicator--c3aa09d3-8834-4c41-bd28-c7fa54ea5b6b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d31d2f3-f70e-4e71-9fa5-00e999aa313a", "sighting_of_ref": "indicator--320f929f-e401-478d-b387-70d30fa0dd76", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7415618-70ba-4f72-891d-3dbded3e9e72", "sighting_of_ref": "indicator--ad4efb16-6dd1-48b4-bd25-e6d2d67fc21c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2c6c91-bade-4dc4-8db8-e35221339b00", "sighting_of_ref": "indicator--ad4efb16-6dd1-48b4-bd25-e6d2d67fc21c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec49790-8706-4771-aecc-c4ebc70c03f0", "sighting_of_ref": "indicator--8c93b841-fed8-4d7b-a6f5-bfc6d0248b7d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8eb2b7-4a72-4e49-b3f7-2fb84228b3ef", "sighting_of_ref": "indicator--8c93b841-fed8-4d7b-a6f5-bfc6d0248b7d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4004904-f79a-4c77-b6dc-cdb226219461", "sighting_of_ref": "indicator--cb3349e3-8767-4365-a745-a6585dd0c3e2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad90d53-a158-486c-a932-cc88fe87c5e3", "sighting_of_ref": "indicator--cb3349e3-8767-4365-a745-a6585dd0c3e2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ace662-6185-47d1-9765-1fb8f84af964", "sighting_of_ref": "indicator--7595c6a1-7552-4ea2-b509-9913f8c6607f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5f3e01-c77e-41d2-a64d-feda9c852a5c", "sighting_of_ref": "indicator--71b04ba2-49c9-48d0-bbe0-14cb20a4bd1f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e1969c-17cf-4a95-b7e5-408f09ffc90e", "sighting_of_ref": "indicator--71b04ba2-49c9-48d0-bbe0-14cb20a4bd1f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5342ecab-9b84-4e9d-97a0-56379c95a9a3", "sighting_of_ref": "indicator--ad670c19-b2a1-4302-aa2d-0bf81343b10c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07180618-d158-4813-ad37-e39413c93888", "sighting_of_ref": "indicator--ad670c19-b2a1-4302-aa2d-0bf81343b10c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2418d5d0-1bf7-4b36-8b6b-670899036ad6", "sighting_of_ref": "indicator--4ee60e4a-9dd5-4790-8682-11259bbf67fb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eda5d7a-4eed-4969-8978-c6bb2fb49030", "sighting_of_ref": "indicator--4ee60e4a-9dd5-4790-8682-11259bbf67fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8319d38e-ab73-4191-ac5e-a504fa0592db", "sighting_of_ref": "indicator--acb97f48-06ee-4418-8d25-fb228f1be100", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a622d1d-d345-4025-ba3d-3ea7f43c07b6", "sighting_of_ref": "indicator--acb97f48-06ee-4418-8d25-fb228f1be100", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ae82fd-79f8-42eb-9f04-89cc7dd4ed81", "sighting_of_ref": "indicator--21d18bbf-91c8-41e7-98f1-3acfad746d13", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a1821e-7f9e-4f61-a549-8f6de506aea3", "sighting_of_ref": "indicator--30167e03-1f9c-455d-b557-4e337f25dbc5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21426e42-9b2e-4e59-815a-4dc4be780cdf", "sighting_of_ref": "indicator--30167e03-1f9c-455d-b557-4e337f25dbc5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb19284f-061e-4093-beda-fe389ae895f8", "sighting_of_ref": "indicator--6f2ae888-71ec-4efd-aae2-48c74ba6a8d7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c28a359-f1d9-4f4a-b269-b97e35835ea9", "sighting_of_ref": "indicator--6f2ae888-71ec-4efd-aae2-48c74ba6a8d7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57df2a1-ab38-4cca-9866-f16517eae3f3", "sighting_of_ref": "indicator--abf80126-1f31-4f9d-9b96-d85b6da65722", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb81bcb4-9097-4816-af0b-c9cea3d1d9f2", "sighting_of_ref": "indicator--abf80126-1f31-4f9d-9b96-d85b6da65722", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f416d7ad-c628-4be9-a083-9d0f00194f08", "sighting_of_ref": "indicator--cca9998f-9ef3-4633-80d3-7e8d8fea40c6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bd0532-7416-4691-8b21-4ce4fcf9ce54", "sighting_of_ref": "indicator--cca9998f-9ef3-4633-80d3-7e8d8fea40c6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27772882-958d-4b5e-a99d-72030a22ef54", "sighting_of_ref": "indicator--21c6457e-a2f4-4ca6-abfb-4e810cb0f3bc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175014bc-4be1-41fb-846b-48c6fd1480c8", "sighting_of_ref": "indicator--21c6457e-a2f4-4ca6-abfb-4e810cb0f3bc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5861ead-c444-4184-ade5-dc21a03604c3", "sighting_of_ref": "indicator--b71ff0ea-7fcb-4abc-a8c9-299b9dc7ce14", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e7fa37-054e-4c2c-bea2-0d11e7dc7c02", "sighting_of_ref": "indicator--b71ff0ea-7fcb-4abc-a8c9-299b9dc7ce14", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b28cd6-2f3a-4e0d-ba78-3f9a0a136d29", "sighting_of_ref": "indicator--df0aa79b-70f2-42fd-9883-5aebc89a6750", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c42e083-747f-424e-b660-65bab14acc14", "sighting_of_ref": "indicator--df0aa79b-70f2-42fd-9883-5aebc89a6750", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e31d854-f238-4260-a13a-f6dd3226872c", "sighting_of_ref": "indicator--a6b976b4-e4a4-4571-85be-62107b7123d2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1028c49-2317-4fe4-b1be-0c0f738e12ea", "sighting_of_ref": "indicator--a6b976b4-e4a4-4571-85be-62107b7123d2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efdba4d-6012-4599-ba9a-5b8f99facd92", "sighting_of_ref": "indicator--4c126515-f7d8-48f2-8941-ea7b3beaf385", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318b6dd8-93cd-4e56-b3a4-56403a028652", "sighting_of_ref": "indicator--1e02d8be-1761-494e-a733-5a366e7ae04e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2a959a-6498-4ce5-a8a2-8d227f275e7e", "sighting_of_ref": "indicator--1e02d8be-1761-494e-a733-5a366e7ae04e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1be644-075e-4924-8001-d8c86ac48d39", "sighting_of_ref": "indicator--ff3e7a1b-3035-4dd6-902e-6768874ec870", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf01cf5-e2f3-4c39-ae58-1881965310f7", "sighting_of_ref": "indicator--ff3e7a1b-3035-4dd6-902e-6768874ec870", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f74f47e-bf0a-4ac0-8a7a-9a6611549a7e", "sighting_of_ref": "indicator--21d0fd71-dde2-4b17-98fe-d97956ee6883", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f4ddc9-15bb-4839-8e75-92735f6e3157", "sighting_of_ref": "indicator--9b302087-02d2-4fe9-a8f3-2f1e82433f36", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184ed64c-ef7a-4df4-b300-e70a7c9301dc", "sighting_of_ref": "indicator--4345cb05-4f44-42b4-8015-dde5790d3ac6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e587682b-e0f4-4e7c-bbc7-de9653700e39", "sighting_of_ref": "indicator--34fe3d6f-e7bb-4e82-be45-877bf429c3a1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f501465-bbec-441f-b8c1-b6fbaa105661", "sighting_of_ref": "indicator--947e4188-c646-4b54-9e39-61f0b1b18f10", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7b4e7e-d9a1-4b48-9e71-5180150273f9", "sighting_of_ref": "indicator--09edcd6a-6cc3-4a7c-a37b-cee72be35b58", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc5faba-f37b-4100-b5b5-0b080c76a941", "sighting_of_ref": "indicator--562931cc-661b-45e6-aad7-120159281124", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22dee073-91af-4904-833e-a093709fa1da", "sighting_of_ref": "indicator--315b681a-4fc4-4b14-bd94-2b2bbe3a4b51", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8718230-295c-41b2-8cbc-dbef3861d53c", "sighting_of_ref": "indicator--c436e625-bd72-42a9-bc70-f509601aeab7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58615a07-49d8-4c9d-b06a-9ed0b37a28d7", "sighting_of_ref": "indicator--b324ea62-9438-4cb5-b17a-cce41e13df52", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d264ad49-6019-4a4f-9d1d-3279136cc09a", "sighting_of_ref": "indicator--b324ea62-9438-4cb5-b17a-cce41e13df52", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce768da-eac9-4260-9f13-d6b821365e69", "sighting_of_ref": "indicator--621ec3dd-ebe8-4951-ba50-b7775e3d8ce3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b208b2bf-49b3-4eaa-8322-700eb59ba1a2", "sighting_of_ref": "indicator--207f5ff5-e77e-470e-a63a-d5001e7c497f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c643ba-0571-42ca-9377-2d544356608e", "sighting_of_ref": "indicator--13c446ff-5e55-4d2f-997d-9d203f97b6db", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9980cffb-df67-4cb8-a0e2-22cd6934327c", "sighting_of_ref": "indicator--0411d216-4521-4421-9bc2-5dadcee6f87f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbac6a8-231b-48b0-91dd-8f7a2e658d98", "sighting_of_ref": "indicator--2bd4fe49-3166-4c85-8b55-06fcd954c98f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59ccccd-83ec-4002-8bca-1b07689875d7", "sighting_of_ref": "indicator--2bd4fe49-3166-4c85-8b55-06fcd954c98f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017c9c37-b659-4c25-bad1-7eff3ffa99c8", "sighting_of_ref": "indicator--1b4c924e-d1b0-4758-905d-13500dbc6a5a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717859a7-110c-40ea-8d2a-f50cafab8e23", "sighting_of_ref": "indicator--1b4c924e-d1b0-4758-905d-13500dbc6a5a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2d50df-cc37-44dd-a6c3-82423a251ae4", "sighting_of_ref": "indicator--912ae4f4-73cc-4442-bbd1-1a3a91d81c66", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7951c44b-63f5-4bbc-9929-0e5319584129", "sighting_of_ref": "indicator--912ae4f4-73cc-4442-bbd1-1a3a91d81c66", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b578cfcc-300b-47ae-9a72-a27d83fc1c73", "sighting_of_ref": "indicator--493e3186-e0e6-4aa5-990d-c1749bfa5be1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b084036b-d7b0-4667-96fe-50b1125524d7", "sighting_of_ref": "indicator--493e3186-e0e6-4aa5-990d-c1749bfa5be1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8b7fd2-8630-404b-80dd-175323014875", "sighting_of_ref": "indicator--0b56f5ac-bf0c-4ac5-9f56-bdb948ccd839", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cc7b3a-545f-44e6-806d-0d847de780e5", "sighting_of_ref": "indicator--0b56f5ac-bf0c-4ac5-9f56-bdb948ccd839", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200c4020-54f2-454c-bb61-6d07a47abbad", "sighting_of_ref": "indicator--fc427497-57c7-4308-a602-78c97790aa68", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2465354-95d3-4850-903d-380672e63628", "sighting_of_ref": "indicator--fc427497-57c7-4308-a602-78c97790aa68", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5633bbc4-abb5-4246-8ddc-3e45a9a0edac", "sighting_of_ref": "indicator--6f5b26f7-4ef7-4ef7-b415-3fafec72d540", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bedd23dc-8b1e-4c18-a773-02aa046cb8e6", "sighting_of_ref": "indicator--fe3942a7-f0fa-4a8b-bb7b-97242b8da538", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c994c5e6-5a0d-45b3-aaff-2729a83aeab6", "sighting_of_ref": "indicator--07c47f32-311e-49f9-b969-61ecb32a5af1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a601b0e3-7cbd-4b5f-9080-6074d09a61a5", "sighting_of_ref": "indicator--4ff733df-1955-45ba-ab54-774189c1913d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30775bc7-9453-4d44-8ab6-185b7296ae52", "sighting_of_ref": "indicator--66c8bec1-67e1-418d-9fad-5dce7e88fb85", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c2dbe4-b352-4c4d-a899-53c483003e02", "sighting_of_ref": "indicator--66c8bec1-67e1-418d-9fad-5dce7e88fb85", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cc2ad8-7220-44c7-b16c-16c951c33f10", "sighting_of_ref": "indicator--4e9b02f5-6f3b-4059-8e08-5a8459e56366", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad68c9c9-22ff-48b1-a8ec-223019076d88", "sighting_of_ref": "indicator--4e9b02f5-6f3b-4059-8e08-5a8459e56366", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fad1068-9a0e-4069-b708-65bfb4ee4e1c", "sighting_of_ref": "indicator--a9c23bbc-e5c2-4cd6-905b-3d40a0506410", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f48e1f9-f856-492e-a6e6-501de06b8e45", "sighting_of_ref": "indicator--a9c23bbc-e5c2-4cd6-905b-3d40a0506410", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb48e3ed-7103-48ba-85e8-1a6beddb073f", "sighting_of_ref": "indicator--7a16ce64-4506-4912-8fa4-e82bd626813e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c8b2b8-98c6-4aa4-b79c-65d9e10854f2", "sighting_of_ref": "indicator--7a16ce64-4506-4912-8fa4-e82bd626813e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777e1d35-699d-4e10-9e00-70ac9ecca76f", "sighting_of_ref": "indicator--87429f5e-9b08-40d9-8577-e3001b09a4c0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7732c65-4178-467e-bdb0-90095a97a9a8", "sighting_of_ref": "indicator--87429f5e-9b08-40d9-8577-e3001b09a4c0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4d5e0a-e179-4552-9c5d-6eed15ca6d8a", "sighting_of_ref": "indicator--cf7ee8f3-b325-48f8-b300-ee3d5842173b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8059738-091c-4758-bdfd-3dab7646647a", "sighting_of_ref": "indicator--5b1ef3fa-e49e-49d6-a371-02d23ca6cb3c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1e1467-3bdd-4724-b6e7-a6f9fc1c48fd", "sighting_of_ref": "indicator--5b1ef3fa-e49e-49d6-a371-02d23ca6cb3c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10018b2-a516-4cb9-a3a3-7e20a7853b98", "sighting_of_ref": "indicator--950a38f0-35bf-4d13-ac7e-b909053b295c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7c684c-9b7e-4aba-880f-7e9fd7a2c5bd", "sighting_of_ref": "indicator--950a38f0-35bf-4d13-ac7e-b909053b295c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36149c2c-1042-4b6c-8da5-a04c12a9fc69", "sighting_of_ref": "indicator--64f8e2c3-b286-4462-818d-cd36c0b47e69", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5255aead-1826-4695-a11c-eecbc078ea2f", "sighting_of_ref": "indicator--64f8e2c3-b286-4462-818d-cd36c0b47e69", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b544cc81-6ce3-43a3-ba0b-8a2a2e3955fe", "sighting_of_ref": "indicator--56ca0e51-ced0-4386-a75d-d8846f77adc5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e386ce-9dd5-4fb6-ad20-40b9a30d530c", "sighting_of_ref": "indicator--56ca0e51-ced0-4386-a75d-d8846f77adc5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e79f84-dbc2-4e6e-8bd8-d9bc25ccdecc", "sighting_of_ref": "indicator--af4cb1df-17b6-454c-80ac-5b9c80d15b0b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a3771d-7b17-4c69-89cf-db0c85f051ba", "sighting_of_ref": "indicator--af4cb1df-17b6-454c-80ac-5b9c80d15b0b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846c8aa6-d64f-416d-9ef2-11a57f936461", "sighting_of_ref": "indicator--d7c0f548-1625-476e-85e0-41f6c8c8a847", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43804556-3ee5-48c4-a6f8-104113a08df7", "sighting_of_ref": "indicator--d7c0f548-1625-476e-85e0-41f6c8c8a847", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2eecab0-c378-4c2b-8f04-dc03a10b0ed9", "sighting_of_ref": "indicator--75552e7d-8665-48c6-84db-6f19c4958692", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c891190-5898-4a65-af8f-46364e685aa5", "sighting_of_ref": "indicator--75552e7d-8665-48c6-84db-6f19c4958692", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27668fbe-25e6-44ef-809b-4bc1ede120bb", "sighting_of_ref": "indicator--5c24c014-2a17-4ba6-8818-f872588b0fc3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de352d2c-9939-453d-adaa-f083c7594ecd", "sighting_of_ref": "indicator--5c24c014-2a17-4ba6-8818-f872588b0fc3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394ae116-519c-41c9-aab6-373259e63e96", "sighting_of_ref": "indicator--40e6a67f-deeb-48c3-912b-7a4e5a794185", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1989528-5c82-40f3-b259-b6fc33035d88", "sighting_of_ref": "indicator--bc285555-63ef-456a-88a1-4b1a4133563c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55a96dd-864e-473c-8ccf-3c03bf19341c", "sighting_of_ref": "indicator--62e1dc14-75dd-4539-b140-38af360de1d0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3f948d-5305-4d21-8571-59a3708e2477", "sighting_of_ref": "indicator--62e1dc14-75dd-4539-b140-38af360de1d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82983a94-4a55-4933-b572-7b6ad8ec4f7d", "sighting_of_ref": "indicator--cd7f6b32-164c-4c1f-8a24-b78bb9960256", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666877b9-59d1-468a-9f7f-7d3ff7865711", "sighting_of_ref": "indicator--cd7f6b32-164c-4c1f-8a24-b78bb9960256", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7220b8b-28bd-411a-8d46-e04ac80ada93", "sighting_of_ref": "indicator--fd94648f-2312-458b-9c8e-d0f0c0f892a2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5dda66-5756-4dd4-8496-b773948a2b67", "sighting_of_ref": "indicator--a1910b87-2fe2-4c79-b251-be2f8f27164a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b434ac-db05-413a-a5f2-1ecdbba1ff6c", "sighting_of_ref": "indicator--a1910b87-2fe2-4c79-b251-be2f8f27164a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021b7314-0d00-47cd-abd2-ed15feaa6737", "sighting_of_ref": "indicator--d21da07c-c0ab-4a72-9bcd-98f7e8bb74e6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14136e4-4e26-421b-9aa7-8fa3ad25eea9", "sighting_of_ref": "indicator--03b04533-a2f9-4e17-bf80-976abda1446a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633bda2a-fe3d-4f9a-9019-e3176bf95d47", "sighting_of_ref": "indicator--583061aa-575b-4a5b-9847-dfb8f7940928", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bb33b6-476a-418a-bdd7-842035ca41f4", "sighting_of_ref": "indicator--47bbc3dc-6a81-44ff-a72a-652581e9e54c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b398a11b-3907-4424-a768-7b9e5e38b2ba", "sighting_of_ref": "indicator--52dbd9c6-ecbd-49a7-b82e-cd69bcbecc04", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658f8ddb-1f0c-4f20-905d-0097ecdf9705", "sighting_of_ref": "indicator--01cc4dec-7b37-4d38-8cad-38f7107e9875", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553750b0-4261-41e7-978a-6d5e42a6db15", "sighting_of_ref": "indicator--8aab2fca-a619-460a-9778-026f421f4472", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7245e83a-8d35-40d0-800d-7c28e5b57418", "sighting_of_ref": "indicator--3b4fa92b-b634-4cfd-9f69-5ff5f140de5c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5ee8b7-51e6-4190-aadf-05f7e237fe17", "sighting_of_ref": "indicator--6b47faea-549b-4a6d-a8aa-8602dd472682", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7713e1c8-f6e6-492e-925a-507c2389fbc2", "sighting_of_ref": "indicator--a680bea5-946d-4904-bf58-a2908f19f10c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8667fa1f-6f89-40a5-8405-5f176c832c38", "sighting_of_ref": "indicator--52d104f4-ec0a-4a90-a0a9-d8f9d0e8c2bb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04491fd7-9142-44af-a8ea-9b136064edc6", "sighting_of_ref": "indicator--6dbb84f2-ed01-461c-9285-28b3a51701da", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca38eeb-7afb-414a-8e08-77f93dfcfb7d", "sighting_of_ref": "indicator--0092330a-a852-4467-b961-f9606ef7662b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431a41ee-9de0-4b5f-a245-5123ba254197", "sighting_of_ref": "indicator--0092330a-a852-4467-b961-f9606ef7662b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de73434b-adf9-480e-ac03-1b5bf64f94f7", "sighting_of_ref": "indicator--60a28528-adfe-4551-bfb2-858501f240cc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28dd6a96-6dd3-4474-bcbe-94a00576ea6e", "sighting_of_ref": "indicator--5a41afec-f534-4562-807a-616bd18885af", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7972bced-073f-4c0e-9774-0a3cf76d122b", "sighting_of_ref": "indicator--5a41afec-f534-4562-807a-616bd18885af", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece10077-cdab-4edf-98e6-f5c40d85fdb2", "sighting_of_ref": "indicator--3413a007-06a7-409a-be3a-5a55a934b868", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0f9e2c-cb70-464c-b623-f4c5d3513b23", "sighting_of_ref": "indicator--00c5a359-8aa9-4929-99af-2aa8a724b0ee", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11a043e-d627-453f-8c1f-8c95016ba876", "sighting_of_ref": "indicator--91d0bdf5-df18-4f31-bc23-0d9b0fe0dc36", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60a9604-4aa8-4922-9af2-559b72938aae", "sighting_of_ref": "indicator--1bcf48fa-409a-4d6d-80d2-7783db6ac1e9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09969c8f-c60f-4154-ac72-9e0968682b66", "sighting_of_ref": "indicator--32252a4a-62fc-4f71-90b5-04f7f722f422", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da20c75-e757-4c0d-a22d-f376e65e586d", "sighting_of_ref": "indicator--f194ab6c-7956-471a-bcf7-15ca5d5dd072", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d6c572-e7d0-4e9d-8ffd-ce345eabba68", "sighting_of_ref": "indicator--90e2ae0d-45cf-4493-b9ee-6a7d2a4804c2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ca235c-25d7-44ce-890e-d353f7be0eb5", "sighting_of_ref": "indicator--da2599ae-9420-4c20-90c9-f47b78901a9d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f724e14b-23c8-4e80-9fb2-e157bb014f00", "sighting_of_ref": "indicator--da2599ae-9420-4c20-90c9-f47b78901a9d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c75379f-f4c8-434d-89f1-5e1c7d8b3e6a", "sighting_of_ref": "indicator--c1853aa5-4d7c-4a52-81fd-9d160ab21289", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f403f88-e056-4534-b0ad-150a5191bf04", "sighting_of_ref": "indicator--835cb745-123b-41c5-a162-9991d8fa432b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bf9e61-73e0-4a28-bcc4-3d6058ec369d", "sighting_of_ref": "indicator--835cb745-123b-41c5-a162-9991d8fa432b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be3708d-2ede-4e01-8497-792084177be0", "sighting_of_ref": "indicator--95a6da40-800b-4ef0-a102-e00ace10f4d5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047b6510-d280-4b59-9bc9-2b61026970ff", "sighting_of_ref": "indicator--5aa74925-1a46-4ee4-8a1d-9461507d4f93", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8d4aae-820c-41a3-a98e-e12333c08bbc", "sighting_of_ref": "indicator--e95836bf-c821-4911-bb68-d77c42e40239", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d0d514-7418-49a7-85d3-c3e5fdc45398", "sighting_of_ref": "indicator--e95836bf-c821-4911-bb68-d77c42e40239", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d168d1-76e0-4a61-a00f-c15c6a07b86e", "sighting_of_ref": "indicator--1a16078f-8004-4a47-847f-cd71b3141472", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24bb5e5-a857-477f-a876-b94766ecf2d7", "sighting_of_ref": "indicator--af31a699-4165-431d-bb60-fbda67441b86", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70f4a36-c85c-4e4d-b6fb-8be2dd9011da", "sighting_of_ref": "indicator--f67cacb2-b3e4-4c00-8ef9-cb2c4a398d1e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47c9446-edfa-40f5-9b8c-7bf5fcf56ea9", "sighting_of_ref": "indicator--861aa570-c231-4d19-ab2e-7b9c2faff78e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185b07c8-bd50-4fc4-8274-0761283d8f7f", "sighting_of_ref": "indicator--3e73c7c5-5dcc-4170-a750-7dfec94dcc37", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6fd16f-dcbb-45b2-a5c9-2c479c280ab0", "sighting_of_ref": "indicator--86e1f653-d170-4640-9325-16c6a4f7d378", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9369d9f-25d0-4324-913d-b29585d12595", "sighting_of_ref": "indicator--86e1f653-d170-4640-9325-16c6a4f7d378", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13a63f7-24e4-42d5-b09f-7a718661d60e", "sighting_of_ref": "indicator--7b1459ad-4806-4b9d-ad90-b5f0ddebfed4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d76dcfa-ef41-4f4a-a127-57021a313134", "sighting_of_ref": "indicator--3f3d767c-1cd1-4492-aa07-68c0e448b06a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f025c73d-fc3f-475f-940c-e4ab44adb480", "sighting_of_ref": "indicator--3f3d767c-1cd1-4492-aa07-68c0e448b06a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb9ccfc-a5a9-4dc1-a1f9-6ed248e6f096", "sighting_of_ref": "indicator--eaf84574-602d-4fe0-8a6b-d05280048985", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3644a0e9-3684-4d11-b521-5f5d4c163c16", "sighting_of_ref": "indicator--b2d3d4ce-270c-4a41-bf23-f983592c91e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d852742-9990-4b6a-a272-366f7ea0dc3b", "sighting_of_ref": "indicator--47d9bec7-be64-4c22-993e-a885f48da954", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ea03e9-7a97-47bd-befb-b902c0cbb902", "sighting_of_ref": "indicator--d80c3fc7-d656-4dd4-951f-8683b74956fc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc31aaa-54dd-418b-b0a4-9b6baffd94b9", "sighting_of_ref": "indicator--6bb34de1-0f38-455b-a30b-edf09b22def0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6291776a-8a03-4eb1-9445-395c54b54b61", "sighting_of_ref": "indicator--c258ba43-da38-4b78-b4b7-3e3a32679518", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa3dfee-7860-423e-891a-4fa1e2c434f9", "sighting_of_ref": "indicator--13934951-0c73-4aa3-8b5b-339771cb9ac5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c23b05-0bee-4053-9671-57726bcca37a", "sighting_of_ref": "indicator--c65e4efd-2c0f-446d-954f-f9ecd7e12d06", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268eb438-7b99-45cf-bf96-04c85059ff00", "sighting_of_ref": "indicator--e99fb206-aa67-407c-8d6b-785eae2fde02", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8c4d95-9bd3-47e8-b96d-189f2b09f318", "sighting_of_ref": "indicator--df9c6c38-45cd-4d06-ae98-8dd684f8536a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec75498-b155-4238-952c-5c89fab0ed62", "sighting_of_ref": "indicator--df9c6c38-45cd-4d06-ae98-8dd684f8536a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce420d1f-b6e6-4247-979d-a042afcacfe3", "sighting_of_ref": "indicator--f4c08194-fe75-44c9-8531-833c6f0ddbe2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4466522-0b1d-4e13-91ba-9a107595d841", "sighting_of_ref": "indicator--61d14b10-2369-4822-ae9c-4e50ddd53de0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5842214a-6fc8-4523-be7f-e0b0179f63cc", "sighting_of_ref": "indicator--fe86166d-c901-4892-8290-783bdc443e0d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704bd39d-ccbd-42f8-bdd7-b7757d643304", "sighting_of_ref": "indicator--1b9d9121-71f1-43a6-acf3-078a36bff3ff", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ed8ca1-7993-4afa-bf79-be2c6c2e4d48", "sighting_of_ref": "indicator--7724aa2a-0be1-440f-841d-a7af4d63cf8c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98d40b2-50b4-4d1a-8dc3-a38b6169b060", "sighting_of_ref": "indicator--37fb9e12-f911-4047-bf3f-0ceb1ad7ffae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759c15a7-d9c3-4038-8218-46e35756fadc", "sighting_of_ref": "indicator--588c61bf-ddd1-414a-a677-63db17796f00", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b73cd03-d2d4-4aa9-a6c1-dee5711d89d2", "sighting_of_ref": "indicator--650f0b28-9a5c-4ea6-a6a0-6a712e1f90f5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbad363-1402-4371-afe0-db4f4d33a76b", "sighting_of_ref": "indicator--650f0b28-9a5c-4ea6-a6a0-6a712e1f90f5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84139117-2a7a-4650-811d-ee45624c95e9", "sighting_of_ref": "indicator--86963bee-68db-4b5f-a44f-fa0126707de9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec7703b-f5b1-4926-8e0a-9cb70a5d0517", "sighting_of_ref": "indicator--37cf19d6-01ff-45c3-b6a2-613089d9ccd4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae567daf-0214-4512-8c27-d8b0ca09891e", "sighting_of_ref": "indicator--bcb715f1-5eb1-49a5-a1fc-f322448644e2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632c2fac-42dc-452a-bd6c-c82543d908af", "sighting_of_ref": "indicator--bcb715f1-5eb1-49a5-a1fc-f322448644e2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec05c45a-eec5-408f-8a92-c4174d47c618", "sighting_of_ref": "indicator--1abef793-8755-47ea-a97f-6c64262168df", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e294b8e-52c4-4d2b-bab7-4c692fbd7055", "sighting_of_ref": "indicator--1abef793-8755-47ea-a97f-6c64262168df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4cee2f-aac6-49e1-a652-c60ba4f2691d", "sighting_of_ref": "indicator--836ed2af-d8f5-46c1-acf0-69f5c2515607", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbb7f35-7f40-45a4-8ac8-f720753691c9", "sighting_of_ref": "indicator--571f6371-fc78-4162-9af3-2edbcf2bbc8c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef88a784-8b81-4055-9f0e-7740d0a9cb2d", "sighting_of_ref": "indicator--d4820601-97ce-490e-919c-64b21678f41e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600c8e1b-900d-43fa-97a7-4759c52874d2", "sighting_of_ref": "indicator--53bda80d-8b63-45a5-9b6b-9da840614471", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2517e200-9709-40d8-aa24-8e5955f475ac", "sighting_of_ref": "indicator--53edf4a7-51e5-4b18-8bcb-356a196b3085", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563ea8f4-80ed-4bd9-807a-80babdd0d51d", "sighting_of_ref": "indicator--36821fcc-349e-4906-b0af-79776dd8330c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335fbc8c-e6d3-4c27-8df0-25311b67fb4a", "sighting_of_ref": "indicator--2a94fbfd-ba3e-4d2e-bfa0-7bb75bee35c8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614e720b-2d69-458d-83e4-f576cb9ef1f8", "sighting_of_ref": "indicator--616c5cda-e90b-4065-aa4e-ad419b9be95c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3ba287-3eb1-432f-afeb-42030c104e63", "sighting_of_ref": "indicator--480075f5-5bc8-4d1e-928e-e6921d6d7fd6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c066dba-bfa9-46db-833c-65a53c107b41", "sighting_of_ref": "indicator--b9882e84-3ac7-49c0-a40f-0d8d5949e967", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba496251-5893-4e51-9806-b370e0f09a3b", "sighting_of_ref": "indicator--2891ab3f-616f-452d-bd7b-c87154057afe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3263481b-85f1-4154-b5c9-a93b0bddee18", "sighting_of_ref": "indicator--98959047-7ef7-41bd-b04b-9b5a9bd740bf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401ace56-0925-4efc-a971-26883762d3f6", "sighting_of_ref": "indicator--98959047-7ef7-41bd-b04b-9b5a9bd740bf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd32547-6997-498f-bbcd-87d1da275cc3", "sighting_of_ref": "indicator--eb11a1b2-d49b-47c5-8329-07edff516c60", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f082501-5c32-4263-90bb-d56fd455c97a", "sighting_of_ref": "indicator--6535fbac-21db-4f24-b0dd-f488c435bfd8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32025df0-34bf-43e4-b18b-1f25b968cd68", "sighting_of_ref": "indicator--6c517d2b-6f5f-4cb2-8343-fb562db7d120", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0df66a-dbb9-41f0-86f2-0cded3a8bb41", "sighting_of_ref": "indicator--e10b0cc8-3467-49a3-b5c2-d597dc666a33", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8fd21d-6509-493d-ba04-d69115d80e0d", "sighting_of_ref": "indicator--8dae56f2-697f-452f-b558-fd943500ce6d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf6d75c-5eda-4e0f-bc1d-8f7fedd5cfc0", "sighting_of_ref": "indicator--22c785f5-533b-40a8-88e9-cbc2b2184c8f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c92945-2233-4e8d-83c5-bd9e53e70e96", "sighting_of_ref": "indicator--cb0d314d-331e-4417-8ec4-f7abc986f262", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633d12df-f082-4021-b01e-8aad9d4b6e0d", "sighting_of_ref": "indicator--fb9c82f1-41bd-4ddd-9779-82fe4d35121b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4c5c51-6ce4-42fe-b66b-04288e340a08", "sighting_of_ref": "indicator--7ed12328-4f52-4f1a-8cd7-b23be2e553e8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7d1316-1688-4803-989c-ec5beef4ef8f", "sighting_of_ref": "indicator--0b8f983c-236b-4f58-b3fc-d13700d72a5b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8cf68a-d927-4bb1-9f51-6cf2c63ac974", "sighting_of_ref": "indicator--b064c49e-7080-44a8-95bb-4939b36a58a6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4547308c-8a68-4023-b417-885c7165f08c", "sighting_of_ref": "indicator--321414a0-636d-4a82-b0ea-41b3a11766f1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af60acf-20e9-4a97-b36f-d65f656fa273", "sighting_of_ref": "indicator--1f65575a-1b02-4a4b-a4f2-ad68970ae590", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b019d47-65ac-43f0-9844-d5a467d3cf99", "sighting_of_ref": "indicator--dfa32181-7203-47be-aa4a-ddaf364c36fd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b39972-95a8-4b42-ba6a-292a5b37e77d", "sighting_of_ref": "indicator--bb1e068d-fb9b-46ce-ad61-f1d6faa08977", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255019b7-69a8-4974-958e-52d8286b8bf2", "sighting_of_ref": "indicator--d54873a7-3f6b-4714-8d32-7bb683554cd4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf9db10-3d2a-4390-8338-972b28a6fa39", "sighting_of_ref": "indicator--63c9a9c4-0560-4470-b56a-2927a43fc188", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468699be-f6a4-47a8-91bc-d30c993dcdbd", "sighting_of_ref": "indicator--c15ee66f-86fb-4d7e-bd52-6c366c93798c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4c55c6-3df3-45dc-aaef-6a77e8a94710", "sighting_of_ref": "indicator--03ac939d-81d5-48b6-8a4b-8030ef51f723", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c42440d-fcef-40f2-bd61-b8379c6fd9ff", "sighting_of_ref": "indicator--adda078d-2632-47ad-9a2c-9661635aa0c7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e36763-539d-48ee-8466-f5cb4322014d", "sighting_of_ref": "indicator--2e7112d8-b8c6-4e0d-99dc-9eb1ee39f78f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1d0343-6fb9-44e1-b482-e6676c09bac4", "sighting_of_ref": "indicator--7277a317-6fb5-4f23-9958-e2bfa4cf2146", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2136a4-e1df-4107-a7c8-88b82f87ae05", "sighting_of_ref": "indicator--7277a317-6fb5-4f23-9958-e2bfa4cf2146", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc6ebf9-78ae-462f-8752-a36edad483a1", "sighting_of_ref": "indicator--f5bc4fe4-a1ed-423d-92c9-113c5f9a9855", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd7e61f-b660-44e9-90f3-946d1216f556", "sighting_of_ref": "indicator--337a67a3-95c8-4257-8e41-8ff68d1723f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb8feee-66bb-4725-b8c8-e99a417bd2c1", "sighting_of_ref": "indicator--8e50bcd5-2382-4478-8c5c-0da2232a4f2a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c391f3c6-df0a-4274-a257-0f98d38a33f3", "sighting_of_ref": "indicator--654e4e02-badd-44a2-b122-2e74b9a7b98b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0526dd-b93d-4a00-ba10-1e2d6e016525", "sighting_of_ref": "indicator--e52eee1e-547c-41ca-b2c2-a525b6a1c9ad", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6979ca23-d0f7-4ff7-8691-a0ce338e63e2", "sighting_of_ref": "indicator--56161c04-9615-4872-872f-dfe1e05a4c45", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b992ed8-bdb2-491d-a0d8-51194f8308ed", "sighting_of_ref": "indicator--41c782a4-8eaa-4434-a5ea-49944ae11bcf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0e7047-9240-41d7-8432-f9cd3bbd1c8c", "sighting_of_ref": "indicator--0872416c-acad-4706-9777-5c7c8cd4a1a3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5698cd-a687-4801-9295-0cc087f09997", "sighting_of_ref": "indicator--86c53ed2-37ea-4928-930e-a1b7d659b793", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19c640d-9bf7-4a24-b0c8-cca006b672f6", "sighting_of_ref": "indicator--0926f48c-faa0-42b2-b3e3-60eb690cf913", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baaf5526-4e08-4664-834e-f49ea9bd439a", "sighting_of_ref": "indicator--f067414e-5d86-425b-90f6-0b25e63b7965", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee4d313-983c-46e7-acd6-599c9949cb4a", "sighting_of_ref": "indicator--6483c8c5-66d0-4f89-8cd5-685b707daba5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc4a8ea-2797-427c-b62b-544715ef5f3a", "sighting_of_ref": "indicator--0b43c36c-81cd-4697-bc1d-adc8bfa56a8a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd9fca1-2062-4cab-bd59-8263014e5e36", "sighting_of_ref": "indicator--aa6b0f5b-3420-4dcb-8bff-0b004e05864f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6b115b-ceab-46d2-aeff-367e848ca001", "sighting_of_ref": "indicator--a226039d-70db-43cf-8d3d-31c09d234be4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f908331b-9a0a-41a7-b345-fe6a06ffe837", "sighting_of_ref": "indicator--153bf706-fd89-4704-b408-5a36635dff30", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03994414-e9df-4c5c-9012-1dbc90edf588", "sighting_of_ref": "indicator--9fa87119-fc75-4d6a-bc02-c89c4a6ca1f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46333580-2e29-47fc-89e7-5f294d5dcd87", "sighting_of_ref": "indicator--48401fb7-290c-4bbe-8424-1ae38911a55a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc55a145-c2fb-4572-a2d2-9ad7f4444983", "sighting_of_ref": "indicator--05b577d9-1c2b-4d6e-b4bd-63608ed90477", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791d2c35-93e1-4006-b4c7-b6f6b37ec665", "sighting_of_ref": "indicator--9091d138-9794-41da-acd8-8d322376f9dc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068314a5-238e-470f-8521-68d1a34cf77a", "sighting_of_ref": "indicator--0df30473-4502-4293-9ff8-9beade3e22e6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7cc78f-8489-4fff-af96-ab9aeff7337b", "sighting_of_ref": "indicator--788da45a-119b-4d30-b881-983fc553668d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb6a834-bfdc-43d2-9000-97d54f979a2a", "sighting_of_ref": "indicator--9ee9a84f-674b-4bfd-8246-c997d01fc6df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092cf474-cf63-4e5d-a44d-2107d22fb577", "sighting_of_ref": "indicator--3aeece78-9d87-49ee-913e-84b6f201cc1d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d8115d-73c8-42ba-8001-79d24a19da2c", "sighting_of_ref": "indicator--37457696-262b-4cb9-9f9b-72a2913acd43", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87d9576-2554-4e8d-83e2-90c2d095d94a", "sighting_of_ref": "indicator--4ac73904-dc12-4de6-b5f1-5757ea2a0ef8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8b5e86-648b-4ae0-9991-a88934d5bc79", "sighting_of_ref": "indicator--87318a0e-1e7c-4f86-bd98-74adeec78c78", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef97446-67a2-4207-bec8-68d602cff4ef", "sighting_of_ref": "indicator--88e1ffb9-a4fd-4113-8df7-743578803327", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff34fa0-97a5-47f1-9487-5eb7c976b6a0", "sighting_of_ref": "indicator--10256c87-e243-466e-a326-5719b7530241", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450247ce-782d-49cc-bda0-d17aba45935d", "sighting_of_ref": "indicator--96f743f7-23a1-4953-994a-bc7d5a214a0a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e5857c-f9c9-4985-8d76-1f4ffa7025ac", "sighting_of_ref": "indicator--8bf78429-27cd-4c2e-8418-21ec7d4a0316", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea496b7-7d3c-4363-84cc-bf6488aaec21", "sighting_of_ref": "indicator--c319347b-826a-4275-b174-fe9dd96f5ca4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea744a7b-452b-4a59-b325-69ea94e22124", "sighting_of_ref": "indicator--a0ee0be0-f766-49b6-974b-6c0289bfb9b6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2448b7b-ada4-41c2-83d0-33db8f0bbf8c", "sighting_of_ref": "indicator--acff01a8-ab86-46a3-9335-c7bfcdf44791", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728ee644-e0cb-4555-9d7b-0f042394f3de", "sighting_of_ref": "indicator--baacb116-1e9c-4449-9c56-9dcc691de398", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff850f8-69a0-4efe-8ec2-433df780573a", "sighting_of_ref": "indicator--74cc7b89-313a-41c7-b8a4-fdc5de21eab2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb0cd3b-4a3b-4390-8336-4d3329293a60", "sighting_of_ref": "indicator--b63db703-c7bf-445a-ba88-f3f281a7df9c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8719ab4-2e04-417b-adfd-436db8b5f100", "sighting_of_ref": "indicator--bdb7c5ea-2c88-4a39-96dc-7947a8f5f3e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7cfbbd-480c-4837-9a80-12772ef635b4", "sighting_of_ref": "indicator--15b73c57-f158-4dfd-88cb-8439c6e7e02f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62b1e80-95fe-4ed6-8132-1038b044ce99", "sighting_of_ref": "indicator--4a6da640-7447-4af8-b4cf-4cd7743e7b03", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54630270-16a9-42fa-8009-10c8e075ddf8", "sighting_of_ref": "indicator--37497d18-627e-4a49-a7aa-79b9296eac2d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3948acc-9dd6-4406-8e48-67ebde249cf6", "sighting_of_ref": "indicator--5f8b01ba-f110-467b-bb06-f5eb14fbfac9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb5ed45-31a6-443b-9fb0-1661c17f920b", "sighting_of_ref": "indicator--5f8b01ba-f110-467b-bb06-f5eb14fbfac9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c2f1ee-9b7e-4c01-bd33-a7ae1d2dd274", "sighting_of_ref": "indicator--dfad89eb-33a2-410a-b8a3-efb45c575111", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da9245d-4a97-4cfc-8590-cc487da6294b", "sighting_of_ref": "indicator--bccc5b7e-227d-4b46-bb09-4def09a82971", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fade542-6d57-4180-ba92-e9556c05dac0", "sighting_of_ref": "indicator--7f986995-c4d7-4ebf-9a37-accde99100d6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b9701c-b0ca-4d9a-afb2-f0e39044a4ad", "sighting_of_ref": "indicator--8ad7e562-1474-480d-880d-03fc5c82c871", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fe77ea-2196-4dba-bd53-2d7d8e9e4861", "sighting_of_ref": "indicator--519f9a8a-3143-4002-b728-0214b84a7b31", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf797d15-bd45-43ff-a5e5-32cc74da5822", "sighting_of_ref": "indicator--3f2ac1ee-10e5-4497-bb66-b3e48e7e59d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de11ebb-28de-4312-83e2-0fb934e27e54", "sighting_of_ref": "indicator--398201d6-5778-4270-a82a-872bf976373d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f14ea45-f098-473d-9a0c-1575e803fc20", "sighting_of_ref": "indicator--c5c7f21f-38c1-4d54-89f8-e19be6d67463", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16ef693-d180-48ca-b0a2-454693673e26", "sighting_of_ref": "indicator--30369f81-a3a6-4b18-b4b6-8ba7859a54e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26318835-731d-492d-91e7-ff264587b749", "sighting_of_ref": "indicator--9ba9454d-35b0-48c4-991d-e705832da7b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f437b354-8cfd-4a02-8a70-12af8c557dd1", "sighting_of_ref": "indicator--9a3fe342-d2c3-4254-8326-5049365be9f0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8c14f9-6976-4242-90c6-fa724366d5c6", "sighting_of_ref": "indicator--81970381-224c-49a2-8546-b6d4bee867a1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc24049-db90-4955-8b0c-b215744b5341", "sighting_of_ref": "indicator--0d8bd914-6dee-4c8c-a4a0-b86c68250422", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943f4d31-f557-4283-a984-6aef0803ed19", "sighting_of_ref": "indicator--0d8bd914-6dee-4c8c-a4a0-b86c68250422", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cbdc6f-42e6-4410-b884-6958fe725266", "sighting_of_ref": "indicator--ab62b82d-a70c-4abb-86b9-147a0b53bc9c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c32e620-7059-4fb7-83e4-022413f03bfa", "sighting_of_ref": "indicator--ab62b82d-a70c-4abb-86b9-147a0b53bc9c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f2e63f-ed83-4598-a706-f37c77353d20", "sighting_of_ref": "indicator--3f0a6216-1bda-4e26-849f-92e7cd35ce24", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891e040b-febb-4000-804a-8a9a7b6d8569", "sighting_of_ref": "indicator--b914ea5a-57db-44d4-b77e-64407598e875", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f225d4-a896-422d-a40f-a301dbeeaff2", "sighting_of_ref": "indicator--e8cd69eb-921c-4102-9b7f-e79972e14120", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ff9a2d-121a-41d1-8391-77672ba92bf5", "sighting_of_ref": "indicator--42fd4d0b-15b2-440c-93dd-9e1bd9d3606c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09199d37-8c10-4e44-8f2c-f5381c9ee47a", "sighting_of_ref": "indicator--ecb83065-a04a-45fb-89bc-0836adf5efeb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b813f67b-b2e7-4df3-a560-5f011ee64f69", "sighting_of_ref": "indicator--3b31b8b0-ec0c-482a-9050-9f3624c1dc67", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9876dcce-d4c9-4c23-ad31-00b76c164c58", "sighting_of_ref": "indicator--3ed6ff7e-d773-40e6-98e6-69299a2678e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a59cb7-9db2-4319-9519-2e9aeb41272a", "sighting_of_ref": "indicator--5370e0f8-b3a3-4370-a71d-59a22285a284", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3922b1-dfab-4a2e-9ae4-0605c0b52639", "sighting_of_ref": "indicator--1db6d657-4e1e-44d3-b3e3-5ac621a7a304", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7319ac83-b8ed-4237-a15c-3b6dab4baa86", "sighting_of_ref": "indicator--c51ba00a-f8d9-4298-bdd0-d818f79f0e30", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ea6c2e-597d-4041-8554-5312ad79f43f", "sighting_of_ref": "indicator--17cd77ea-3813-43fd-bac0-9dfb2127743b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a8661d-c960-459c-84c0-002f3de7de06", "sighting_of_ref": "indicator--000051bc-d6cd-4c1b-8ff1-b392a275d725", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236c20d2-cd92-49a6-9071-de9d19faa754", "sighting_of_ref": "indicator--af29cc8a-df18-4081-8439-3d3b24ac8d1f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9203a7a-d4c8-4dae-927d-16217ea32ac7", "sighting_of_ref": "indicator--53d2a3f3-bff0-441d-b6ee-6c636bcf230a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb1791b-1d39-42d9-8dc1-82361a685a8c", "sighting_of_ref": "indicator--6ca04c26-19b7-4abf-a82e-78a598db3bb5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404a9b6a-7d2a-414a-a54b-cbf68868dccb", "sighting_of_ref": "indicator--aaa29687-3475-47cf-96c0-3d35ca896753", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f37d11-4270-45e6-a146-6041c99f9b8c", "sighting_of_ref": "indicator--1aec390a-8fe2-467f-87b2-db0b5b2f34da", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0ba130-f3ef-4d9c-933d-0d60fd502d39", "sighting_of_ref": "indicator--ac6ea242-1213-426c-87a3-b9a5449e23a1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d576e48d-d7e6-4c5a-b850-0ade8aa1cbfe", "sighting_of_ref": "indicator--626ad271-71fc-40be-8a24-c05829b79690", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b09a3b-772b-4c28-b8f0-cc15b1e64af5", "sighting_of_ref": "indicator--8ea00295-d00d-49c2-83fc-a8f19e858feb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed20cdf-f35d-4636-aac0-ecca3f3cfd35", "sighting_of_ref": "indicator--b736adfb-ee1b-44c3-8f1d-319e859e992e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0428c24d-eb15-4f92-b6a6-73bca2cbc99c", "sighting_of_ref": "indicator--d8510ce0-0c8a-4c2b-8de4-562ac532675d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65f1ae8-1eef-4798-94d8-625862a055e2", "sighting_of_ref": "indicator--d8510ce0-0c8a-4c2b-8de4-562ac532675d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18e09e7-d237-438e-b894-d4814223f9a4", "sighting_of_ref": "indicator--69ab3fe4-7d29-491b-8640-fc841e899a4e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f9d4a0-99f3-41b9-8c4b-98e5ff01fb84", "sighting_of_ref": "indicator--06a949b1-ac92-4fa8-8b3c-b2610b1a7002", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cdc171-66c9-46aa-8d49-1c1899887f10", "sighting_of_ref": "indicator--2758e016-3cae-4ec2-ab30-e3f565fdab33", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81898d8f-db00-45ec-bb1b-c47f687aa6ea", "sighting_of_ref": "indicator--31bf24bd-2dc8-4481-8db5-3ec9e11dd1b4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613cb501-19b0-4ac5-b75a-261383c43e2d", "sighting_of_ref": "indicator--0d693e48-754f-42ed-a093-dfcbfeaac405", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe89a2ec-b2bf-4905-8bc7-bd4555967973", "sighting_of_ref": "indicator--798b510b-e8ef-47a1-9e23-520e6059fa1b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f537787-fb47-48ad-9370-708b18e715c2", "sighting_of_ref": "indicator--531e4be8-a2d0-405b-baa8-af6983e8345b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75db94cd-d8a2-475c-a672-aebae02a6a88", "sighting_of_ref": "indicator--27655ee4-fcc2-4f79-b905-42260da5756f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213c1a78-7b79-46a0-8754-d265df3a8faa", "sighting_of_ref": "indicator--c73a471e-dd4a-4f27-8734-6c793d89fda3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b0fbe0-86f7-4a01-a581-381ac0f1704d", "sighting_of_ref": "indicator--e0db0132-3716-4356-9a7c-bef7a3aafb31", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b212861-cb5f-41f7-bec5-efbfd32eba04", "sighting_of_ref": "indicator--777004aa-ea2a-4a84-a2ca-ebb32cabc047", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101635f2-ddcd-4e01-86c6-0ddd74cbb6b1", "sighting_of_ref": "indicator--337ad7f4-44b0-4a1e-a62b-24e8200a7e71", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9d2b0b-9a3b-4785-a17e-7fc8073d5aa4", "sighting_of_ref": "indicator--52757723-569f-4e51-a5bd-06550c0c8a02", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8c64f6-ff32-4905-995b-178105badc1e", "sighting_of_ref": "indicator--5b3a717d-8c51-44a0-8ba0-c76a284a3e22", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43024001-889e-4736-8bd8-f1438840df95", "sighting_of_ref": "indicator--51699d74-c095-4b83-81ce-d4208dbe2f12", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2514f1-4ba9-46b5-bfbf-937cbef9ab6a", "sighting_of_ref": "indicator--8452ca7f-c2ef-4cd9-b90d-3db120c3e675", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2a9c1f-ec2d-4515-88c0-d48fdcbabc74", "sighting_of_ref": "indicator--5384c94b-724b-4336-b158-0c7ba735132d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28b3c3f-9c20-453d-a7e5-f847ce470e08", "sighting_of_ref": "indicator--5384c94b-724b-4336-b158-0c7ba735132d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec91515-640c-4cce-a01f-63d1391da407", "sighting_of_ref": "indicator--9f0f7ec0-6f3d-4c98-abd5-bb5239711f2c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6597213e-882f-47ee-950f-4988869e95a1", "sighting_of_ref": "indicator--c339839b-f330-47f2-afb1-94de4269d53f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268daaac-b276-4285-81aa-4735c9345a85", "sighting_of_ref": "indicator--05dfffe7-7a89-48ce-b13d-5f1b422b7528", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67eb24c8-4a8a-4af3-b20f-b5de353eb271", "sighting_of_ref": "indicator--d96f5130-d416-414c-808e-d456cf82b6bd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21a65f1-344c-4827-b70a-ba5249dced85", "sighting_of_ref": "indicator--de7912f5-9933-43db-b4d8-1d7aec11335e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1473fa92-79c5-4b59-82ca-c297c70a7684", "sighting_of_ref": "indicator--c8ebbdef-229c-4191-bbe0-54c61ba8af35", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce7279b-99e7-4a56-9a4d-ca11ae11df2f", "sighting_of_ref": "indicator--5bc022fd-275e-4423-93b8-c76fd0a7bcd8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed175b26-6ced-444b-bf2e-fcf5280c717a", "sighting_of_ref": "indicator--89176d5e-132a-4662-b519-35ba2c36de4d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af47471-a990-4dcf-a568-865e7b7107c6", "sighting_of_ref": "indicator--f6fa1b20-1ec1-4a08-b357-10e227796b48", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e29b60-a01e-489e-b277-2b8990e83733", "sighting_of_ref": "indicator--02ce6413-91f0-46d5-957a-5621f138260d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb73492-7246-48bb-aab0-36190b45073d", "sighting_of_ref": "indicator--d6bd9193-04b5-447c-b2c7-a2a1671448da", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c053318-6351-4a79-b0dc-8887e2ad4517", "sighting_of_ref": "indicator--0611f25c-faed-4280-bdb5-44a17d61ec87", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf33b977-7b73-43b5-8085-99a40f2d0025", "sighting_of_ref": "indicator--9eeff69b-251b-44ac-ae95-d0d0a2f1d257", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2d112a-d7d5-4b2c-8d66-1a4af16bd47b", "sighting_of_ref": "indicator--056d168c-f211-4b9b-b517-9c6abdddaa58", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e013af22-99bd-4ae4-bd17-60659e17f2cc", "sighting_of_ref": "indicator--491d84c6-c5c0-47a5-9ea1-7ad25d4f3471", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f1728f-0d55-472f-88aa-73bce86ca911", "sighting_of_ref": "indicator--2cf23527-915a-4c58-bb5f-8309a15ef5e1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41544f79-71c9-4d11-99eb-380adb0f8014", "sighting_of_ref": "indicator--cb7a35a2-fb21-4543-b2a0-cd420dfa9060", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2f98b5-4169-43af-863e-0a5e13901ca0", "sighting_of_ref": "indicator--8477a249-f3c1-40f8-9baf-9b68dcf80440", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7dcdda-e69f-4882-90da-40c5a90b172a", "sighting_of_ref": "indicator--ee37da2e-f9a4-4087-9570-f3b161e262ca", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4caefa-bd11-455d-a0e2-b5137d24eccb", "sighting_of_ref": "indicator--b012770a-a6ce-4cdc-a99e-5b9f1c089281", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd229b7d-3c8c-40f9-95c3-71706d31fa18", "sighting_of_ref": "indicator--ba2125db-de08-45b0-b9b0-ead244de0330", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e45bbf-a5ac-4d27-9949-ff1c19bd24e5", "sighting_of_ref": "indicator--1dc82c41-cc93-4d5c-8ebd-7076ad507831", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af8d650-5d82-4bc0-a19f-e821766e3b14", "sighting_of_ref": "indicator--5a186e9a-445b-42ae-84be-d60910a6edc0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3990be-f132-450a-8735-fe72c008343e", "sighting_of_ref": "indicator--5833650f-3a1a-4dc1-b03c-3bd48c0f0934", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726aefde-4abb-4909-b4cc-9afc4a7765ed", "sighting_of_ref": "indicator--c68c45cf-d038-4983-b618-dfabb03ece23", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45f63f4-99f8-4c38-87f5-0d019e1e9d2f", "sighting_of_ref": "indicator--2517c62e-3ab4-4b1a-96a0-0852a57e2a2b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6602881-d6b2-4df7-ac06-53f4d6463c5a", "sighting_of_ref": "indicator--ddf85520-e9c4-4dd4-97f4-c1a313364f19", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42ce050-97a2-419c-b0c4-27afd3d1744d", "sighting_of_ref": "indicator--886f6ae7-1a82-41f5-a344-cc5c1866252f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8447494-f3fd-497b-986e-b9cae3ea1918", "sighting_of_ref": "indicator--7323cbb7-eaf6-45a7-bc12-6bc342cb42e2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9cbb52-11cd-4d8d-88ba-5968b3ce3859", "sighting_of_ref": "indicator--a9740103-2b95-489b-8f4e-85fb31396b67", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270783fb-dbde-41b9-81c9-fd0863afed43", "sighting_of_ref": "indicator--479c6933-9e8b-4b22-8e5e-79e96e2fbc4a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443513c4-d864-40ba-9b12-0482edc79c61", "sighting_of_ref": "indicator--96303ce6-8940-426f-a0db-384662659dc4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35f490a-fea7-4cd5-a8ed-d2a94216daec", "sighting_of_ref": "indicator--8143ed42-4852-4157-8e5e-31dfceb656ad", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3094f43-e332-4068-b160-60781de7a471", "sighting_of_ref": "indicator--0f10c0e1-ed16-404f-bb1a-7cae36dc9adc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107d3b46-c23c-4cbb-87cc-6ebdb24181cb", "sighting_of_ref": "indicator--ede3f694-5655-434a-8ec1-8cbb65fd307d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d437112-563a-4077-b26e-64bd4e34ce36", "sighting_of_ref": "indicator--a3569e0f-8c06-4e48-a3f0-0fb3b56f528f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3c4fb9-0204-4683-8d99-84b71644e3a2", "sighting_of_ref": "indicator--cf6cd451-6500-43d9-b65d-6ffd593641f0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60abfa41-83ce-4707-a7a9-39d516319ce7", "sighting_of_ref": "indicator--394c304e-b859-4e63-9d3d-f37fe163300d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f69fad-3f02-4e7c-8b72-c1cb27b58b1c", "sighting_of_ref": "indicator--b16ce06f-5e81-4193-8967-4c7120e26e78", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a975f5-129e-4bcb-b45d-755cddcab49e", "sighting_of_ref": "indicator--414d4010-c045-47f1-9284-7aceba30a379", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e317e6ff-ccd7-4493-80a3-cfde4c7d2560", "sighting_of_ref": "indicator--4afc96a0-0551-497f-b39a-210152b99838", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac732c14-28dc-4042-873b-a429b2b385c1", "sighting_of_ref": "indicator--08ded047-6260-493f-877f-d0e26118d7b8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1e2c87-b082-44c3-bd01-1ec05cd55efc", "sighting_of_ref": "indicator--fe8e0d72-dd35-43f9-840a-b748f571aa3b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb966a3a-cb59-4172-b9e1-ab638a0d05bb", "sighting_of_ref": "indicator--6916bce2-967c-404f-bd62-868545a6c252", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83331c6-ef5e-4b6e-ba2d-1e5c1e0e8b20", "sighting_of_ref": "indicator--79801597-6d9c-4b13-909a-7813d1c226cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc21261-1457-42c7-8a37-0f84fc248491", "sighting_of_ref": "indicator--9b9a91dd-e5ce-4510-96cd-09f33a33183e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7d4ad7-51fc-47e0-a368-acff5afb9dcc", "sighting_of_ref": "indicator--44c8d542-6743-4426-a681-fc24f7ad8f44", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393540c1-c00b-43ab-9ea0-4406f16f521f", "sighting_of_ref": "indicator--4b1cc258-a24c-453d-8f22-607a4bbaff91", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf388e1-2f62-4e83-bb8f-da8319eb0397", "sighting_of_ref": "indicator--c6596719-d0f3-49ce-918d-99d785c3d36a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab018561-882c-41fb-96e0-ca4915c13440", "sighting_of_ref": "indicator--325f31fe-3c80-45a3-9c6d-e6bd9ee3baba", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dd1c75-703d-4531-bb89-577d22ef0849", "sighting_of_ref": "indicator--37b7f49f-4167-49eb-9dc6-f7b50867fe52", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3173e241-8310-4174-9468-df88f2c0b81c", "sighting_of_ref": "indicator--032f4ce1-56c8-4f82-b6ec-dc2d38992d49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02803158-e59b-461a-9a06-4e9b9ca48abd", "sighting_of_ref": "indicator--f0ad6e98-0b8e-4c20-a427-927458b71973", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42edf12b-b888-49fa-a949-94cd020f588e", "sighting_of_ref": "indicator--5907b1d0-cda8-4717-965d-3af7f22e6723", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95dbd98-965e-4b6e-a54a-397dc7acd283", "sighting_of_ref": "indicator--4da87b48-abbd-4daa-86b6-cc8babbd4b58", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c2b062-f01d-40a9-93a1-1d93c1047d18", "sighting_of_ref": "indicator--ffeceb8c-182f-4dc8-9523-63a5a7f930ee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd210d4-2f82-46f7-bec6-05d23354b1e4", "sighting_of_ref": "indicator--45bf5e45-b239-4c15-a421-48a400b5d3ef", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74eede8-6c38-48ae-90dc-a82654d7c539", "sighting_of_ref": "indicator--a3107c42-930f-4551-85ea-6b5602eb133d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d29de6-0b54-4637-b552-2f588248e0e8", "sighting_of_ref": "indicator--12a3526c-761a-405a-bdf1-da2c85de541c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a6410e-bfcb-4d99-93bd-9a6fce2a9d60", "sighting_of_ref": "indicator--363cdf6d-d4dc-456b-b449-f7b8db516d9c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d353647c-0f4e-4f7e-b7a7-6c2bf8975830", "sighting_of_ref": "indicator--5bed3af3-1d18-4e6e-8505-8b05345c40ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c67b76-efb7-4f53-a0e3-e22d543a3e05", "sighting_of_ref": "indicator--12c85b2c-165f-4ee4-b23d-663a43d8e201", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c272f1e-fea6-416e-9b22-577ce556988a", "sighting_of_ref": "indicator--12c85b2c-165f-4ee4-b23d-663a43d8e201", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079dc8de-3b00-4d90-b0dc-45df2f46396f", "sighting_of_ref": "indicator--2a8204f1-26ec-4348-ab49-33420431ccd8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39935b2-aac8-4579-8cea-981a82f7fe06", "sighting_of_ref": "indicator--4a03218e-8d23-4ab2-aa26-ccd3f26430a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e32603-c5ef-42ed-99ec-004741b1a380", "sighting_of_ref": "indicator--74b54248-c5ad-4f88-b1a7-5413fb4bfe8c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831c9e65-65ca-4cfe-a26d-d04c947170c7", "sighting_of_ref": "indicator--ebe7e9ae-8081-4dea-a66a-4c72af014130", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0f3a78-0437-4647-8e94-de945272443f", "sighting_of_ref": "indicator--5ba1bbc7-db27-4fea-8d2c-f9763678db57", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb7989b-a524-4842-87d9-f4e813a3f85f", "sighting_of_ref": "indicator--b1988827-2fe0-458a-8b2f-ff78b9e5b77c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce6693a-150a-4be4-815c-cd29e3b44ab3", "sighting_of_ref": "indicator--3f4a4005-336f-435d-bcc2-9bbcc78dca72", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ea43e2-9f2e-4f5a-a09d-495162329ef8", "sighting_of_ref": "indicator--e12f0e78-c8c8-418f-8c3a-61c2cb48118c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdedda12-2896-4648-8ab3-3967c9de1d18", "sighting_of_ref": "indicator--977298be-bb6f-4ae5-9e48-b417deb04ec4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574cfc5b-8fad-4490-a9b0-25ffe177c21b", "sighting_of_ref": "indicator--977298be-bb6f-4ae5-9e48-b417deb04ec4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ad284f-577e-464d-bfa2-2d717a088c4e", "sighting_of_ref": "indicator--e34351e3-0827-4007-b050-0278528144a2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f736501f-bedf-466a-8c4e-a913ae9d4082", "sighting_of_ref": "indicator--e34351e3-0827-4007-b050-0278528144a2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e93f221-62a9-4147-8771-69da75f14a3c", "sighting_of_ref": "indicator--d7b58291-d329-4de8-b50a-c4cff5151e37", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0575972d-c001-4154-befc-8436e2a5b4e9", "sighting_of_ref": "indicator--d013e713-8d9d-4cb8-ad56-ef1b78a9ebc9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6c5037-1566-4eb8-bf0e-923fcae87154", "sighting_of_ref": "indicator--5b648688-b8f7-4236-9811-dbaaa2ddbc96", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e086ee8-9f14-4575-82f4-0e76b56e8274", "sighting_of_ref": "indicator--4019ff5f-2621-458d-867d-8975156a1a82", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7085d5f1-7bd0-48b5-826d-1a96470c7e1f", "sighting_of_ref": "indicator--bcd5112c-f9da-4fc4-9f63-9a06e0bd6c33", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e152c910-8019-4ab7-9161-dd51c7edb651", "sighting_of_ref": "indicator--b31172c8-c12e-4ec5-8cfa-bd0cb83518ed", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb606f9-b702-4a7e-bb03-afdbad526c66", "sighting_of_ref": "indicator--b31172c8-c12e-4ec5-8cfa-bd0cb83518ed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2915e3e4-35d8-49ba-aa5b-1a5200a70c54", "sighting_of_ref": "indicator--d073a93f-13f9-4465-af3d-49c30d3869d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e45c140-db75-42d4-a52e-9128418e809f", "sighting_of_ref": "indicator--85bcf12f-c5a9-459a-acb2-3e80c3cd09cb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec2d1e9-628d-49a4-8d0c-267d216ee9ed", "sighting_of_ref": "indicator--a1ce0900-50b8-42cb-9f43-f440e429e778", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d03377a-4aaf-4d19-9e21-f696d08c8bb5", "sighting_of_ref": "indicator--a1ce0900-50b8-42cb-9f43-f440e429e778", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138631bd-ab0f-48f3-8450-0ca82256ca7c", "sighting_of_ref": "indicator--3d2898d4-ef11-4b00-9e09-522843ede10d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e7ec74-4468-472f-8c61-c657b6b68561", "sighting_of_ref": "indicator--3d2898d4-ef11-4b00-9e09-522843ede10d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc846d94-74a8-428f-8aaa-ccdd4cb38a5a", "sighting_of_ref": "indicator--e0ccf3d1-3ac0-4887-91be-3b8cb24d33ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884a53d9-92f0-4518-911a-24a55a1bd081", "sighting_of_ref": "indicator--1eaaffc7-e11e-4134-8534-be77da314caf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccc741a-f643-4700-baa6-650894e5e18e", "sighting_of_ref": "indicator--3cffbf62-4b1f-4d45-9864-7632ab0fd12b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c945f14b-d04b-42d5-b3e3-52ba09393b1e", "sighting_of_ref": "indicator--cb81fb82-36dc-400f-b5b6-f6a03f454f51", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b316d64e-048a-4eac-a2a2-120e3735f191", "sighting_of_ref": "indicator--37acc015-59f8-40d4-85ad-0ab1769d9c49", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7de5ea-e8e2-4e26-8f2d-5475f0b5bc20", "sighting_of_ref": "indicator--37acc015-59f8-40d4-85ad-0ab1769d9c49", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898e520f-b30f-4501-9ac0-5dafee8067fa", "sighting_of_ref": "indicator--1279b19b-629e-4ebf-b3a7-a8d799b69af5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f446b89-ceb5-4291-9b95-66b79e349102", "sighting_of_ref": "indicator--0c3a119a-5bbd-4cbf-930e-467c46166778", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c88d4f-8cd2-402a-90b9-084a74ffcb2a", "sighting_of_ref": "indicator--0c3a119a-5bbd-4cbf-930e-467c46166778", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43368172-d621-4d2b-8b1c-6137f421e2f8", "sighting_of_ref": "indicator--1014773f-c69e-47b9-b717-cf89d2b45979", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2cae23-4db2-4ce0-8355-a185c1ce235f", "sighting_of_ref": "indicator--1014773f-c69e-47b9-b717-cf89d2b45979", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7b9804-0688-4048-bbed-8a8050191134", "sighting_of_ref": "indicator--982ca80b-fd60-4063-945a-a093c20243a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43843871-5b8d-4250-91bd-f1c35530a31e", "sighting_of_ref": "indicator--400ce253-447e-4f92-956d-d3847f48cda3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f03119b-531a-4927-913e-2dad88c820fe", "sighting_of_ref": "indicator--400ce253-447e-4f92-956d-d3847f48cda3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8091dc38-9bd6-4200-b4ae-24390695c1ab", "sighting_of_ref": "indicator--87e0844f-31b5-472e-b4ba-07a18fcde007", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274c4304-0abd-48e5-b913-325f0c9086cd", "sighting_of_ref": "indicator--033f8e46-cd7c-4358-a20d-b3d7b0c6b9c9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5484ee3-b18b-407a-a82d-57194b2daaf4", "sighting_of_ref": "indicator--033f8e46-cd7c-4358-a20d-b3d7b0c6b9c9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3697401f-fd9a-4eae-8760-2b03a48afa62", "sighting_of_ref": "indicator--de94183f-d62a-4de5-b79c-7e6e3897d708", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8ed928-bc07-4749-bb70-91d0ffcc8146", "sighting_of_ref": "indicator--266b4952-9d91-4745-876b-a7e5c22b22e1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b458c7-6591-400d-854d-e3aa206a1ca9", "sighting_of_ref": "indicator--3e6d42fa-bd26-4b83-b776-794b98b3f498", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09cc1ad-1a14-440b-a5d7-b7540fb04dcf", "sighting_of_ref": "indicator--5ee145e5-be51-40e8-8e96-98232d91d9a2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a80d893-d1b2-4f23-881f-1af5b03ec23d", "sighting_of_ref": "indicator--31118b3f-c7ee-490b-9017-30dc44cdf25c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a73f31c-992e-47b3-87f9-0c1bbc7f5168", "sighting_of_ref": "indicator--1119c35d-74d1-418a-be35-d46caa4e2c90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea76340-3b56-4106-8a48-837fcfa4074f", "sighting_of_ref": "indicator--e9f4f116-133d-4de0-a85e-0916553fc25e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908b7017-b0b0-43ca-9870-ebcf3e3afbb9", "sighting_of_ref": "indicator--76608c0a-3c2c-498c-ba37-4ce6d2426a0b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93c9a24-7c81-432c-921b-65973ae41dff", "sighting_of_ref": "indicator--1154530e-614c-480a-b3a7-1a67b423dc51", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5615b457-8614-403a-ae70-edb573565e09", "sighting_of_ref": "indicator--7ebacad2-648d-45eb-ab66-eae78a2957f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9a9f04-a973-45c8-8e06-241569577e6a", "sighting_of_ref": "indicator--588acaa7-8342-41c5-ae95-7faef483b112", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9cdfe8-7487-4c19-8f11-5ae6ba9ba883", "sighting_of_ref": "indicator--1382e717-6534-4229-aca0-8c5fcfaa3555", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acccbe46-7b8b-4e04-89b4-420954095108", "sighting_of_ref": "indicator--fc56e261-a9da-4d72-8249-51d6dfd1470c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc920e6-d906-4dbc-9dab-915b5b5dd49b", "sighting_of_ref": "indicator--8ead97a3-ed86-45af-a026-59a9c38f4744", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228340f2-008c-4409-8dad-f6f45bdb8bfc", "sighting_of_ref": "indicator--8ead97a3-ed86-45af-a026-59a9c38f4744", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58dd572c-7bf3-4c3e-8fd9-c12fdc334156", "sighting_of_ref": "indicator--9a4e097d-96a2-41ec-afe2-43d7719bdca6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e619717a-127c-4901-9dff-c194854f7b1e", "sighting_of_ref": "indicator--9a4e097d-96a2-41ec-afe2-43d7719bdca6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d6ae9e-b60d-4a88-9d53-fe770a4fa0dd", "sighting_of_ref": "indicator--f6c2a4cc-9702-445c-ae3d-a30d4800090f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386b6a63-ee4a-4614-85b2-94dc3222a216", "sighting_of_ref": "indicator--1ac6945f-3bd3-4a09-b6c4-a6db83f06d77", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36efc1d3-462e-47d8-bdf2-e522acfa2314", "sighting_of_ref": "indicator--1034f9e6-bc04-49b2-a7d3-1b30982121a1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1791769d-e832-4171-ac82-a97abe131dab", "sighting_of_ref": "indicator--690c2d97-4b35-4623-905c-fe542fa1a7c6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e00009-fd7d-4647-9313-281e06e124cf", "sighting_of_ref": "indicator--690c2d97-4b35-4623-905c-fe542fa1a7c6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58677ea3-f19d-4523-b76c-b0d14844221f", "sighting_of_ref": "indicator--17bb626f-8c1b-49ec-b81b-748a4e2813b4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13262e9f-8750-45c1-9075-b558d2518709", "sighting_of_ref": "indicator--17bb626f-8c1b-49ec-b81b-748a4e2813b4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249cb5e4-0beb-41a1-9afe-a724ccf40422", "sighting_of_ref": "indicator--a64e1700-956d-4c0c-89f7-605f56805d87", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c577c32-310b-4539-85a5-0a6cf45771e0", "sighting_of_ref": "indicator--f2e17b75-bfc1-418b-b376-d63e0434b563", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46e744c-62e0-4419-ad00-ceed8809a6ad", "sighting_of_ref": "indicator--e5618bfe-31cf-41ee-9336-01a5e53937e4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42afd457-6bb5-4f97-8386-8bdec7f30e3e", "sighting_of_ref": "indicator--80ce9547-ecdd-47c7-9381-fee27fbcf8dc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c047500b-e804-47be-87b8-df6405f24ce4", "sighting_of_ref": "indicator--e4b3c484-2f40-41fb-b9d1-d523bcd8f7cd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0371d352-567d-46d7-b59f-97d301251c94", "sighting_of_ref": "indicator--313663f1-a680-4ea9-8b33-12e17d338892", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b8cf2b-5329-4eaf-a325-6dfa58aabc52", "sighting_of_ref": "indicator--dc015234-219e-45e5-b8a3-71588d45a9f3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cecee1f2-198a-4f50-a863-c35fdb6fe4b6", "sighting_of_ref": "indicator--c9145414-6499-4578-853f-d4f30a02174d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cb1737-44eb-42cb-bc96-008547c2292f", "sighting_of_ref": "indicator--2a25aad4-9c1e-450a-a432-2ee7c2d9d18f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c004141-9ed8-45b8-92d3-a72a31cfd429", "sighting_of_ref": "indicator--629ddf6d-e37a-46a9-82b2-3e01db5c158b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a93614d-86e5-4550-ba39-b590d70da9bc", "sighting_of_ref": "indicator--cb400459-a60f-47b9-984a-35f091334c18", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfb791c-7253-4fbb-9fb0-9df89a039d69", "sighting_of_ref": "indicator--d6ce0f47-09ac-4656-a0e9-602fa393bb3a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d9b95e-c7e7-45e3-b6c4-2766047b722c", "sighting_of_ref": "indicator--230d8010-b6b1-44e3-ac99-6d22d2ce1e4d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b301db-c463-4ffa-9f45-204c89b6d9fa", "sighting_of_ref": "indicator--b6d3ad9d-157a-45ac-ba7f-eb8a9512e719", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250b3d5a-b3a8-41f1-a7af-852dec4b9a98", "sighting_of_ref": "indicator--0182ea9a-a2b7-421e-88de-7e1bbf7f10dc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabab4b7-00ee-4c7d-8153-82550b52627a", "sighting_of_ref": "indicator--97078f41-e7f6-4f1b-a6eb-0fa8c69a40e1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db5b443-103d-4726-83a4-f927719a237e", "sighting_of_ref": "indicator--8f00483d-8d6d-4143-b456-32370b7e8212", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f83c8e-f86c-4545-808e-5fe1a3156b70", "sighting_of_ref": "indicator--eb1bc182-86a2-497c-8f19-9740085d6b3e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34afd442-e518-4841-914d-5e4ed8c023bc", "sighting_of_ref": "indicator--906ff810-a763-4e07-81ce-b1f17a60bd8b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615a37ee-ead6-4c8d-8b73-9de732de617c", "sighting_of_ref": "indicator--53506c41-5417-4ce9-8af2-7ea23a387341", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8b1def-34cd-4e47-a869-c6ee27862b37", "sighting_of_ref": "indicator--81577a5c-154e-41e6-9dbd-2b9dae87775d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374bf150-ac62-4e8e-94ea-c07558f24bd6", "sighting_of_ref": "indicator--6ea408f1-3e17-4f90-8a0d-c3fab5b70c09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfffc7a0-537f-48fa-bb83-eb79bc1f5bd5", "sighting_of_ref": "indicator--cb8853b1-968d-4165-bb62-4c9bdbfc5d3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6a7af4-88d0-4bb3-aa77-b374c87f6df2", "sighting_of_ref": "indicator--6d165db2-68e4-4d35-8257-a872cda2442f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ba77e5-d440-496f-b27e-93ac83e24458", "sighting_of_ref": "indicator--680a0de5-bab7-42b1-9650-e0b233dd446a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4260b4a4-02b4-4fc3-924f-6e2aa5aca419", "sighting_of_ref": "indicator--cd0602c3-2af8-43d1-a2aa-d35b62d11cad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9913fa79-83df-4e0d-9611-12f263085d8d", "sighting_of_ref": "indicator--0be15b74-ac84-4d37-a088-014475718cba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02762378-f74e-4d58-8697-f438314a6b4f", "sighting_of_ref": "indicator--73d84727-b500-4474-aaac-35950a661630", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7f02d0-997d-42cc-b6b6-4ac4d07cccdb", "sighting_of_ref": "indicator--c828e368-5d15-4d7a-b37d-f4403622980c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95141b23-c961-4a37-9776-77849fc23a2c", "sighting_of_ref": "indicator--a983e51f-d516-4d21-9f2e-d46858521aea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb89a3f-0c35-4e31-a0ab-64e0fee5dd95", "sighting_of_ref": "indicator--c76b9209-6410-41cf-86e0-19d0903e4e71", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11daa018-fedc-4bda-9b88-751ad0c4686d", "sighting_of_ref": "indicator--d109d8a5-0080-4d41-abb7-a6297ecf7e7d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9ebed0-989f-4373-8bf5-fee19bba676c", "sighting_of_ref": "indicator--bd5c1cb3-6234-4dd7-bfca-1422bb681f07", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d447ac-3c29-40dd-b8b2-23256592b188", "sighting_of_ref": "indicator--5e3a297c-875a-4e70-b613-b4b04ab74cc3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588940bc-b55b-466f-ba64-e4b7ec4063a1", "sighting_of_ref": "indicator--15ca7dfb-02d8-4357-bf87-ca1cd4e9581f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb7028a-2bfb-47f7-81a6-711810d14b88", "sighting_of_ref": "indicator--6117746a-49f2-42c0-9082-05a5520abf4a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152144f2-08e6-43aa-a19e-fa045eac5e18", "sighting_of_ref": "indicator--32e19af0-2e64-4c77-8d7f-b7d7baac1353", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c968d7-7d6f-4bb9-8170-272da999b118", "sighting_of_ref": "indicator--d05d39ae-a48e-4c3d-8cf3-81ada16d2563", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c0a481-1c95-4e47-a6fe-41fd76333553", "sighting_of_ref": "indicator--531a0a33-a53c-4b69-a991-78bc790aa07b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e62f8f7-09cc-4818-88e8-d27b89027d27", "sighting_of_ref": "indicator--714d2fb6-9453-41b8-aff1-20a1e794dfa9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71caf275-08b0-40bd-9073-976ff3bc6ee6", "sighting_of_ref": "indicator--714d2fb6-9453-41b8-aff1-20a1e794dfa9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04aacff-f42d-4c8d-bde9-8dd2b793fa5f", "sighting_of_ref": "indicator--60d746a9-9130-4e67-9e12-bc565cbda5f1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712e92f8-45a1-4fda-aa45-9d09a3423e29", "sighting_of_ref": "indicator--55dca4d2-d9a7-4a65-98a6-a5d9fb59865c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adea5a50-fd56-426a-b561-9e10e644832b", "sighting_of_ref": "indicator--ec36f274-7117-4f65-88be-ba7dc60d8c48", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3812fa4-3403-4697-ae7c-78b3ab84ba90", "sighting_of_ref": "indicator--28dbbfe6-d027-4673-aac7-144460aeb560", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc440dd9-dc3a-464d-9990-21c13acf16a3", "sighting_of_ref": "indicator--317fd3f1-3861-4838-96b6-de44bbb34139", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f19accc-df31-4529-ad22-de5615c54672", "sighting_of_ref": "indicator--59261c34-8a43-4352-b793-1b8c2c5ceb51", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d3e98b-45cf-49c7-956c-76ea9585e691", "sighting_of_ref": "indicator--9ea538ce-94b0-4efb-b0b9-6c736a2a3891", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041ff865-5b92-407e-bddd-bfdc9c7a38e3", "sighting_of_ref": "indicator--1daab4c3-7bd9-4615-98b3-3c5b1b2ec392", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f0dd6f-a05e-49dc-a857-ce0eb302ec59", "sighting_of_ref": "indicator--ba98a776-a53a-4044-b79d-8483bde3829b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d0a8b4-8c11-44f6-a4ca-13bb2b25c312", "sighting_of_ref": "indicator--15603f9a-c8e0-4d96-89cd-2c5cd70aa2df", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708a40fb-86ec-4a21-81e9-38fd36ed7799", "sighting_of_ref": "indicator--3fb0a6d9-3c19-4c41-833c-86df358be9fe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5942b8fa-27cf-4f31-8d6e-0a3d7d948ed8", "sighting_of_ref": "indicator--ba869f22-b8db-4de9-9fe7-0914f84371fa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f6f0f0-7986-494f-a7d4-87cc7dccf011", "sighting_of_ref": "indicator--eefdb625-8ef4-498b-a733-a1fb5499ddd0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a72f218-60c8-4f30-a130-46357c209d65", "sighting_of_ref": "indicator--f9dd6d90-dca5-455b-9da9-3b1e5bb5d03d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c839a244-be4a-43c1-b9e6-f761ee285d43", "sighting_of_ref": "indicator--773a71c7-40b1-4270-b1f8-dac93ba35067", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8dbd8a-a404-4f0e-98ad-130afd4468d8", "sighting_of_ref": "indicator--773a71c7-40b1-4270-b1f8-dac93ba35067", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219a9099-fefb-4e1e-acd2-0df46ce2d6a6", "sighting_of_ref": "indicator--41ac0af9-21e0-454c-8b4b-b87dbb364f8a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ef498b-fc45-42bf-97da-a969f6038b62", "sighting_of_ref": "indicator--41ac0af9-21e0-454c-8b4b-b87dbb364f8a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a45c655-e79d-454e-a9e0-69dd4533ca46", "sighting_of_ref": "indicator--23ce94e6-ae62-4ce8-b395-6f2c14528cf1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee1d25f-4daa-4e14-9d61-b85eaccb1df4", "sighting_of_ref": "indicator--23ce94e6-ae62-4ce8-b395-6f2c14528cf1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c419d240-c330-43a5-8495-0eeabfdb8f30", "sighting_of_ref": "indicator--cffdf500-4854-4293-b877-389988309c0e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012c9fd8-3c91-44df-8044-60c0f7ec1928", "sighting_of_ref": "indicator--9a824e34-8b4c-4934-a9ed-4242355749f4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda26b9c-0c59-43bc-827c-30777ec9a88d", "sighting_of_ref": "indicator--9a824e34-8b4c-4934-a9ed-4242355749f4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ff378d-5643-4c74-8c5e-e79a81dc1af1", "sighting_of_ref": "indicator--737493d8-2f1c-431f-b527-45911c60d539", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52199d7-0996-4ccd-b74a-59c555c1ac07", "sighting_of_ref": "indicator--737493d8-2f1c-431f-b527-45911c60d539", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79338f20-798b-4d8b-9791-8d4f3b5a4ccb", "sighting_of_ref": "indicator--94b111d4-552a-471c-86a0-74458530e61d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a014e0-7c6f-48bb-8a91-94f78cf052ee", "sighting_of_ref": "indicator--3d6dfde5-62bc-4f63-895b-7eb3fe5ae550", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d9f9c6-a001-4a7d-9b92-e8ebe024298a", "sighting_of_ref": "indicator--78d251b1-c469-4ac5-b403-78f55073c525", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6f31a2-4eac-4770-983a-efd1be57d4f5", "sighting_of_ref": "indicator--dc7e7c59-e880-4865-a8c3-230d4d6773ae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c7aea6-b102-4267-9736-885acbe470e8", "sighting_of_ref": "indicator--7493e170-6946-4efa-a093-e782cbd86fde", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d863f3-0462-43c9-bc98-27f8a770c257", "sighting_of_ref": "indicator--755a30f0-8423-4b81-9fb4-9970a1ea0ac2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48283cd-6120-4213-9fa6-32a2d2ddf2be", "sighting_of_ref": "indicator--05fff74a-66eb-4b93-a0ee-b67a1eeb61ae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58198adb-014f-47be-b099-414d3f977a3c", "sighting_of_ref": "indicator--2b6a4f19-26c9-48d8-8dc8-41a752c9573a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d40ee1e-711a-47da-9751-8ccd282387c0", "sighting_of_ref": "indicator--76bc97c7-a6cf-48cf-96ed-b64475c3efe9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90961547-a087-4913-9195-104f30fc9f0d", "sighting_of_ref": "indicator--f41680ca-91c0-418e-ae09-1b96ecb2930e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246c86f9-0690-4753-bfae-72159878b739", "sighting_of_ref": "indicator--cdfda2bb-af93-49f5-8276-12df7d7254cd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d542bf-a0e3-4dbb-8d08-db1aa51b09bf", "sighting_of_ref": "indicator--8b47da7e-4100-4967-be92-6c499365b127", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd57776-d199-4898-938f-df4fa85ffa0d", "sighting_of_ref": "indicator--81fd3028-fa9f-4f56-9320-b80abbd81441", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f814e1c-99a4-4245-8e44-502593dab97d", "sighting_of_ref": "indicator--52d92092-6356-4129-b726-9cfebe26785d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ae79de-0f41-44a8-8d24-7bb099e795b7", "sighting_of_ref": "indicator--1e0da979-c0a4-464c-9b85-e13032b8156c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a52dee3-575e-4de1-af22-bcadd7bcb9ef", "sighting_of_ref": "indicator--576da040-21b9-4156-b5be-2870fabf95e6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b749872-87d0-4952-b35f-0da199382792", "sighting_of_ref": "indicator--c09e6071-357e-40b7-9460-8206042ccbd2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba3e886-d5a7-4f40-904f-f833d5ca75d2", "sighting_of_ref": "indicator--a9bc8eaf-41df-49fe-a1bb-21bda3aab6fd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbedb19b-f960-4f66-acef-fcc816fb9195", "sighting_of_ref": "indicator--ed9b0489-3206-49b2-bfbc-09cb6081659d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9bb406-6140-4f52-8667-245b827e5ceb", "sighting_of_ref": "indicator--a42cacfa-d9c6-4338-9626-400028f64b17", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3190e8-d69e-423c-835d-8deb772176ca", "sighting_of_ref": "indicator--50d2a292-cf21-4957-854f-ace79e47ff1d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af415f1d-be0a-446b-8101-a358211bd007", "sighting_of_ref": "indicator--50d2a292-cf21-4957-854f-ace79e47ff1d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e6cf87-db2a-4ded-bfa4-802eab938641", "sighting_of_ref": "indicator--ea18ecfa-b760-4862-a1a7-3a672173f39c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd46fb8b-08b0-4355-9941-5c45c57260c8", "sighting_of_ref": "indicator--dc145b5b-ee9c-431d-9df3-9c2e8e42bd7f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d9d756-7f2a-434a-850c-2c233951e532", "sighting_of_ref": "indicator--703d0b37-a7d6-4a96-b1f6-ecb6f3021a15", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ab0178-2dee-48d4-a55d-aa6155a3ddd6", "sighting_of_ref": "indicator--85082f0c-3a60-47f1-9354-6b0d32f9ac86", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12050868-df15-4ee8-b34c-9f46801bd86b", "sighting_of_ref": "indicator--e5bf0b0c-90b6-4a3c-9ec0-744770a39141", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93285f24-eaf6-407f-933f-19cc552077be", "sighting_of_ref": "indicator--1df4f840-82c5-487b-8d88-c1c8a298e7e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9c7893-6349-4876-8e2a-2412ce1bb23e", "sighting_of_ref": "indicator--830cae9d-3794-4f1d-adf6-cf6ba0cfb1c8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e67d88-61e7-4053-b35c-a7c03834f2c3", "sighting_of_ref": "indicator--1f867b17-e7c6-4363-9030-f1c89634d1a6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02aa0a4-6adb-46de-b1f9-99be35ca36d0", "sighting_of_ref": "indicator--1f867b17-e7c6-4363-9030-f1c89634d1a6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ae9375-e4c3-4725-90b8-3cae964cc2bd", "sighting_of_ref": "indicator--0c3125e8-ccba-4a20-afc9-5af1600dea2b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5add3a85-6a96-4ac1-ade8-acde2bff3afa", "sighting_of_ref": "indicator--b24038d1-c1ac-404f-90aa-4fc26cdf2e2f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96c2d28-3336-4bd9-93dd-7e6eaab612a2", "sighting_of_ref": "indicator--24b96927-c59e-4e37-8190-4f807d601be8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a77b67b-58a9-4763-b2c5-a0cc88b7c7d9", "sighting_of_ref": "indicator--1e4f6d83-00b6-47d1-9fb1-27c96f00a49b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9cda80-b054-4821-85bb-cd7d0d72f6a9", "sighting_of_ref": "indicator--06801ab5-7216-40f2-82a2-74dec6631e3d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a57da04-d0f1-4208-8de9-5da129e54086", "sighting_of_ref": "indicator--df86aa1a-7289-4d8f-a548-d07c901f279d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988ccbc8-8c0a-471a-88a1-0942f769dd64", "sighting_of_ref": "indicator--f550309c-ed93-4fba-a125-14fedf46adea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015d2096-55ae-4f58-b7e6-6386642bcbc9", "sighting_of_ref": "indicator--4d44c869-03d5-4d2e-82f8-f7c8dae38640", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdc329d-fa51-4fc8-963a-730037d97217", "sighting_of_ref": "indicator--0fe25461-8653-4a6c-b5e8-4e8825ea6682", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02d33aa-59b0-4339-aa26-952386560a89", "sighting_of_ref": "indicator--499b52cd-4329-4e4a-b652-242eb665e5b2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecc0d95-f243-4c7e-bc22-6f005834232d", "sighting_of_ref": "indicator--769db944-9145-4e11-9732-a135062bc09a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbc0a65-88da-480c-b769-8207b43573da", "sighting_of_ref": "indicator--c67cc62c-2b2e-4dfe-96b5-42a2544e652b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf8ccf6-5fe6-45fc-8d06-af19b9af42e9", "sighting_of_ref": "indicator--61bff4de-5877-4ef7-ba65-f4359cdc554d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39504e1-1175-4df1-9d97-cf665e10e005", "sighting_of_ref": "indicator--13ca07a2-1506-4e63-b949-633253dd45ef", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9199a4bc-dab1-40a8-8a07-a200ca73d7b3", "sighting_of_ref": "indicator--2064a3c0-534f-4e1b-bafb-c3310474e093", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da37d9de-2bbe-40b5-b73f-c3b2823cfa9b", "sighting_of_ref": "indicator--72e137d0-b243-4688-8231-5d9affe34b53", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfa729b-4519-4df1-9d56-b0436d52fd91", "sighting_of_ref": "indicator--6c5b6b18-a228-4312-8416-9b0390895c0f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c8d46e-12bf-43e4-a74c-9cecc5905f84", "sighting_of_ref": "indicator--9e5d4e08-2d58-432d-bcdf-34fba5c4663e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bc8d89-d7a7-409e-8683-b85acff839e6", "sighting_of_ref": "indicator--e2fe82c7-fd1e-499d-a2b6-89b9aed720c2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ce9299-f23a-4f9e-8f1d-973f75a64243", "sighting_of_ref": "indicator--4c1f6b02-31b3-4027-a59a-29267ce15811", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b4b298-f91e-426b-a0b2-efab27bc1d6c", "sighting_of_ref": "indicator--be184ed9-a7e5-41b7-8dfa-cabe1f14e605", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb818d0-e70b-4701-b68d-693e41a252da", "sighting_of_ref": "indicator--c477f104-42c3-4a3b-8345-d85e0d8f815c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f47b98-f2f8-405d-bde2-567ae74e16df", "sighting_of_ref": "indicator--97169a5d-d237-4a98-b41b-acd7a1fa8e7c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d82611-25c1-4f90-9f20-2c5155634916", "sighting_of_ref": "indicator--b129a1bc-5402-4335-a356-4205fbe97f9e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c610ecb-760d-469c-b7d5-1d821198ce3d", "sighting_of_ref": "indicator--42d9b7ae-c744-4d69-bf90-299e52b07e55", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b7d1aa-9783-4f81-a55b-84c6065caa25", "sighting_of_ref": "indicator--2bafe2f0-f45a-4304-b97d-b96fed573b36", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d446d9d-ad11-40fb-b2ff-c8979feada55", "sighting_of_ref": "indicator--2bafe2f0-f45a-4304-b97d-b96fed573b36", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59021ecb-f6d7-46c3-963a-fdd08cbbcb64", "sighting_of_ref": "indicator--98e13b6b-50f1-4e1c-ad39-19b005415469", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8973ee2f-e722-4ba1-8507-bf0984c0a503", "sighting_of_ref": "indicator--e9f09ad2-16c3-445e-b6f9-d770439973f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49182228-5aa7-4201-bf43-5f81934b73e2", "sighting_of_ref": "indicator--e624715a-aedb-45a0-b411-7a64206e257f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bbda52-2670-49fc-81de-310f196561ff", "sighting_of_ref": "indicator--e624715a-aedb-45a0-b411-7a64206e257f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b367fd5-724c-4790-a782-f511de936e20", "sighting_of_ref": "indicator--1082b9e8-0cde-481f-bc02-3504ecc7a39e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27c1220-57cd-4dcb-9310-bc48fc7d38fd", "sighting_of_ref": "indicator--29029e11-80ad-4b54-a5d6-5cb2e51a16e3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea6ee8e-cada-445e-ad81-79d452d9148a", "sighting_of_ref": "indicator--29029e11-80ad-4b54-a5d6-5cb2e51a16e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82107d7b-34ae-452a-ab8b-336795b4e0e9", "sighting_of_ref": "indicator--de1dda7f-c879-4184-907c-ecaf1ce4fd04", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcecd56-fc27-4985-bf86-cecc4fd9bcd6", "sighting_of_ref": "indicator--efc477ba-96a5-46f1-bd9d-5aa64ee4cb9b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9a6245-624b-4ffe-b054-8f9bfb3811cf", "sighting_of_ref": "indicator--f22c17d3-894c-48fd-b112-323b72b566cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a424518-699e-4810-adc2-7f5329abc9d1", "sighting_of_ref": "indicator--c6123e78-2331-4a71-86c5-34a28167779d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff60dcb9-2712-4cf0-99e7-fc1da2e5c689", "sighting_of_ref": "indicator--8dcfef93-04a3-40bb-859e-d934df5984e2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5907659d-fb98-4da5-968e-da85e38f251d", "sighting_of_ref": "indicator--cab310ee-d182-4aeb-9354-b48a16c89e3f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f01134c-672b-4405-ad69-180fe9eb831e", "sighting_of_ref": "indicator--f852359c-7227-4e96-9329-dd3bfb027493", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b49efb-653b-4b2f-865b-e6ce346766af", "sighting_of_ref": "indicator--b94c5234-186c-458d-9862-2e7202de9b1b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378553cb-22d7-45e6-8eb3-397a4cfe4f6b", "sighting_of_ref": "indicator--cf8c9e7c-a838-4d41-be7c-e8a0f433de8c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79625a95-1c8c-4be5-b1d3-a42c9eb95106", "sighting_of_ref": "indicator--b650e7d7-597f-4699-9ab3-04783fbadb33", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a079be-17dd-4507-b8b7-bf4b7f129906", "sighting_of_ref": "indicator--ada6316e-39f3-40c0-9e9c-b2becd59ee31", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b56b71d-e8e7-433e-b0d2-284146f49802", "sighting_of_ref": "indicator--89901ffd-f05a-4514-a6bb-c95887a0c57b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e69c96-1627-42ef-9371-e753431b4f28", "sighting_of_ref": "indicator--89901ffd-f05a-4514-a6bb-c95887a0c57b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532cdbdc-0e9d-4c94-b46e-89a61c934eb7", "sighting_of_ref": "indicator--0fa18284-3dd6-4335-851b-6fe5ed1f5e39", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ece391-b2c2-42a4-a3c7-e67eeafeff0e", "sighting_of_ref": "indicator--a4471986-d011-41fc-9e90-aad5c843e720", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79affcad-88da-41f6-adcc-35574771c9d9", "sighting_of_ref": "indicator--f05b2572-2286-47bb-a7fc-b96ffcb8dfd4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c1012c-a098-47f5-992e-45e0680683ed", "sighting_of_ref": "indicator--01d3fd02-3b4b-4ae5-9c98-a0456fd3848c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e63317-843c-44ff-a6e7-e5f435e56beb", "sighting_of_ref": "indicator--93d40d83-8500-4521-8fcb-c3a50e5236c1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdb06e3-e498-4fa9-a007-a46274ff7eb7", "sighting_of_ref": "indicator--426a28ad-79ee-4b90-ac02-f8d9fab5a086", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ec0ee0-347c-4669-809f-1f3f1d8ec6bd", "sighting_of_ref": "indicator--6ee9faa8-6bab-4b40-ba94-3864056e6db2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586e7148-275e-4a51-9b40-a759a8b3fbdb", "sighting_of_ref": "indicator--f55cf12c-0f2f-4d70-937c-6642dbf27e00", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a31ea2-c448-473c-99aa-769f5978ec49", "sighting_of_ref": "indicator--aad984f8-bc81-4a4c-846f-1237635c40f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e9ef90-e0b3-46ed-b1fe-cada139d45d8", "sighting_of_ref": "indicator--8269c8c3-02f5-47b9-b3bb-f6358133c357", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652d60f1-e60e-4971-9b7f-927959bcbe2d", "sighting_of_ref": "indicator--87aba3f2-ee9b-4b4e-9e9d-13048a3daa9d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61651f8c-3fa4-4aa9-ab4c-7c97971d0010", "sighting_of_ref": "indicator--b5069520-8af5-42d1-aa62-045084e5ecc0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffcdd0b-7476-4122-aab2-22723fdf19fa", "sighting_of_ref": "indicator--16543db1-ee92-43ed-85b1-5c949d2cc0f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ddcc169-a35b-466e-99d6-1070421871ab", "sighting_of_ref": "indicator--d3d1b99b-44e0-4aeb-856e-b1f6f11b9702", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76287de-050a-46c0-b617-342ff4880bd9", "sighting_of_ref": "indicator--c0c0fa36-6e96-440c-a820-e654076559bf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd8744f-19da-4530-bb32-f09409213c44", "sighting_of_ref": "indicator--028e6fc1-7f09-440b-a13d-dc083f6d02af", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ca1cd5-5ccf-470d-b78f-b6805d40559f", "sighting_of_ref": "indicator--f7a2ee08-6696-4537-9d93-60b5fe095cb3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce93f09-e458-49d9-b682-87f08aa56b6c", "sighting_of_ref": "indicator--d9517ec0-5d9e-42fb-94d1-8822ed6fca96", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f372d82-37f7-40dc-8820-2dee105479f7", "sighting_of_ref": "indicator--0fea27b0-ae5e-4e13-8b78-524f4c76461a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f15e19-8ca9-44af-b8ab-774986297169", "sighting_of_ref": "indicator--8a11831f-0883-4f04-92ad-873619250059", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6b4602-abf6-442f-96e8-1ce824238766", "sighting_of_ref": "indicator--8a11831f-0883-4f04-92ad-873619250059", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a283ed34-80d9-4506-a08f-fd139382444c", "sighting_of_ref": "indicator--c589f69d-2bee-424a-990b-991d14c455eb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057b01ff-7313-430a-b97d-eddf7afa64d4", "sighting_of_ref": "indicator--c1787e9f-4265-4e2d-8b9a-a548a8ddfcb7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87edb755-4134-420b-a3ce-98921277490c", "sighting_of_ref": "indicator--c6897da5-a45c-47dd-b1c7-80d3e115ea09", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57efe82-ab10-4c10-8aa0-2def7cd2768f", "sighting_of_ref": "indicator--ea2d105f-d74d-4d99-b8d5-0792482aad75", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24af2eb5-6fa4-46b8-a767-18440347387d", "sighting_of_ref": "indicator--79404650-2e08-4406-958f-4f64087b118f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da661c7-e77e-4510-af7e-5e48440ee934", "sighting_of_ref": "indicator--fd2becb7-c63b-48cd-b669-2bd97a14e993", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a74e68-1b79-4838-9b56-f7a625044c1a", "sighting_of_ref": "indicator--c3708696-9941-40b9-aea9-8cbf79eb9bc9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e55c17d-e44c-4c17-9687-b2a2027caccd", "sighting_of_ref": "indicator--8bb1d0e5-0f93-446d-b216-9fa975801005", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58174f4e-8d9f-4117-a468-70e2e531fb9a", "sighting_of_ref": "indicator--43352ffe-4f28-4b60-b6e8-2da443850678", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca162b2-0ddd-4b14-adad-4e6aa42cb16b", "sighting_of_ref": "indicator--30f07124-4c49-4e2f-bd73-c76cbd136899", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c532e9c3-13fd-4143-8a52-3bbfa62500b2", "sighting_of_ref": "indicator--978df734-f670-4f6e-8fb3-a7565a3e1d9a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa55aec0-5809-4a19-a59a-33825a946b10", "sighting_of_ref": "indicator--186b3857-dfc7-48c2-9f36-b4226560e6b8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed621a3-985e-4d2b-ba3e-24d6b81d6e5c", "sighting_of_ref": "indicator--2a18661a-befc-4867-a3b7-ab734a245ad4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7068e428-c7b2-4a73-a025-bdb96b0ee343", "sighting_of_ref": "indicator--30aff6aa-b4b0-4147-bccc-996893d7649e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66846a75-4102-468a-97f2-68071d0af456", "sighting_of_ref": "indicator--303b7084-948b-41c5-b5a7-9f4c70163af5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46da83b0-8dcd-4403-bd0e-ff41d8f18498", "sighting_of_ref": "indicator--49d0b4ed-70d5-45b6-8bb1-d9c23d929d8b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31715e7c-7e68-40a1-b4af-ed88643cd838", "sighting_of_ref": "indicator--0f46225a-fab2-4ffc-9c04-91bc42badf9f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02408b9f-d9d0-4ce5-8323-ac4e5a73b1ff", "sighting_of_ref": "indicator--8b2b2397-5be0-4c55-893e-9add0f96bc9a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c7c369-58f9-4acf-806c-c477d88612dd", "sighting_of_ref": "indicator--9aed43e1-49ec-4190-83cc-eaf27b6298a8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf2c789-ef3a-4652-9f93-7aaf6d4a8902", "sighting_of_ref": "indicator--037fc5b7-92af-4556-b9c6-544501e061ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc50802c-a123-4071-8aca-f35cf6d74539", "sighting_of_ref": "indicator--156ba45e-1dda-4839-9614-077787068cdc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1a4b34-8fbd-4a19-8bfb-c00c5f05d779", "sighting_of_ref": "indicator--255c7b4b-04b0-4ffb-acb5-24d1307a73b3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12843b0-4a89-4857-bbf6-bfd960b7735f", "sighting_of_ref": "indicator--50716375-3a9c-4e45-a47e-877688dde486", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a66e6e-f609-4723-8ac9-3d22f1238f8e", "sighting_of_ref": "indicator--b6f59bd1-c7fa-4f64-b781-b4160bc55caa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e9976b-5059-4e9f-9a8d-ab9aad0e93e8", "sighting_of_ref": "indicator--bbfb274d-f9f3-48bd-be67-4bbc48cfa9fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9652670f-7015-46ef-b656-5ea63f9e9ecc", "sighting_of_ref": "indicator--42e24ed5-a36e-4891-8b9d-1258a26fb6cd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b335fbd3-a6b7-4d68-844b-b9a50932d6af", "sighting_of_ref": "indicator--ef708dfb-ad97-4286-9ee2-83b46db304d6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08df6477-3eae-4df8-bc5d-1eb252316906", "sighting_of_ref": "indicator--a5a1f478-8cf7-45cf-9ba1-f3706e076d50", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83713fd-140b-4018-9fb1-355d0ff37642", "sighting_of_ref": "indicator--f85b630c-7d80-4bd2-b0c6-91e906cac595", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c046490d-84d5-4aa1-996a-0d224e6483a0", "sighting_of_ref": "indicator--2212acbe-e507-4028-9e23-bff16c95188f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1f5d99-90d6-408d-9387-78d4d4220e93", "sighting_of_ref": "indicator--583e61d3-0c87-4582-a829-a143d6443aae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59537b1-d8f0-4e51-8f81-73db75828e95", "sighting_of_ref": "indicator--4329b5e2-7190-4d1a-95b4-f21f52b8c769", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9219ca-4744-4aa3-bdfd-0924420487e7", "sighting_of_ref": "indicator--86c486b3-e042-46ca-bd7d-8739f318405b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7561f5-10d3-43a8-9b78-dd8e7434272e", "sighting_of_ref": "indicator--4bc4564a-4f0f-460c-97f6-b707ca5c921d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a205dec3-28de-43d4-ac09-f05bb2e92982", "sighting_of_ref": "indicator--02373c0b-be8a-40ac-a24a-4a147252cf95", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1aa42f-51c2-45bd-a249-60e2358e8543", "sighting_of_ref": "indicator--0860ebf4-bcb6-4258-8d0c-ff5d268dc708", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dce0d5a-6084-46bd-8063-9451f6552587", "sighting_of_ref": "indicator--8fce5afe-ea88-4de6-862b-6f71bb8a264e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a450d7b3-86d3-41fa-86e6-3436f4bbb8ef", "sighting_of_ref": "indicator--fb41b221-b507-4f07-9554-c15c3d494ee8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d0009a-ebcd-400e-86cb-e08b1df7b82f", "sighting_of_ref": "indicator--5b990a08-9ad3-4609-9d85-f89fdeedb712", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8348328b-a27e-4b9a-b99c-f3d21c9f5c6e", "sighting_of_ref": "indicator--14a02868-d8cb-4153-b687-8e1ed1175154", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f01968-165f-44b0-b472-d19f856c2352", "sighting_of_ref": "indicator--62ca012e-866f-48da-9e49-533835b46871", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac0316c-edd3-458d-b72e-e46d85df2ec9", "sighting_of_ref": "indicator--abd80076-55cb-4cb6-b7dd-6cf880fd7aaa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2f82f4-5345-4a21-ba34-ade68f9b7170", "sighting_of_ref": "indicator--5998178f-3239-443c-8d84-d10938262876", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216c6414-8319-42aa-a110-d1a9dc14d108", "sighting_of_ref": "indicator--7f7fefa0-b63a-4e48-821e-a2230d88a529", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1062e88-b4da-4283-9c21-0f46df43088c", "sighting_of_ref": "indicator--b64cd7ea-96ef-4b3b-bb9f-20d73ac68c4f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a033410-08eb-459b-bdf6-ebb42fc78678", "sighting_of_ref": "indicator--f1025107-ab5f-421a-a2a7-9d45beb18e23", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7e6a9b-b9c4-48fc-b5a7-59f66a04f7e5", "sighting_of_ref": "indicator--d1a3a258-cb37-492a-a69b-1fd7886ba2f7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac1e979-8d9b-45ef-81a8-1dc0a4ba12b0", "sighting_of_ref": "indicator--921b6b16-6170-46ff-a1a4-992859bf3ac7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65169eab-5588-4cb3-a80b-278f6cb4abe7", "sighting_of_ref": "indicator--7e7d409b-81a3-41a7-8f84-3eafc2ab3f64", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291f2272-6a1f-4956-b636-8619f884afa5", "sighting_of_ref": "indicator--7e7d409b-81a3-41a7-8f84-3eafc2ab3f64", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1a4ff6-95f0-480f-a869-85f00e8dcb23", "sighting_of_ref": "indicator--deb9c91d-b977-4f91-8f87-a35a36ffce0f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00cc446-2908-46cd-877c-befd8089b0dc", "sighting_of_ref": "indicator--deb9c91d-b977-4f91-8f87-a35a36ffce0f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03e896a-c389-4738-ad89-ff730f4a42de", "sighting_of_ref": "indicator--45b24ea2-58f7-4160-af5e-eadcc531a1c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42f635a-68d6-41cd-b6e8-d7a2467a0fa0", "sighting_of_ref": "indicator--6fb7b416-9f07-4921-95bf-a1058d52f978", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d773b0-d5f2-408f-bdca-19044d7e0bb9", "sighting_of_ref": "indicator--3e2e9ad4-ed11-45af-a6ca-9c25338aef58", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3930b3c-08fa-4578-9160-31b6040285e3", "sighting_of_ref": "indicator--dbb61a5e-86c4-4a9d-bf20-719828d0a151", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702cb2af-93c3-400b-83e4-25d5a68de76d", "sighting_of_ref": "indicator--7441caf0-33d5-4b65-bdd6-c8d1505c3098", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcc7829-6ef3-44d3-b496-3a541de17104", "sighting_of_ref": "indicator--8f53b65e-a4b6-4cd9-939c-172b367f66dc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b429fc-5356-40d5-9073-e68a1a9afa73", "sighting_of_ref": "indicator--99088f40-5937-4144-9da6-f58dce18d52e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05966ba5-0a25-4bc0-8d18-bb36a3cfe19d", "sighting_of_ref": "indicator--b8dd6b8b-b231-4b8a-ab0f-17bbb7f5e82d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ab1f5f-eb43-4720-9044-63086deb1f97", "sighting_of_ref": "indicator--d8f0d657-466b-45d9-a304-9e4a50e91583", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e0f385-0591-408e-bee8-670e8ffe700b", "sighting_of_ref": "indicator--efcfcf01-7707-4759-8982-90272365ccd4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8834f31c-1f33-4702-a4c0-09692739fe7f", "sighting_of_ref": "indicator--e5a130e3-29df-4c6b-a3b9-28105128f135", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b20a29-718d-4590-9052-e6a57e27c3f5", "sighting_of_ref": "indicator--f02ea2ff-2445-4114-85ba-579939e8dfd3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e822e502-d28c-47f2-b3c6-141fe356f176", "sighting_of_ref": "indicator--b1771fc0-a162-4f9a-8452-bc8a39bffa5e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a39589-d0b5-48cf-b617-f1b5350ef817", "sighting_of_ref": "indicator--61dc9950-7104-4843-a5fd-e1f0e6a2fad3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad506e0-ff27-4e94-a661-9b7551a4980e", "sighting_of_ref": "indicator--2cf63ed4-f9c1-4caf-a9b0-0056269a93ce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef05f8e-9130-4727-aa73-6d8edddde96a", "sighting_of_ref": "indicator--02e5ab9a-fbf3-475d-9510-b7ae167d2794", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de43c800-9206-4701-a1af-102ca63404f9", "sighting_of_ref": "indicator--fd89ba52-2fe6-45c2-8768-9a757ad49323", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c92a11d-94f8-42ac-bf9f-d1de6a1881e2", "sighting_of_ref": "indicator--62a4c094-290c-4bc0-8a75-011bcfda55c2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35041f7a-e00b-4ec2-b0f4-60fdb8b407a6", "sighting_of_ref": "indicator--457aaf3a-1497-4a27-aec4-ff4a5d61c911", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d1589f-c101-4f4d-8df3-3d33ba2ff4f8", "sighting_of_ref": "indicator--a425bd0b-6199-43b5-9d63-5af9a3ef8a5a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489b5d4a-1f65-415e-9b96-3edd0d5021fb", "sighting_of_ref": "indicator--4d668ac5-8435-497b-8dec-2027facce167", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a656be-4f27-4e2e-8faa-2c9c3f58dca1", "sighting_of_ref": "indicator--af83689f-6888-48d3-9c33-2bed4be3d82a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c31502b-edec-4fff-95ab-77af7be970be", "sighting_of_ref": "indicator--cc4e3c32-3858-4b6b-b2e9-811838500d9c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601b3e43-5271-4764-b901-655dadaf7f7d", "sighting_of_ref": "indicator--4c5b2f31-8031-4129-95d9-cf459c92f207", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6497331-3f30-4fa0-86d2-128c7c2ecf81", "sighting_of_ref": "indicator--df53e3d1-e995-4237-a6a0-806c2e9027c2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a894ae-4817-4165-bced-eaaea5316315", "sighting_of_ref": "indicator--bc357d44-a1f9-442a-9084-e6dbc1b18983", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3053ef-2444-4b99-a7dd-3d9ce8e2e104", "sighting_of_ref": "indicator--a9cb5d2d-1074-4cac-b8b7-07f7b2352839", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2eaf6c8-8571-4218-8f9e-6cf9c312d259", "sighting_of_ref": "indicator--e8fe922c-6331-4ebf-a99d-a2f459a19c4d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126ad9b6-7bf5-4844-8789-2e8860cf29bf", "sighting_of_ref": "indicator--31cca453-750b-4b86-aaae-a6fe3b0af140", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbcdb23e-8b29-4b38-a728-b630abe84b04", "sighting_of_ref": "indicator--8470c482-b006-492b-952e-58e980ff149f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36afda4a-f779-43c2-b3f3-d3929c7f2417", "sighting_of_ref": "indicator--095965a0-2cae-447a-b67a-e88e2f459930", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3db7623-f3c5-4573-8eb9-fcb592e93562", "sighting_of_ref": "indicator--f92dc524-fe63-4089-bdc0-ab12c21e8c7f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06368ab-90e9-477c-b8e5-48e82de4ad7a", "sighting_of_ref": "indicator--35b41abe-60b1-4031-8d34-1fbfd0b85499", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402d6e1c-5bdb-4090-a636-7355c1c59cf7", "sighting_of_ref": "indicator--99f1b980-6b34-450f-9495-96ae5100db1c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4beb47e7-7380-4f68-aa9c-801337117535", "sighting_of_ref": "indicator--9f3727c0-7d11-407f-ae17-8cab189062ee", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92168a5-0bf8-4d74-9eeb-99a06ec2ad59", "sighting_of_ref": "indicator--3622741e-a43d-497e-933c-7c57b7c9b2d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70cdf7b-a218-4660-aaae-16d98fa13104", "sighting_of_ref": "indicator--b0401050-4b00-4536-bf9d-3b120d3ab585", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec2260a-8e4f-4437-b49e-1122537fb304", "sighting_of_ref": "indicator--8cc3078f-15d3-4404-84bb-4a19a309251f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d526f2-3d50-476b-a8e3-7d3aa57c08e3", "sighting_of_ref": "indicator--e3e98f84-27b9-470c-bd9a-a6885e8a1947", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adbbfe0-a5dd-4875-8cee-8ff63957a52c", "sighting_of_ref": "indicator--a72154a6-d308-4c89-a864-e1792226bb9c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3e2885-ac9f-4a02-8042-d498fdfcf7f0", "sighting_of_ref": "indicator--6830948c-0e0c-4c4f-8672-5454a12e3d89", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd81665a-6b3a-46e7-bc16-45df186ef7d8", "sighting_of_ref": "indicator--c55cb2d3-13f4-4699-9780-8657d9288d46", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62000114-7f0e-4c9b-b009-36a5a59b10cc", "sighting_of_ref": "indicator--c55cb2d3-13f4-4699-9780-8657d9288d46", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65750599-be50-4a1e-b62b-835d5b0f15c9", "sighting_of_ref": "indicator--bf1f1f82-0c93-44b4-bc85-57800f431e7f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea76b56e-8500-4e75-b28c-3f0f084c81eb", "sighting_of_ref": "indicator--40cf5b99-9b40-47ae-9dd5-34d884c8d22b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f6a020-5a13-4bf0-bd62-0e1ef8da01a9", "sighting_of_ref": "indicator--0f59baaa-905b-49c5-b632-df610faeeeba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a9c2ea-a668-4384-8f21-654163500d1d", "sighting_of_ref": "indicator--85170250-48bc-4581-9c57-2d0be6b3d25e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28430cc-1238-4018-8a29-58d3ba94642f", "sighting_of_ref": "indicator--7209ff5f-e24c-4ecc-9832-61c0f738fb10", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9601f23-6090-4125-904e-50f3375a07bc", "sighting_of_ref": "indicator--dd3f63cf-d770-419f-af74-843ae37cf621", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f5ffc1-eafc-4f4a-9ae6-5c5b96fa4394", "sighting_of_ref": "indicator--cbdcfa90-9f15-42d3-bf52-af44c1a8d499", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df063a46-e9cb-4fd1-bf4d-8e8fe19bb061", "sighting_of_ref": "indicator--c8e5878e-911b-4877-8757-fb426c5c05df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bead21de-a62c-46d6-890c-6235739c4f47", "sighting_of_ref": "indicator--7bbd0636-63cc-470e-9843-bfdf92cff5a5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c54d15-2c1b-4d1f-a926-a6935012f3b4", "sighting_of_ref": "indicator--681e39fe-c7f6-40df-88fd-d449c83c3955", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d796bd-4bb9-4e9e-8546-81db0692f225", "sighting_of_ref": "indicator--681e39fe-c7f6-40df-88fd-d449c83c3955", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c189c518-bdfb-403e-9b17-25c113a013c9", "sighting_of_ref": "indicator--d1404d15-8488-4dae-9ad1-a2c59b58762a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf2f163-1950-495b-9193-ef9fc9dd8792", "sighting_of_ref": "indicator--db51e712-5034-4f1e-b19c-3c4a51befbba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d181be7b-adbe-427f-b082-2d96b5533da4", "sighting_of_ref": "indicator--ac4a058f-2ad9-4ae2-b9d1-d77356033a84", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caabe82-fb12-49bc-9c33-ee3db26024e7", "sighting_of_ref": "indicator--160e8e39-239e-477d-a52d-6796034494ff", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceeac4ea-302e-4d34-a617-7050d1f9d2f4", "sighting_of_ref": "indicator--7113c1e0-2baa-4b00-baab-09dfd6b6b55b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c32a2c-d8a4-44c2-9f61-214dfef25fce", "sighting_of_ref": "indicator--7113c1e0-2baa-4b00-baab-09dfd6b6b55b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64cddb0-8748-4f59-8f51-45befaf77eae", "sighting_of_ref": "indicator--b2728837-4721-495c-9b40-a2f097d9a6c5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e3ba8d-b7cc-462d-a502-ed0840ec58d5", "sighting_of_ref": "indicator--791feb42-b189-42d1-9d31-f68b7154b2ba", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75997c8-d7d6-41a0-8d09-6c332b2958e5", "sighting_of_ref": "indicator--a03039c0-775b-4755-87be-9a6d9011aa45", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b818bc-3cba-45ae-b86c-25ff6cf6a80e", "sighting_of_ref": "indicator--0e82cfc9-0aed-42bc-8c6d-a540b42da72c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7078aeb-3e6b-4798-9c50-c58bef5388c9", "sighting_of_ref": "indicator--6b2f81fc-6084-4a90-aa7e-31c72c8a6536", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d4ec8c-6bc9-4f05-b989-defb87183c2f", "sighting_of_ref": "indicator--0d7a5661-2708-4271-b9e9-c3560014e11f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499992d9-dee5-4379-b751-fe9f3f73806d", "sighting_of_ref": "indicator--26d3f935-ea2d-4247-b65c-60e2cc7094c9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6041583-63ab-4b81-a3b1-6e37ba556137", "sighting_of_ref": "indicator--ff60aecc-2a16-4ab8-93b6-2c93d8efffbd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17645eb0-64d5-486f-a199-2fe5d5aa9883", "sighting_of_ref": "indicator--190f2734-4c5a-4458-b703-1d0a4ff30ba1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98c165d-b92c-4ca4-948d-fbe0224bafb7", "sighting_of_ref": "indicator--190f2734-4c5a-4458-b703-1d0a4ff30ba1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56451e27-82a7-4977-9f6e-1a860057f94d", "sighting_of_ref": "indicator--9cdc4f34-9812-49f4-aa40-d3b939e5ecf5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1cec9f-4b0e-4601-adf6-c58f09b7d4e0", "sighting_of_ref": "indicator--ce445456-c0a6-49c3-87a9-a0c37836699d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156ec80e-37bd-4875-a214-7d5458415091", "sighting_of_ref": "indicator--e808a68f-e465-46bb-b0a6-1bae1a0d6587", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c116fb-3313-4cc4-a5e1-f548c43f9dcc", "sighting_of_ref": "indicator--3b627b91-b14f-4036-9830-263751354819", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d768f5a-d28e-41f2-a4c4-e44f3db91d14", "sighting_of_ref": "indicator--bb7d8f60-8862-4451-b2ec-9ac1513cecfa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cef6080-b269-4be0-adff-6d53a31ec52d", "sighting_of_ref": "indicator--86e3c7b3-38b5-4d88-93be-c28ae0f62e94", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e138a6-c1b4-4822-a52b-aff838802199", "sighting_of_ref": "indicator--b8a794fa-14b5-4c40-88ab-53a0a09cb5be", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f0e5ca-8e84-4a59-881a-5b0e11560b7f", "sighting_of_ref": "indicator--b22895f9-51d9-45dc-af29-5454ab81e5ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5b3637-6d0e-451f-b708-6fe895565b2c", "sighting_of_ref": "indicator--2e671d74-4fcd-4b46-ae96-bc3afd4582a0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfea42f5-c485-4e96-9ce0-b39ddb807050", "sighting_of_ref": "indicator--7a731dea-ec1b-4641-800a-78160d2b649e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84303cfc-771c-4b5d-ad85-73cd9f734200", "sighting_of_ref": "indicator--6bfc32d2-ef64-4b69-b08b-83fb1efa4164", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87126314-9fd8-4c8c-8490-59ff4da2f292", "sighting_of_ref": "indicator--337be51a-83b4-4676-be87-d6d42a422d7b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98662478-aa1b-4642-99d1-7feb56f9754c", "sighting_of_ref": "indicator--c121eb14-9d67-4f8b-ba7e-d27974c76b30", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10970e68-c0d9-40a1-a15e-70e5aa243ca6", "sighting_of_ref": "indicator--b31b1159-99c2-4294-bb22-95a97011bdb5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157bf2e7-730f-4a58-af6a-c4ea9c5e5bc5", "sighting_of_ref": "indicator--eb4eb73a-34a1-4bbd-b908-ddfc5ba25dbe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f167448d-b71b-4da8-bbda-40eab986a419", "sighting_of_ref": "indicator--6ea4d66a-a514-4bf2-abf7-f61cdae3d6d1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed64334-e8de-44d2-856c-dcebf81bd381", "sighting_of_ref": "indicator--2480c565-11a3-48f9-9ca6-074527b2c3ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ec6d83-7211-4200-a516-c13d9dc7c6cc", "sighting_of_ref": "indicator--ec82be44-5be3-4b72-bd1b-c5a94cc662e6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b2e655-0d29-490d-9c24-fc5365923cc0", "sighting_of_ref": "indicator--871131cb-9d8c-4592-9b80-14697d33d08b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d07ac8-035b-446d-bf24-85bd8a6435c1", "sighting_of_ref": "indicator--998aebce-759f-4fb5-a529-151a57cf43fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1714487e-b88c-4ebe-a146-0c5579285867", "sighting_of_ref": "indicator--b49b4950-3f56-4504-bb5b-39f8b6feb8e5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bf3237-ed0d-4814-9389-1560965a8e05", "sighting_of_ref": "indicator--1acf117e-236d-4f38-bce5-c68bc67a6ea2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053a8b1d-12cf-49b1-a86d-2a14b64ccb1b", "sighting_of_ref": "indicator--05498d01-bcaa-488e-a8cf-5b9c58be9c83", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406962f4-29e5-41e5-a4c7-5c7e88e9f77b", "sighting_of_ref": "indicator--8394bdb1-49c1-45ea-b819-17443b4f0d74", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8e2576-3021-4e05-8108-f90e0b5a7f72", "sighting_of_ref": "indicator--1360f49f-b194-4daf-bf3d-5510631a554a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67993407-0580-4644-9d6a-7a39aef9d370", "sighting_of_ref": "indicator--85ab0648-a6c3-4cc9-b5f5-bfb42de764c3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5924aa-522c-49d2-a10b-d2c8f31c35b8", "sighting_of_ref": "indicator--ce9cc0f8-c13c-4f62-86c6-63736a875eec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56da3f8-779e-4175-852e-dfa7bbdcfacc", "sighting_of_ref": "indicator--02c01195-56f7-4de8-8053-9c24a0cac79f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f9b928-6719-41d6-8a56-3f99d9509fc4", "sighting_of_ref": "indicator--e4fa99ab-1328-45a4-9903-4a0469718089", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b842a854-75c1-4d24-a4f1-3e307e431fda", "sighting_of_ref": "indicator--1ef405ab-b62d-4a93-a380-ce93a2c54004", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbb5cdf-8ac6-497d-a383-f0b211861ac1", "sighting_of_ref": "indicator--cd2f416c-a702-4702-a70d-e69b7fb21991", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c250a8-71bb-4fdf-9bf2-70da9ea598ee", "sighting_of_ref": "indicator--37d7ad9a-aebd-4a73-87c9-8ac951e2e016", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f90643-6014-4db7-8212-d87d630bf207", "sighting_of_ref": "indicator--ec2afa32-0200-477a-9cd1-175be498312b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e90e3c-dc10-42d8-937f-1b200275a85e", "sighting_of_ref": "indicator--4bf68a8d-eb74-4871-8314-a47c6599afcb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8c5a0e-d71f-4941-ba85-63df28347699", "sighting_of_ref": "indicator--51ed93c1-4396-4fd3-bf31-609c8118ac18", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6362b9dc-77f1-4e13-be84-70890796515c", "sighting_of_ref": "indicator--1896036b-d2a4-40a5-ae8a-378bc5739d49", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec01b09-0f88-4f38-a2e1-638a0e4e93eb", "sighting_of_ref": "indicator--2781a016-01fd-44c6-9623-773a7a01e594", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a9f39d-b34f-494a-af85-71d0cd7e2909", "sighting_of_ref": "indicator--178fcbf5-159c-4c28-866e-abf89091da6a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56122f4-8523-4702-948f-888291282278", "sighting_of_ref": "indicator--3635892e-57ab-4824-a9e7-2c6a3fa48b93", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b508ba19-2cb2-4069-8df0-1594558b26ec", "sighting_of_ref": "indicator--cec7043a-f3ec-4283-8621-cbede5d0e391", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4db14e-b931-4403-bdb0-198827a0dee7", "sighting_of_ref": "indicator--f696e265-f5ab-41aa-95d7-56a72cfc0305", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34274d14-1511-440e-a7d4-b690b9aa6a15", "sighting_of_ref": "indicator--298a3bc1-53a4-4123-921d-a62c893ab9d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca75bcd3-37f8-4dc0-adfd-7ea4f794f44d", "sighting_of_ref": "indicator--36421c48-48cc-474c-8c1e-63f2043a0de3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783d2a4d-2c02-486c-b4f4-d6ed9be941b4", "sighting_of_ref": "indicator--c6ae680b-509d-4252-8c62-306ac86c1f46", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6279983b-5942-4e21-8f09-bc90c0d099ec", "sighting_of_ref": "indicator--fe692d88-fe14-489d-9385-98077b56b25d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170d7422-c313-4250-9f4a-995af6562ed2", "sighting_of_ref": "indicator--5338b1f1-418c-43ca-aa56-c7b6c95947aa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00eec068-bd8a-4484-8d94-0d90bd138e36", "sighting_of_ref": "indicator--9fa791c4-c86d-461f-97ab-064083efb75a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc12499-f461-43c7-9eb6-afea5ff59a42", "sighting_of_ref": "indicator--ccbf3aca-e07a-4c79-9c6a-fe3182815aef", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ae8f56-e539-4b06-9e6b-bf657051d855", "sighting_of_ref": "indicator--2b16a0e2-c569-4916-a755-2a793e8ab754", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f240ada3-cfe1-4cc3-9fad-3880bde9d1fb", "sighting_of_ref": "indicator--2b16a0e2-c569-4916-a755-2a793e8ab754", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a77bf8d-b520-4973-91f7-bee767092f67", "sighting_of_ref": "indicator--884288e3-b2c0-4fd1-ac5b-e8125ff3be76", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48914a0a-0855-419a-8335-9d599abc00f5", "sighting_of_ref": "indicator--d974a938-164a-42ab-84b9-d2028e76c843", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4cd53f6-11e4-4b9d-8e16-8932c05f8f41", "sighting_of_ref": "indicator--6e16e5dc-b434-42ae-954d-96920a467cab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfad60c-0893-481c-bb25-8740147fd570", "sighting_of_ref": "indicator--e2fba0af-9fee-4ad1-96f4-68f93f590588", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abf3a00-6d35-42b3-a4c2-d4ce887bcb6c", "sighting_of_ref": "indicator--d178df2b-8b89-4010-9a34-3a9fee436cb5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308c41b2-a25e-4e65-9d21-5447502c1282", "sighting_of_ref": "indicator--e9438539-03a2-4f37-a6b3-e0e3c596294e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823f5d29-5fa5-45e9-bf43-9a2a95d3294b", "sighting_of_ref": "indicator--f450e5e1-43c0-435a-bfc2-cc97e3c99604", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa7c1ec-5fff-43c4-8eee-398e49a9d0b4", "sighting_of_ref": "indicator--f9c69a68-0594-442a-afe7-cddfe953cdda", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5baeab8-9f94-40b8-a485-ba0ce859b86f", "sighting_of_ref": "indicator--a1b958f5-885e-408d-9883-b30f0ff29e56", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f2de67-b153-4d1d-acf7-7804953c45b7", "sighting_of_ref": "indicator--f4b53522-a336-4ceb-92e2-2dfb0209630f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1a50bc-0924-49a8-a6ac-3765a43ff8c8", "sighting_of_ref": "indicator--b9ef1beb-948e-495f-a82f-3f7ef9ae48a4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae91b9b-ebe7-4827-9047-a67367405e74", "sighting_of_ref": "indicator--0e353a87-6d89-4a38-baf4-e024a6e22c4d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8aa7ab0-25b7-429d-a44a-7cdfd98af954", "sighting_of_ref": "indicator--07232729-05ae-44e8-9212-a9b37620855a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02a178f-8364-4f96-987e-8a0f139b8e7f", "sighting_of_ref": "indicator--84bfd043-2e18-4387-bde5-e813639ff3d2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62130bc-7624-4c26-b01d-466164de1c01", "sighting_of_ref": "indicator--7abd9b22-73d5-4d9c-b084-578d322f11fe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce24d8ad-c585-4f66-8f7e-aee9ddf09d2f", "sighting_of_ref": "indicator--a628d9ad-f3d7-4d05-8316-1734f428eb51", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e951b1ad-6cdb-46ce-a04b-5078ffd57dee", "sighting_of_ref": "indicator--bb9a75e2-c2bc-4b9e-9d9c-41792b4a9383", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ae26ee-a380-4d2e-95c1-535bc7776ea5", "sighting_of_ref": "indicator--ba52b5d3-3343-432f-90dd-7001368862fa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2655749b-49d5-4e81-878d-12ec78f1d497", "sighting_of_ref": "indicator--86074574-bfb9-4d18-aef3-c22b7ab78f6c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62a3108-1d06-42e5-b945-757fb434067f", "sighting_of_ref": "indicator--db40114c-94ad-417a-8339-e7900be20e63", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c86828-67af-489c-a543-df3150fa9b66", "sighting_of_ref": "indicator--95169f16-f2ca-40ca-aa6d-7f0d0f40981a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea80423-800c-4af8-a7fa-b4cda887851b", "sighting_of_ref": "indicator--0cd2f637-0e1c-4c0c-a75c-f646b3fbe849", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1944bc5-a728-42f6-b617-377b7d0adcf2", "sighting_of_ref": "indicator--184fddde-d4f0-4eba-884c-8af37c985773", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50090068-bdce-4e62-a337-d87fdf5f3f98", "sighting_of_ref": "indicator--c3f8c1dd-72c9-4fc1-ada2-aba5d7264f9c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b7b09f-24dc-46da-a367-ba22d46109b6", "sighting_of_ref": "indicator--2a7c692e-6fd1-4e25-b931-528728d9f80d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf5e9ee-8552-4978-b870-0804d0cbf1b3", "sighting_of_ref": "indicator--dbaa7261-6ad5-4206-9ec8-3614d7eec759", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72248fb3-8855-48d4-9e76-32d9d1e53a48", "sighting_of_ref": "indicator--dbaa7261-6ad5-4206-9ec8-3614d7eec759", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59094aa6-9abf-4b0c-b01f-2409d5dd1423", "sighting_of_ref": "indicator--0c8a8afa-930a-47f4-9d90-1649a91fbe1a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf4ea78-be7d-422e-a184-3e31dbea0bc0", "sighting_of_ref": "indicator--b70b9ee1-3f02-4a83-ace3-dfb4c196a19b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285a163b-908c-4c2e-b907-3fb4860b5163", "sighting_of_ref": "indicator--e3b4af58-90ba-4f2a-a446-97e60814aa42", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d2c8ee-1526-4e42-a837-051728a2dcef", "sighting_of_ref": "indicator--311e2380-944c-4ab6-9297-5c24cf8b7e41", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3323c5-30dc-4872-a31f-fd5bf0d5242d", "sighting_of_ref": "indicator--311e2380-944c-4ab6-9297-5c24cf8b7e41", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abeb3bcf-d1ef-41dd-8a1e-645020e9fec9", "sighting_of_ref": "indicator--d0a3aacf-7f33-45ea-9362-b0b37438e75e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad294ae4-86ab-44e1-8d6f-9fc53f50ff61", "sighting_of_ref": "indicator--d0a3aacf-7f33-45ea-9362-b0b37438e75e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4215b4e2-8626-4a79-947d-a375f1c7e20a", "sighting_of_ref": "indicator--3d203e99-cfef-44da-b53b-5dfa418cb5a0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c64399-a0a7-48e6-b5da-29ef3e2f4105", "sighting_of_ref": "indicator--3d203e99-cfef-44da-b53b-5dfa418cb5a0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08df730c-2261-41e9-a3e6-b4d3fb6367c1", "sighting_of_ref": "indicator--f07fb89e-5948-4836-9cf4-2c7dd5524bd3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f76f0c-bceb-48c6-91f7-64f2acb6a50b", "sighting_of_ref": "indicator--f07fb89e-5948-4836-9cf4-2c7dd5524bd3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9665316-6e5a-4aff-81bf-0d008832095a", "sighting_of_ref": "indicator--b2bc79ee-81a2-47f1-856a-7bb8ef1fe76a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0fa2d5-398d-4366-a00a-9fb133fd5c80", "sighting_of_ref": "indicator--43832cec-f77f-4c99-9359-1e4cd7e6d417", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c774952d-e813-4955-aa13-3b5fe557ff1f", "sighting_of_ref": "indicator--a28f898b-ac61-443c-9d22-4df49847c1d0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a985eb6e-b85d-47ba-9b0b-8b221a9578af", "sighting_of_ref": "indicator--65bb8d3b-3dc5-46b4-ba4f-ef58de0f5bad", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfb0cd5-8606-4473-90bc-190e3a3da713", "sighting_of_ref": "indicator--dffb439e-f89f-46c0-a43f-aa3a6c7a44d2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4409dcc7-4e54-4651-b3a5-2352035748c2", "sighting_of_ref": "indicator--dffb439e-f89f-46c0-a43f-aa3a6c7a44d2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31436db2-febd-48f0-934d-922fa03e1ac1", "sighting_of_ref": "indicator--9544473d-6e30-4e2c-93db-a217eeb7ce6d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d4c0a0-574c-46fe-a74a-fd960213285b", "sighting_of_ref": "indicator--f7282687-6781-43ec-a4ff-0eead0290bc0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec9a5d5-b51b-44b1-a5de-ba99c48c8fc8", "sighting_of_ref": "indicator--f7282687-6781-43ec-a4ff-0eead0290bc0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bf96bd-7420-4a44-9ef1-36b830bf7ffb", "sighting_of_ref": "indicator--539209af-1a5b-48de-9e05-7871330a784a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82857df8-d528-469f-86dc-b1274aa3300d", "sighting_of_ref": "indicator--43beec70-0a4c-481e-a142-0395c40bbe9a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded9f6e2-2ad7-4141-90c7-e5f96cf03839", "sighting_of_ref": "indicator--e23ea316-a851-45cd-86b4-8276c6571fbd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62223f7-6fe2-4eaf-8cbb-c41172235865", "sighting_of_ref": "indicator--e23ea316-a851-45cd-86b4-8276c6571fbd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf248e4-9caf-4c36-b777-383d8d370cc9", "sighting_of_ref": "indicator--04fad9bc-5e0d-4690-8ea8-bee4b2c62839", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd2c097-989c-47ff-b8e8-eaa55116a0f8", "sighting_of_ref": "indicator--ebc0cf59-2c34-4cbe-bb9b-e1fe63d62f5c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad575fa6-5bfe-4e6a-903e-317bca319e1e", "sighting_of_ref": "indicator--dbc3cb96-aadd-4fb0-a565-902d5549b4e7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f1b218-f55c-4724-91bf-537329638cc3", "sighting_of_ref": "indicator--06f9dcd5-a232-48b9-8fc8-6a86e03ee8b3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ecc7af-1c05-4214-a0dd-ddd88d079499", "sighting_of_ref": "indicator--3f6da88a-0882-454f-af9f-0eebaa279cc1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c791c77b-1415-4251-9257-a87e96e8a838", "sighting_of_ref": "indicator--eeccf6ec-eb55-4b7f-9921-8203f433f181", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94355971-8f18-4f2a-9b3a-37ac07680847", "sighting_of_ref": "indicator--3a19eb2a-5b5d-4039-928e-929ee94d76bc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03403b5-7752-4bc7-bfc1-9b87efefa72b", "sighting_of_ref": "indicator--3a19eb2a-5b5d-4039-928e-929ee94d76bc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5dd6116-859b-447f-9256-111b5b2f4739", "sighting_of_ref": "indicator--d8634004-767a-4acc-8945-3f053ccbffad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc8a293-0567-40c6-be93-da60cc18b052", "sighting_of_ref": "indicator--d2f8ef8f-7c99-4a35-ac8b-f460c85453a2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed14158-79ae-4191-a474-f27d11879170", "sighting_of_ref": "indicator--d2f8ef8f-7c99-4a35-ac8b-f460c85453a2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ab4637-0ce5-443d-8c0f-83aaa2c2f478", "sighting_of_ref": "indicator--17dc5879-c0aa-4cd9-8b7f-4523b960180c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d518d02b-61ce-486b-a755-e17bf4f4b35c", "sighting_of_ref": "indicator--e4f435d8-48fc-4084-a7f9-dcff22e79308", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b9039c-11e9-4368-80a8-8354bc7af3bd", "sighting_of_ref": "indicator--c52db1bd-fe17-4bf8-a8c5-3f86ac403ac6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701c8565-51e4-4bb7-ada0-048d9fd52415", "sighting_of_ref": "indicator--459fa3c8-904c-485a-892e-fbfe6e321577", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8689c278-671a-4e06-88b3-19e418e87e25", "sighting_of_ref": "indicator--965df0cc-eb0e-4e47-89f2-935319a95b47", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9797be4a-7ce6-4b51-a407-419fb179b211", "sighting_of_ref": "indicator--965df0cc-eb0e-4e47-89f2-935319a95b47", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d12f87-2b32-4d78-aea2-37da467234b1", "sighting_of_ref": "indicator--bb8e557b-1e2b-4023-a4a5-bc2f2ebcc6d4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0effc4-4f1e-4758-ba88-56b7b4c805bc", "sighting_of_ref": "indicator--0c27ce40-07d9-4e21-a716-8fe0ec039809", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d005d8-4b95-4cbd-9c36-e772bb60719c", "sighting_of_ref": "indicator--b59a4df4-35eb-494b-8f1a-c63fac825fa6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304821de-052e-4d1a-bbee-6c773836c270", "sighting_of_ref": "indicator--b59a4df4-35eb-494b-8f1a-c63fac825fa6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c29887-bf2b-4959-b1f4-5fd1d24fb0dc", "sighting_of_ref": "indicator--4d9f873b-3f8c-4aa1-89bd-283dde11a5c1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffceb23d-a76d-41a8-8108-941f4f17ab42", "sighting_of_ref": "indicator--4d9f873b-3f8c-4aa1-89bd-283dde11a5c1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d5c64c-d2b4-450e-aa9d-145cbbeff9da", "sighting_of_ref": "indicator--d1fd98d6-bc9e-4f23-b6d2-bf0668cd38c4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4a863a-c67b-4b83-aee2-f52abaadb502", "sighting_of_ref": "indicator--30ac2781-3258-438d-932c-d4e56748e0f6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0641fb49-c32b-4de0-bfdf-604a1d502725", "sighting_of_ref": "indicator--30ac2781-3258-438d-932c-d4e56748e0f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114b392c-3554-46e3-828f-a4b14e9e32a1", "sighting_of_ref": "indicator--2c152b12-5a78-4f30-9917-953975f3507b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276cba9d-40c2-4a7e-b372-200a54ae2498", "sighting_of_ref": "indicator--2c152b12-5a78-4f30-9917-953975f3507b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18514d0-7da9-4632-81f3-a843f1280671", "sighting_of_ref": "indicator--9b47457f-d8ed-4df7-8ea8-58deb647ff79", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb88642f-d041-4c93-91de-07acfb3dc118", "sighting_of_ref": "indicator--9dd94043-177f-4650-84de-9bb000bb1b6d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab061f0-c05a-49fc-9036-6e1f8d42bf60", "sighting_of_ref": "indicator--a18b6cc8-2f26-4ee9-9bfa-d1fba661fe92", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a772a8e7-8931-457c-9471-4d5805dbcb78", "sighting_of_ref": "indicator--974b6399-9777-41f1-a23d-3358de0386ab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800658fb-2f7b-4203-9e1a-c06f8e3d25d1", "sighting_of_ref": "indicator--0e3aef1d-ce70-4aea-a600-b9af47b5e0c3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f59018-82fa-4143-9ce3-1d2b19f4e3d0", "sighting_of_ref": "indicator--6ab988f3-0145-420d-aafe-55f7f9b96eea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd9b9e6-17f4-40ba-94f1-99a410276778", "sighting_of_ref": "indicator--ebfdf737-ec59-4450-b161-06e7ba1ed951", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf9eccb-6dd7-4522-9019-e1f703383862", "sighting_of_ref": "indicator--90e26565-8694-4af0-ae03-99f70823c7cb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd45bda-8428-40c7-8953-58db1a6bb6c5", "sighting_of_ref": "indicator--c1474a23-66db-480e-bc94-3f73006db76e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6525178e-08ab-4401-9d0f-8a148e5fd1d3", "sighting_of_ref": "indicator--3a935c67-6e00-4e18-8ed2-3defaeb2471b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93972c55-a3ce-4bf6-9090-62ee7107c1f3", "sighting_of_ref": "indicator--5cde8b76-6f8d-4156-9681-af443f11889b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4559928-6d62-43b9-b817-36c1e364002b", "sighting_of_ref": "indicator--cd41916c-9721-4be6-a84e-e2b241d5bed6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9be642-38a7-4cd8-adae-104f8034f163", "sighting_of_ref": "indicator--9e85c658-762a-4ee8-a5d8-87b2fb9f25b6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b68b9f8-3739-45d5-bf7e-70196d9f8bfd", "sighting_of_ref": "indicator--ceb70c2e-f490-46c8-81f0-307be3bd2399", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a552a0b9-1820-4796-a97f-25976173a16a", "sighting_of_ref": "indicator--2c1e75d6-91be-40fc-b6d2-4de5f7862e38", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fc8d9d-47f3-4fc1-8f95-26ceef93aa8f", "sighting_of_ref": "indicator--d2261330-d677-4fe2-a86d-6308e85c3a2f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a7ae80-6392-4755-a9dd-ffe3f9d67d8d", "sighting_of_ref": "indicator--658cd1b6-947a-4885-bb24-25a188d34600", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fd4bed-418a-4cf1-8f81-b9e5686e9e97", "sighting_of_ref": "indicator--e1ce6e38-03d6-46e2-b862-137ed546eb26", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3b9ea3-13d1-4091-9196-38fc4e83fbb5", "sighting_of_ref": "indicator--e1ce6e38-03d6-46e2-b862-137ed546eb26", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d12080e-2dd9-4918-a1f7-65d24b8fed5d", "sighting_of_ref": "indicator--1a84a0b8-9321-4f47-8afc-54ceac1643d4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7ace68-1ef5-4ffa-b801-c0f22c134cd1", "sighting_of_ref": "indicator--6cee6522-7f11-4225-9f16-1370bfe7d2c4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c31b94-e1e9-4a3a-a4d6-87ecf09c993e", "sighting_of_ref": "indicator--6cee6522-7f11-4225-9f16-1370bfe7d2c4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747e947a-04ad-41db-b67a-dd2764318c87", "sighting_of_ref": "indicator--1f745dd4-f4ad-4fb2-80ea-41de72f0cb40", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfd4d3f-8998-4bdd-81f6-382e61205843", "sighting_of_ref": "indicator--1f745dd4-f4ad-4fb2-80ea-41de72f0cb40", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7545953-71dc-41e3-96de-777940b33a04", "sighting_of_ref": "indicator--d4262a16-5eb0-48e0-83b1-8cbf791cfdda", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d9a0bb-cd7f-4971-941e-df881df06cf7", "sighting_of_ref": "indicator--1c54c9bd-5f61-4b7c-bae7-5917c690720b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695128f7-a86f-456a-b4f2-841a08037db4", "sighting_of_ref": "indicator--c89569e1-45a5-45c5-bc0c-78dde67b078b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e577f0-2b8d-4686-be38-b2065c236512", "sighting_of_ref": "indicator--2d1647d6-af79-4f40-994b-09e058621838", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde773e0-b70d-4657-a766-0cd928c654a1", "sighting_of_ref": "indicator--c500501d-7677-451f-a8db-2a772b05cbfb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448ca7eb-94fe-407a-9f1a-0c4477f65508", "sighting_of_ref": "indicator--c500501d-7677-451f-a8db-2a772b05cbfb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4dca3b-772a-4901-8add-6add7062091e", "sighting_of_ref": "indicator--503e99e9-cab2-4613-a774-50b301980f13", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa7c860-ed50-4c9c-8781-73a8dd4e2131", "sighting_of_ref": "indicator--503e99e9-cab2-4613-a774-50b301980f13", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b855a2c5-f805-438a-83ea-333c64261d62", "sighting_of_ref": "indicator--11823e0e-e1bc-4ee2-a823-26c80f1989d9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35d52ea-457e-4d07-8d8e-44bd1583b0f4", "sighting_of_ref": "indicator--11823e0e-e1bc-4ee2-a823-26c80f1989d9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131119a3-0d87-487d-a328-701c10bfda5e", "sighting_of_ref": "indicator--de9be558-7c83-48b3-8108-caac9eee4c07", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4008663-b787-49a8-88bb-c7d1875a0c68", "sighting_of_ref": "indicator--de9be558-7c83-48b3-8108-caac9eee4c07", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b48e066-85bd-42b3-a6c4-bef3b011597d", "sighting_of_ref": "indicator--ad48a525-b1ea-4d67-9cd3-456b2f21139a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3949aaf1-37c5-4477-9f8d-92c7bd50eccb", "sighting_of_ref": "indicator--56d92b2b-51bd-4bcb-b131-fc80b2d6abbb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90fa84a-2ad1-4075-9980-15651a06ca9b", "sighting_of_ref": "indicator--56d92b2b-51bd-4bcb-b131-fc80b2d6abbb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffe217f-7f89-4520-a889-ca69c0fac6b4", "sighting_of_ref": "indicator--05c36203-334c-42d6-9c78-ba652a5359ad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf5579c-c51a-4022-b90d-728b00b36828", "sighting_of_ref": "indicator--72a89f93-1df8-445b-95b8-65730024800e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac0cf83-be2b-4b72-acb0-065edd590906", "sighting_of_ref": "indicator--72a89f93-1df8-445b-95b8-65730024800e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f70170f-f1ad-4ec0-bfd1-a3599a71bc3e", "sighting_of_ref": "indicator--991eff25-7989-4d9b-ba73-02f224f585e9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282a7f30-1c37-4344-929c-bb1f8be797f2", "sighting_of_ref": "indicator--7a7868ac-dd57-42dc-ac38-87091fc0fd47", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cf4f0d-7542-485c-b506-4ecda2c99c1a", "sighting_of_ref": "indicator--9f2bfcfa-f981-4095-919e-1744ae3c8c54", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada35f18-6b75-467d-a9b9-7add104b2deb", "sighting_of_ref": "indicator--cbe9601a-0d8e-43ed-a47e-a944c147c655", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0539c16-c0eb-4496-9a52-75d717049a4d", "sighting_of_ref": "indicator--6204f165-efcc-4fc1-a429-7611e8a0e026", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25f2c9d-4674-42f3-8fa0-0b28de47a0a4", "sighting_of_ref": "indicator--3cff42b0-87e4-4da1-ba14-1d7f58cad3b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fe9e21-518c-4956-b5ca-da35f2508e23", "sighting_of_ref": "indicator--8121e5ca-d303-4fc1-a679-3b0708492e32", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bf00bd-3384-4ab3-b731-39d73f3e84db", "sighting_of_ref": "indicator--942948b8-548b-456c-9b8e-1db7bdaa54ee", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8deb97c1-aa98-4cc0-9706-eb398c1ca4a8", "sighting_of_ref": "indicator--7e1b0f39-00bc-494a-a4ad-19820cbf2939", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47acab3-2083-49c4-8c51-87110c4ebd07", "sighting_of_ref": "indicator--9b2c1cf9-d8dd-41d3-8660-a5297dd536eb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfa7a95-f566-4324-b967-16cc94ef6755", "sighting_of_ref": "indicator--5dbb3377-92c8-4383-8a65-334531678763", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b04ce8-b783-44d6-99d8-2f047e58a307", "sighting_of_ref": "indicator--98bbdde1-eb7d-4006-b5c5-e308dc1202a7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47943fad-44b5-4002-8125-af298ff00d9d", "sighting_of_ref": "indicator--98bbdde1-eb7d-4006-b5c5-e308dc1202a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faef3698-9857-4e97-86df-d084e3896ab3", "sighting_of_ref": "indicator--0bf5bdd0-cc01-4b18-846d-a284c0cd08cf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef126a3-a0d7-4024-9b63-9d3e07db22e2", "sighting_of_ref": "indicator--7f17f558-4758-4f6c-b291-754f8101aa07", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6a9d61-ec5a-4b5c-89ef-20ad851740af", "sighting_of_ref": "indicator--7f17f558-4758-4f6c-b291-754f8101aa07", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807a1f8d-0738-43a4-b28e-b95d8af5e272", "sighting_of_ref": "indicator--0206afb8-0c5d-4fe1-8d01-26b821854b57", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4525a90d-8147-4a7c-a3cd-eecf1ad71ef9", "sighting_of_ref": "indicator--d8abc673-30fe-4c4c-adcb-452b50eee292", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bf7a90-af1c-461b-96ff-5fabba923d8e", "sighting_of_ref": "indicator--115a135b-c74d-4062-b5f5-89cdfce65ec9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3d9e88-dd27-451f-b331-613cc70c3dcc", "sighting_of_ref": "indicator--115a135b-c74d-4062-b5f5-89cdfce65ec9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180299eb-3328-45ed-8a2a-b8be0dd23b08", "sighting_of_ref": "indicator--35f01611-c36a-4067-b260-7589f707381f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a514ee26-3e3f-4899-bcaa-e4893204cd54", "sighting_of_ref": "indicator--6bd2c712-a05e-42f9-ac99-4b15d11d7fe6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d78d906-f209-49ae-844f-f3d6e719f374", "sighting_of_ref": "indicator--910cce64-d009-401c-87a5-d9d27f1119af", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6cdf0f-26cb-45bf-8766-46c2b76a4b3d", "sighting_of_ref": "indicator--24cccf2e-6c81-440c-bbe1-a915eba2f291", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99474ada-1be8-4f65-8958-d949f8dfc07f", "sighting_of_ref": "indicator--24cccf2e-6c81-440c-bbe1-a915eba2f291", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ead9791-0335-46a7-849c-657f16431a76", "sighting_of_ref": "indicator--18842854-fc8d-41f3-a5d2-afd84717091b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b59d467-8b7f-4a73-bc5c-f47baa8839ff", "sighting_of_ref": "indicator--18842854-fc8d-41f3-a5d2-afd84717091b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b890a3-ad34-40ff-8a69-14872a39afbc", "sighting_of_ref": "indicator--1512090d-9139-44e1-ad40-9ad6c5b03613", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f525a7-00e5-4985-92e4-07a27b53b392", "sighting_of_ref": "indicator--1512090d-9139-44e1-ad40-9ad6c5b03613", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6730ad4e-f5c6-4791-81df-3e368f172181", "sighting_of_ref": "indicator--477f6380-759d-4fa3-98d5-194093afa7b3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb73ad26-baa5-4ef6-a8c8-528f317e27f1", "sighting_of_ref": "indicator--a499a12a-278c-4482-853e-5a875a88bb16", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1ad9f9-9899-48eb-a821-fb52d96ab77f", "sighting_of_ref": "indicator--a42b8d50-a429-469d-8785-60649d7a7ec7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4149f3-1d33-4a06-9631-83b29a56f7af", "sighting_of_ref": "indicator--1dc19b70-0ca3-443d-8b03-ecf399c51731", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830e1c39-87eb-4543-8123-955301a36407", "sighting_of_ref": "indicator--8d8e4398-6de3-4774-9b57-221c3bd5fe51", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ccfd62-838b-422b-b410-bff4abc5bb2d", "sighting_of_ref": "indicator--1beda6d2-e8e7-401f-bed1-7658959f3628", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31648543-39bd-434b-9642-bb1573adbc27", "sighting_of_ref": "indicator--26eba6c8-bb69-4440-9c30-e83f81f6f1ed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a41409-5bbc-4352-a141-361391eae083", "sighting_of_ref": "indicator--608ed390-379e-4da2-9f20-113bfbbaf7c7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617d719d-1fad-4ba5-8bbe-127f58568234", "sighting_of_ref": "indicator--c0b2f54d-8ead-4efd-9014-73b8fe89778b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d8b86e-05db-47db-aeb8-461041712852", "sighting_of_ref": "indicator--c33b34fc-3118-418c-9ec7-c8c6e1bf261e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099ffdbd-6f9b-4a1c-b525-1c3738d5cf6f", "sighting_of_ref": "indicator--b772899a-c493-4676-9260-973818116a4b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb812d92-c92a-4b7d-8184-7729354640f9", "sighting_of_ref": "indicator--baad6035-add5-4c23-8654-49f0169ee0d1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978b5da7-3623-4c20-b5bd-133621006cfc", "sighting_of_ref": "indicator--2ccfeba1-84dc-41aa-9ccc-72fe6f94de5b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00535de4-c956-41f9-afd3-5816177a2357", "sighting_of_ref": "indicator--7fffbe57-dabb-433a-b83e-ea277aef6a01", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e2f1a2-153d-40d5-9923-69cd80f3e0c7", "sighting_of_ref": "indicator--0e1315c2-4371-4761-b9ad-7f9367f29e36", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf210c4f-c306-4902-ab60-13bc2c75f5fe", "sighting_of_ref": "indicator--113ea91a-0800-4ab5-bd6d-6f3afdf2adb8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71df22ae-d8c0-4dfb-9b00-addb91cd7c53", "sighting_of_ref": "indicator--4b993576-7fad-40ef-bedf-ea55b2d5699a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d8328b-b330-43a3-b6cc-e7158f9a5e44", "sighting_of_ref": "indicator--554f66e9-a612-4fa9-ae8c-826a4193056e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d789b326-de6a-4266-aef8-08218e36609d", "sighting_of_ref": "indicator--b652de25-cbc5-4934-bd22-cdd24e1baebf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2970b99-8dc2-473e-ab4d-bc67161bf9c0", "sighting_of_ref": "indicator--b652de25-cbc5-4934-bd22-cdd24e1baebf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d20fa27-dfad-4553-b1ac-b3c58b5d8155", "sighting_of_ref": "indicator--5db3e0b5-bfa4-457b-840b-d95683d45cb0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96455ee-b00b-4251-8a9b-3e521f5c49f3", "sighting_of_ref": "indicator--5db3e0b5-bfa4-457b-840b-d95683d45cb0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e69a6c-cb5c-492c-bd2b-da88cd3f56ce", "sighting_of_ref": "indicator--7c03a1b7-ea41-4ba1-9a36-1f49c9798975", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897e0326-f47b-4e87-9ac3-31a749d6bdb4", "sighting_of_ref": "indicator--bd08a540-5173-4235-b2d0-a2f55ad1ef11", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32e7320-f721-4aea-aeca-909ac1309dd8", "sighting_of_ref": "indicator--3b48ab0c-afc6-4ad5-a97f-a2c60b22ad01", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafd0f29-2b70-4a0b-a85e-78cfd3f7654d", "sighting_of_ref": "indicator--974c9fae-0301-41a7-a3fe-5f3d4326e287", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1693e876-482b-4f86-9681-669bfdafaad9", "sighting_of_ref": "indicator--974c9fae-0301-41a7-a3fe-5f3d4326e287", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31180cbb-e7ec-4352-9bb7-0784f5a1a8de", "sighting_of_ref": "indicator--c40abc32-20b8-4d61-903e-8e46428a8b9c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce7020b-1916-4301-b3d8-e20ea335c35f", "sighting_of_ref": "indicator--48575558-0ad2-41e4-813a-5cc3947cbea2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0857c32d-4eae-4eac-a6af-5f0fdf003764", "sighting_of_ref": "indicator--e1fb1981-8ae8-4402-8e61-877072ad7ff8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21196e94-2621-4bf5-8b47-de503a979726", "sighting_of_ref": "indicator--dc2663df-ef7c-48e3-9977-c5a087a77e57", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdf875e-88c7-4094-bddf-9c6704c94838", "sighting_of_ref": "indicator--d23f0416-ac21-451c-b2ba-b726d1e83f63", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f97567-9365-4729-b318-78a54a3f8f00", "sighting_of_ref": "indicator--d23f0416-ac21-451c-b2ba-b726d1e83f63", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862ac633-d67b-48e9-98c9-a20961d69037", "sighting_of_ref": "indicator--eaf74c33-6ae9-4154-8be7-4a4ea34a8b24", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16527a21-2353-45a3-8ef6-50ee6f05e765", "sighting_of_ref": "indicator--6ddb1dd5-c23a-4f03-9b77-a889dfd0433e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f1227a-aac4-40eb-a712-3d6d2e52a4b0", "sighting_of_ref": "indicator--c0ca4b37-f430-49ec-a0e1-061793370cb9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d5a54a-375e-4a76-9f72-88c3f5bab4fb", "sighting_of_ref": "indicator--3e79213c-63a0-4aa5-9525-77afe7374c89", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e168821-73b3-49fd-995e-38d3b750e6aa", "sighting_of_ref": "indicator--c13de987-6b9f-431e-b2b8-4bd88fb61501", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4100ef-e468-4832-8ad1-f272e1bf31da", "sighting_of_ref": "indicator--f0e2863c-437a-45bf-a1d4-13c32e86cb2e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907bc466-6050-414a-aef5-4a91545d520d", "sighting_of_ref": "indicator--14f40797-da55-4920-a1b5-a41394c0f360", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7885f775-6ac2-4c2b-a154-c81d615204e5", "sighting_of_ref": "indicator--d1f28a8d-3a3a-4b31-83e5-a5cf79adda4e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540367d9-4133-41f4-87a3-9265ebab54c2", "sighting_of_ref": "indicator--940d4f26-98a2-4c03-95ef-1c8561fbac7f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39eaf8e0-6d7b-44c4-b47e-dd295cb2dddc", "sighting_of_ref": "indicator--3323dd2d-a66f-47b1-9386-73af33202ffa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb37253b-8bf9-452d-8ca1-0c2a59ffa478", "sighting_of_ref": "indicator--474bbaea-e7d4-486b-b510-41b7040fc7fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06efd57c-2d36-40a6-a588-83f59667f163", "sighting_of_ref": "indicator--57483e4e-98e7-43a2-86d4-7841b9c9e44c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dfb330-f1b4-4ce0-b316-52acfd3ab654", "sighting_of_ref": "indicator--35798a03-2d57-4b31-9ee1-bbe30bc8db9c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d16226-0a26-4ad6-a8f7-2a720d68f06b", "sighting_of_ref": "indicator--35798a03-2d57-4b31-9ee1-bbe30bc8db9c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a482f3-0d10-4855-b35b-79ee2eccea1e", "sighting_of_ref": "indicator--06df89e4-c5b2-4f89-9790-bfbd98ddc4fc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5a6438-6966-4e08-a1cf-3a42df984af9", "sighting_of_ref": "indicator--2ba2295e-c329-4c77-baf7-50dc5f7e3173", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8d389b-0cea-42a4-b67d-89e2ff2ae240", "sighting_of_ref": "indicator--b270b1f3-f4bf-413f-a8cd-5ab709669b97", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7ee973-bcd0-47f5-8fdd-7e8630dfd2df", "sighting_of_ref": "indicator--7786d643-aba6-4ac1-9465-e337579b3b87", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87395c78-e8ef-44ce-aee7-f20ed6203698", "sighting_of_ref": "indicator--7786d643-aba6-4ac1-9465-e337579b3b87", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9001090f-c324-499a-8012-60f88acfa388", "sighting_of_ref": "indicator--dbca0e21-6a29-4408-be95-79229a88832e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dfee60-bcb5-4a16-ad0f-f5f2fee2b22d", "sighting_of_ref": "indicator--dbca0e21-6a29-4408-be95-79229a88832e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26e446b-08e4-4d6b-8510-c6a8c798250d", "sighting_of_ref": "indicator--1954c33d-9628-4b98-8211-2f516cc7be54", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec655580-d180-4dc0-99c4-adb54d1a08f3", "sighting_of_ref": "indicator--f7e9b554-6a42-4f1a-80ec-4b84ef9a8c55", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63096c96-fa72-4de0-9025-f302c64ab1a5", "sighting_of_ref": "indicator--4d38d67b-7372-4712-a9a4-a10d93b1737f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c2bf23-2c1d-4495-95ab-6a528d9ef6e8", "sighting_of_ref": "indicator--6d50363c-abba-476c-b98a-a9cc5849bcb7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab109a9-9368-4782-bf35-e0651e255fd9", "sighting_of_ref": "indicator--6d50363c-abba-476c-b98a-a9cc5849bcb7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db7e128-ba3c-43ad-b3b7-ba070356b611", "sighting_of_ref": "indicator--b58360f4-bbd2-42a6-a8ca-775fe65e09b1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96945ee0-40eb-435e-8990-052213b390de", "sighting_of_ref": "indicator--b58360f4-bbd2-42a6-a8ca-775fe65e09b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1b28dc-e657-41f4-a1b1-e72e6f26f8e1", "sighting_of_ref": "indicator--b04ae7a8-71e7-494f-9f9c-cf72a690db85", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753055af-e70d-47c8-8d06-4ca1bcb0907d", "sighting_of_ref": "indicator--b04ae7a8-71e7-494f-9f9c-cf72a690db85", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e2719d-ad7c-4d4a-9c67-9541e73de23c", "sighting_of_ref": "indicator--e7c4b7e7-5d48-4373-9cb2-8fd805c3058d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baef739a-5bb9-426a-b270-7e3a77f8e227", "sighting_of_ref": "indicator--6cbefc97-5414-4c9d-98de-08b3ed054fc7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8961a0cc-966d-4c2e-9b26-914ac5056c97", "sighting_of_ref": "indicator--6aae84ea-e0b3-46ef-87d6-05e93f5ee739", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd82180b-a927-4dff-9f25-c04a5db46ebe", "sighting_of_ref": "indicator--285a9483-84f4-40f9-ba37-8d1eae2e8192", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86db0519-8ef3-493d-ad3f-0d9e9922d308", "sighting_of_ref": "indicator--f33a3953-2a29-4b23-bbc9-826f17c108c9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c0dd81-6ae3-4006-a588-70448d86a335", "sighting_of_ref": "indicator--15b544c1-4123-43c1-b93c-f13a87f09be3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494cf91d-fb48-479f-b5fa-b02674ae402d", "sighting_of_ref": "indicator--ba40a8cd-e6e3-4d21-ba13-31afb9e8a0e4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1983ed-1ba7-43fe-9e91-3f903b0de5ee", "sighting_of_ref": "indicator--da84ec9a-4cc5-4fc7-bfa4-59a9a0840c71", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661ca934-a1d9-488b-a3c0-2d3f56a53538", "sighting_of_ref": "indicator--e897c00a-e461-4d06-be5d-be9411b20b52", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812ff93b-7693-4a09-9b74-c67df6e58236", "sighting_of_ref": "indicator--e897c00a-e461-4d06-be5d-be9411b20b52", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf1374c-75cb-42c8-9544-98dd7a3ce640", "sighting_of_ref": "indicator--52db49e5-36ab-44a6-83c4-ee38866e5d86", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1aea6b-4ce2-47e3-aa69-453bee4bf4f2", "sighting_of_ref": "indicator--428345f7-c04f-4b8c-b6df-ce08ca17a423", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e87f666-0352-4851-a8d2-53b4c14297cb", "sighting_of_ref": "indicator--b2a26808-91a6-4ec5-89a4-7799d8c246ae", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5886ba18-e660-489d-84eb-11b7ab1bedf4", "sighting_of_ref": "indicator--a04bb6f4-bed7-429e-aa89-f7306912d5e0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856cb207-d742-4cdb-ab9c-02ae75c26979", "sighting_of_ref": "indicator--798fc52e-81bd-49f3-9ffe-4bc89a97bb0a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f994847a-4537-4b1b-8508-323c9d829d3e", "sighting_of_ref": "indicator--592cafc8-40b2-4ad9-95cb-dea6914c9259", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4b02bd-3fef-4f7e-a2ee-bde7a309bb89", "sighting_of_ref": "indicator--1085709a-6a00-4b73-9259-d77ea243e45f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb14718-e66a-40ce-9e54-f6d821506377", "sighting_of_ref": "indicator--9fe193d0-db9f-4cc5-b317-b8b6f8ee93c4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd72aec-4b13-4ef5-99f4-e10763040641", "sighting_of_ref": "indicator--6cd3d518-a073-4f13-9168-f16b5e401c76", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c5f299-41cd-4640-bfd1-324c8cb94ded", "sighting_of_ref": "indicator--d091ba43-04d3-41bb-8221-cb985928acc2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600e0b2f-4309-4d9b-b587-794af26d15a0", "sighting_of_ref": "indicator--5b8c12c0-fc29-4e02-bb14-0512426d093a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d3f972-46b3-413e-a31b-97edceb6ab07", "sighting_of_ref": "indicator--cbc453b4-8bba-4901-9d13-e9c9efcb152d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28905e3a-07a2-4633-8d7f-181e4fa67f11", "sighting_of_ref": "indicator--3318ffeb-39c7-4efe-9c64-c56609dac99f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b1b7ef-e55a-4567-ac9f-a46a77b00055", "sighting_of_ref": "indicator--51caa922-e01e-44c4-8dcd-485cea3b1580", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab16634-7900-4479-b302-bb403a2cceba", "sighting_of_ref": "indicator--51caa922-e01e-44c4-8dcd-485cea3b1580", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59354b91-8c26-431b-91ae-b229bfba4f9b", "sighting_of_ref": "indicator--72146ec1-ca17-4d3d-8390-50c2c26e2f1f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095cfd1d-7fef-44f3-a4a0-ec940540f90d", "sighting_of_ref": "indicator--72146ec1-ca17-4d3d-8390-50c2c26e2f1f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737b1568-fb47-43c4-b90b-f9f2795e614f", "sighting_of_ref": "indicator--6ce71498-ba31-431c-b0c6-629b10fdfcbe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a198af7c-f18f-465b-b443-d7b0df4f84eb", "sighting_of_ref": "indicator--82bc2695-1688-41de-a223-f6d2f7eb7ca5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5dc05d-3028-4f3f-be9b-bca2e97222dc", "sighting_of_ref": "indicator--82bc2695-1688-41de-a223-f6d2f7eb7ca5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75562717-bf1f-47e2-a21f-99dc05e1842d", "sighting_of_ref": "indicator--3a4b67d7-8c9c-4cb2-887d-98415ca0a7c4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7a849d-c2ce-4a1c-a596-36abe548dabf", "sighting_of_ref": "indicator--3a4b67d7-8c9c-4cb2-887d-98415ca0a7c4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb74c0d-e0ff-4cf8-94ad-81e9d96e7bd1", "sighting_of_ref": "indicator--09818eaa-e5cb-4d75-8c96-7e2992c12508", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5059e1c6-5556-4c53-b386-a1ea86e91609", "sighting_of_ref": "indicator--09818eaa-e5cb-4d75-8c96-7e2992c12508", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4979d006-66e1-49dd-b206-a8776049a27e", "sighting_of_ref": "indicator--0b9d8925-d707-4403-a53a-1e737703409a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd956058-71ba-4594-9031-ad07d69dfe4f", "sighting_of_ref": "indicator--ae172013-e8a8-410e-a18b-a0b4db91a42f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdd9053-5a63-49df-971a-761643535cc9", "sighting_of_ref": "indicator--ae172013-e8a8-410e-a18b-a0b4db91a42f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586fc18f-e562-4bfb-b7e9-04242c78300b", "sighting_of_ref": "indicator--1715652e-d575-4ca7-bf64-e32b0159c8df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628b4fcc-8bc9-47c3-ae82-385997cfc159", "sighting_of_ref": "indicator--7a257f31-6cb4-47fd-8503-2feb7e013a66", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e85877a-5219-4339-bad8-6f62e25a7ea7", "sighting_of_ref": "indicator--a514850f-587f-443a-9346-e7e746f0ca4b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a260f2c-6573-4335-9095-735046d957a5", "sighting_of_ref": "indicator--a514850f-587f-443a-9346-e7e746f0ca4b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a24c3a-3ec3-49d9-bc1c-d77ca0f911ed", "sighting_of_ref": "indicator--41265750-007c-4658-9452-dd612010c6ae", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661bb9fd-edfe-4e16-a6ef-ca80a65aed19", "sighting_of_ref": "indicator--41265750-007c-4658-9452-dd612010c6ae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9826c4-1021-4607-aaba-9fe8c9ec981b", "sighting_of_ref": "indicator--7d52071d-786d-42e4-9522-bc82fe09d73c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6a8b9a-b3d0-4c4d-987e-e10b07ae6c90", "sighting_of_ref": "indicator--ed15112b-7831-4260-9e89-a1a7310f646a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366cf573-e838-4b2a-a3d3-83097309239f", "sighting_of_ref": "indicator--6b9f9bee-7ff1-43d6-8203-76e70bf7f5ec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882ae021-95ba-4672-acc6-bf16f1fc080b", "sighting_of_ref": "indicator--438d7d56-4c9e-4ab1-9153-4459d36c3a7c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40553d68-6ee2-4236-b766-17cd0f3c7652", "sighting_of_ref": "indicator--91228398-8f41-4347-a2a7-80b6a80cd5aa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69f82fa-b336-4d14-b18f-2acaca41cc54", "sighting_of_ref": "indicator--91228398-8f41-4347-a2a7-80b6a80cd5aa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6740e73-69c9-4c8f-9375-02e6d87a89fe", "sighting_of_ref": "indicator--19d1f647-b4e9-4b80-9177-1658a11baf8c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710b3322-708a-44c3-90e3-587ee709f1d8", "sighting_of_ref": "indicator--8e21da1a-c66a-4284-b92b-8abc7b488fc3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460e2d6f-0e2b-479b-9030-35cad272620a", "sighting_of_ref": "indicator--543472f1-cf42-47bd-8d61-940cbf0a0bb3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f22f02b-7f2d-44f6-b7e3-05934532459c", "sighting_of_ref": "indicator--d89685db-844b-428b-a650-506f0379e786", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42494d0e-af45-42eb-b734-94d7f78e6b6c", "sighting_of_ref": "indicator--ff33e47c-b060-4d47-9836-91503b0d7425", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e502041-4197-494d-a6cb-d3170dc7b3bb", "sighting_of_ref": "indicator--c686a266-d2ba-46ad-a77b-fe81fc38ba80", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0735c130-239e-4e58-8e7d-7a62fad24c50", "sighting_of_ref": "indicator--2401bcf9-ae51-438e-8954-bf3088a6cd9c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8efb86-bcfa-4a42-87d2-5bc48117fb1c", "sighting_of_ref": "indicator--69e2c8dd-fcab-47ea-9bd9-2b325595e5db", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d551c3ac-97cc-421b-a68d-824d3d01e8c4", "sighting_of_ref": "indicator--633b8272-14c0-4435-9c6b-051e2c5ee1ce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234ab265-41da-4f02-90d5-0f5c2d2ff90d", "sighting_of_ref": "indicator--f8bf89d0-5d17-43bd-8a93-7f3bddbe691a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054765a1-8978-4f1f-b847-67a01cc85822", "sighting_of_ref": "indicator--37d05a7a-7fbc-4a65-9713-51bc6d7e3903", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dee4277-640a-4983-82d0-2c736a80df23", "sighting_of_ref": "indicator--c4a845cd-625f-4791-8469-20d6e933cd35", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5618a9-ba7c-4a89-947d-3ce6345f8f29", "sighting_of_ref": "indicator--334bd739-f83f-4065-9b4c-ef7dac77883f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2494d7-c535-4e3e-bbc4-39f8a7e043d1", "sighting_of_ref": "indicator--f88830fa-0726-4003-b1f0-cd2205490e20", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4603667-3b9f-4ac8-a5e5-c06114caaa83", "sighting_of_ref": "indicator--c6c38b73-d793-4d56-99cb-6f3b9497b247", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7173f1e-72ba-44a0-9154-a8aaee7939ab", "sighting_of_ref": "indicator--927f18a4-bb69-43a6-9910-a9e6f42cd11b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57831283-764a-4aac-823a-8e75c9683c69", "sighting_of_ref": "indicator--85f1b880-2270-4b0d-aae8-1c9a47c0dada", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a7d061-cc36-4536-bb72-86bae5eae062", "sighting_of_ref": "indicator--7184677c-b065-46a6-b017-29e5ee1d6e9d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73641a59-777b-4e15-a8e5-e8f3346ab901", "sighting_of_ref": "indicator--79fb3983-ba67-46ef-a1f1-a96d44fa76b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc97479-e772-4535-abf1-e7d53687fe40", "sighting_of_ref": "indicator--2b36c868-2849-4954-b438-ef1295d350ad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14287275-13ac-454a-b16a-4b7580464da2", "sighting_of_ref": "indicator--a9ae8f5c-84a9-47dd-81d0-bb3a3f80a97c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb4850c-c2bc-4db3-aa35-951b8cc080f3", "sighting_of_ref": "indicator--b3998ca8-25fa-48d2-82ca-4a6acfa13a13", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca25316-0a97-4d87-8bd8-6ba7e59d3a5d", "sighting_of_ref": "indicator--b3998ca8-25fa-48d2-82ca-4a6acfa13a13", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd666b5-4de7-470e-88d5-35a57ba935c0", "sighting_of_ref": "indicator--ced2fe78-4eb9-4c30-b8a9-b8220fa77609", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d087658-9435-4c10-814a-faa1ec5ea2e4", "sighting_of_ref": "indicator--6765969b-d383-45ad-aec2-5044fe06b300", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d0a686-d80c-4da8-9a32-2b713d6b6607", "sighting_of_ref": "indicator--6765969b-d383-45ad-aec2-5044fe06b300", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b67cd88-6b52-4276-a705-28fbb6570922", "sighting_of_ref": "indicator--62a18c32-9119-4930-b11f-41abfde2fb56", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d98eb7-315c-40f8-b0b3-c160ee7b7149", "sighting_of_ref": "indicator--800cfe8c-01dd-4cb6-8105-1697f52257bd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a485e593-6673-4b78-9fc7-4d070e2ddbba", "sighting_of_ref": "indicator--800cfe8c-01dd-4cb6-8105-1697f52257bd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecac3d2-a14a-4ac3-b926-3aec3c54da1a", "sighting_of_ref": "indicator--d3ed6929-0a0a-4f0a-ac56-b199ec8c76f5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09053523-a18f-46d3-ad28-e3fa86938958", "sighting_of_ref": "indicator--e1b5f8b0-64c5-4df7-9556-eac9694381d6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c6e843-db7f-4b41-bd32-a2f52ba498c8", "sighting_of_ref": "indicator--343324be-fdce-474c-a4d9-7afcdb11f49e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff98acfe-eac4-409f-a511-920840562745", "sighting_of_ref": "indicator--f43e3d58-d9e3-479e-8ac4-ae7d3e9891c5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b3ef7d-3552-40a6-8d85-18b064dd35af", "sighting_of_ref": "indicator--f43e3d58-d9e3-479e-8ac4-ae7d3e9891c5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b1ffaa-6dd4-47fa-875d-62c3518e81b0", "sighting_of_ref": "indicator--1794758d-93f0-4220-9544-b5c09a6cf2ce", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb745dd0-0662-49a5-ab56-3fd701c8a91a", "sighting_of_ref": "indicator--b5829921-7f52-41ea-bb9d-92f3a0976b37", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458f3682-de5a-4cd1-9fcc-c6d643ce9570", "sighting_of_ref": "indicator--d345b5a3-6b1a-4663-bd1f-1a83a703aab2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f3a10d-9d23-446f-bf11-fa06a5200a84", "sighting_of_ref": "indicator--84f5ae8a-061e-44e8-a085-88388e06955e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422c6058-4fc0-4a96-945b-ba5524364548", "sighting_of_ref": "indicator--5e1f6e63-c269-4e90-bb57-522bb305a3e6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9492d6f-6045-4700-b43f-469f8de2247f", "sighting_of_ref": "indicator--04f7760f-54cc-40af-9eeb-8b788c041ecc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc46e50-1752-451c-9c95-70869b6670a8", "sighting_of_ref": "indicator--281529f2-3257-4466-90bb-63073010f441", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d3c292-032d-4e70-a9a2-e642053e6ec9", "sighting_of_ref": "indicator--281529f2-3257-4466-90bb-63073010f441", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1aab9b5-74cc-42ec-a770-1e5367a34e81", "sighting_of_ref": "indicator--89792a47-8228-4d04-ad47-9f78caa4e65a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31f65bc-51a0-4d4e-9f05-cf576b0b028e", "sighting_of_ref": "indicator--74df4237-b55f-40c0-aca7-f1280ca393a4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cea86c0-d551-4483-8397-ec7b2cfe4952", "sighting_of_ref": "indicator--858e586a-691a-46f0-b65b-da745bc85fe0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4184d933-0a3d-48f5-8343-5a4851279726", "sighting_of_ref": "indicator--02163162-1ab6-4b4f-af93-4f36250130fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806ffde5-93c8-448c-b5b1-fa08c1ed0657", "sighting_of_ref": "indicator--04c971e1-2f79-4ae4-8f5f-44364ea6fe45", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37815ea3-6c57-4d28-bd79-b303d10b14cc", "sighting_of_ref": "indicator--04c971e1-2f79-4ae4-8f5f-44364ea6fe45", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa0ade9-e029-421d-87b8-b0b3ccfe361a", "sighting_of_ref": "indicator--871dbdf9-038a-4ee0-b456-65547ddbfe4b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082450a5-64dc-4561-96d6-a5c83d7a47bc", "sighting_of_ref": "indicator--bb377238-6b0d-4feb-85c9-64961e3f588b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da15f78-2507-47c9-a879-7a45ce5d4aea", "sighting_of_ref": "indicator--bb377238-6b0d-4feb-85c9-64961e3f588b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0031f93d-2aff-46a9-b755-9dc408feb0ed", "sighting_of_ref": "indicator--6204eaf8-0b28-42a7-9e76-f4e5253b9be5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616bcfa1-db90-4279-bb85-8b7bd40f141e", "sighting_of_ref": "indicator--6204eaf8-0b28-42a7-9e76-f4e5253b9be5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb0834c-4de9-4cd7-be5b-1a9217167265", "sighting_of_ref": "indicator--b5b8ad0a-383a-4bc3-b38d-2dd9b40d24a5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a3ce28-378e-4973-8eb8-b0462664c50d", "sighting_of_ref": "indicator--b5b8ad0a-383a-4bc3-b38d-2dd9b40d24a5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2683f7c-4340-47ad-a6af-0f581ce3e1c7", "sighting_of_ref": "indicator--aa8fc104-2acd-402b-beba-ea6ecb752397", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46b0c31-20e3-4e41-81a6-4839318bf58a", "sighting_of_ref": "indicator--5160c292-3ad3-4a51-a3df-769f81d89ff9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea101a9-a309-4fd3-ab22-50395c22b6a6", "sighting_of_ref": "indicator--3e860773-03c0-4ee1-bf14-bc10cfa408df", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c82df0-c9c8-45a7-a1a3-f95f9fef9b6f", "sighting_of_ref": "indicator--3e860773-03c0-4ee1-bf14-bc10cfa408df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f3f7d3-2f90-4aeb-9e26-a89ac7e397e6", "sighting_of_ref": "indicator--61a13cdd-6fd7-4905-b976-5ab12b688535", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e18122-c57f-46f0-8b4d-22cada6fba45", "sighting_of_ref": "indicator--61a13cdd-6fd7-4905-b976-5ab12b688535", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cc50b8-d59c-4d1c-9908-fc963633299b", "sighting_of_ref": "indicator--fc121fa5-c590-4edd-9b3d-6b7a69279617", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e2ae65-bf8d-49d5-b685-67733bd4fe76", "sighting_of_ref": "indicator--120758a8-ce5f-4b48-85b0-ab7c36d668f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3adfc8a-9bc5-4692-8b63-9ab35b5366a8", "sighting_of_ref": "indicator--7fa1db6b-d41c-40d0-bf2d-c162c2ab2db3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b68c725-210b-4e70-a302-fa941703fb9d", "sighting_of_ref": "indicator--7fa1db6b-d41c-40d0-bf2d-c162c2ab2db3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95459cc5-5792-4932-8e31-45987f9ecd79", "sighting_of_ref": "indicator--7b2f360e-1cd4-4628-b7d6-45e44b6f8086", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad969551-cf2d-4a18-9d64-d8723bac4777", "sighting_of_ref": "indicator--85a3f8ce-6727-414c-ad15-d276054b19f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5efef14-c480-4d3a-9304-ab19c07b0cd3", "sighting_of_ref": "indicator--0acc8879-27e9-4585-9afe-ff47b10bf399", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729f7926-753d-412d-a69e-926420a632d8", "sighting_of_ref": "indicator--4461d881-e69c-485e-92b9-1a9b67f33730", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9c0074-03b4-4544-a12f-d1765bfba3de", "sighting_of_ref": "indicator--7cb45c4f-7f1d-4624-9c22-67bc8d3a0651", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0561b97f-4b96-4441-95b7-fded9c815b3e", "sighting_of_ref": "indicator--7d3c75ef-5127-41ff-9c1b-d8fa3fc400db", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416eb746-1746-4c57-bb6a-11fe88724642", "sighting_of_ref": "indicator--dd23cafb-d0a1-454e-8d6f-3b12c842295a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99ecd5f-5dbe-4e75-b0ab-525123c04dcc", "sighting_of_ref": "indicator--42e30b98-3fe8-4363-9d48-44e67aef268c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55500c4b-f8fe-46ed-875a-32c20f5cf781", "sighting_of_ref": "indicator--0ee01a2f-e831-4f7e-9ced-87e3d7478852", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7cbab3-b042-4daa-aa9c-64d6878ec894", "sighting_of_ref": "indicator--b8fc7304-1110-47c5-8b05-6b132706fe69", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451b1893-58c9-4841-b453-37a0b4f090b9", "sighting_of_ref": "indicator--444115d4-a115-4d7b-baf7-08e02561aff7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858ef6cc-5af3-4c79-a47b-09423c97d01f", "sighting_of_ref": "indicator--a25497cc-d023-4e76-b72a-d8b4004ba211", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24661d6f-2a23-4852-8aeb-a18f87f0e9bb", "sighting_of_ref": "indicator--cc9cfe90-dd68-4893-8356-96a0b18e1f30", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a3c8d8-96cf-4bbe-8e2a-3930fbe97bfc", "sighting_of_ref": "indicator--fe1457ff-7ae2-49cd-aa5a-d21e0cc1c6be", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec7f69c-7b9a-4e4e-8209-157964662f03", "sighting_of_ref": "indicator--8db9145d-9971-4705-ae5a-03ceda3a0d71", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f943992-0354-4cde-a891-ee7bfd10552b", "sighting_of_ref": "indicator--fa7ad939-6b97-440b-9850-60b8f6febc25", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5d8175-5950-45b1-b465-2dd71adbc08e", "sighting_of_ref": "indicator--da44b069-2112-4c82-bc35-7ed7cc9bf5d5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49e8422-427f-4742-97b5-deed80b649d7", "sighting_of_ref": "indicator--da44b069-2112-4c82-bc35-7ed7cc9bf5d5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f71140a-96c2-41c8-9444-dda4513a5293", "sighting_of_ref": "indicator--0245dcdc-555e-43c1-888e-7737f3735a0e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9e0363-3af0-40da-940b-a79cdba1c624", "sighting_of_ref": "indicator--4b0c9bb3-bbce-436f-9a7e-81f67ee28b72", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a59df7-5b3b-4c08-9cb2-2181d232c6a1", "sighting_of_ref": "indicator--0e3f6ad4-9c08-4faf-9d6a-797ff0a8704a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e6e2bc-3c7f-49b7-ae0f-c4e7153c5103", "sighting_of_ref": "indicator--b67c0573-eb1f-4657-b568-1438551da713", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb9c6d4-9c37-4890-b844-725244931843", "sighting_of_ref": "indicator--c3171508-3708-4c51-8533-974021c82da6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62dcd24b-a262-4765-b829-047bc5f326e3", "sighting_of_ref": "indicator--c6e14de1-44c7-4279-9966-8f77837c05cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337e6144-f5be-49a1-92c1-162319d4840b", "sighting_of_ref": "indicator--a7d0c175-7f71-48c4-8c3b-0ec52209d8b6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d93a37-c06a-46ac-9e0c-251e25ca6c89", "sighting_of_ref": "indicator--d92e8751-822f-44ee-8a81-1d6f502f71fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd22a71-d3a4-4ee1-a3a4-d22ccb5f209d", "sighting_of_ref": "indicator--d92e187d-7155-4be9-9204-eb3a4070d77c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c14712-2aac-4f51-bf1a-b8e631a6ee21", "sighting_of_ref": "indicator--eb4d294f-922e-45eb-82f8-b58d00c0cbdb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05abc2f1-d4fa-463b-81c3-5715460e86b4", "sighting_of_ref": "indicator--1895af48-fa2e-4237-9901-97589311b852", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663f0604-2d62-40e8-b341-d50fd398374d", "sighting_of_ref": "indicator--e7dc3d95-7c82-4288-9347-e3abda502f6e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8b1f61-851e-420b-85ef-b05ea6d9282b", "sighting_of_ref": "indicator--9c0af927-dc08-41b3-89c5-8fa94cdadf33", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7712c720-97c2-431f-a42e-ac3c90d95144", "sighting_of_ref": "indicator--b871571c-89d0-4beb-971f-ef3790551612", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451b4f43-0bbe-49ff-9ea5-ae2bfd69aa48", "sighting_of_ref": "indicator--387b50dc-22b1-4291-b1c3-ae63403cd056", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf776d0-c8af-4929-b335-2d739eeaac78", "sighting_of_ref": "indicator--387b50dc-22b1-4291-b1c3-ae63403cd056", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ebb795-d4c5-441d-8f93-e55e441e3970", "sighting_of_ref": "indicator--e3716339-e528-45b0-91c1-20ab222452e6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3dcd44-3207-47d8-8f33-97383d91d8ec", "sighting_of_ref": "indicator--f79404d2-21e5-4de6-bc32-1142a909aa14", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a27242f-96db-454c-9e95-e4b9d9e39cef", "sighting_of_ref": "indicator--d0de2c6e-247d-4962-beb3-f41ce3bb394e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525b86f6-cab3-4e46-a12f-5e2406f37fcc", "sighting_of_ref": "indicator--97d327a5-2e16-4278-ae9c-2dade3262745", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160ecac0-6032-4a2a-b587-6d3c0dedbe4e", "sighting_of_ref": "indicator--ab5f7b8e-8002-4516-affe-01af5dad244b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89be891e-fc15-45ef-a54c-db90b4d94ebe", "sighting_of_ref": "indicator--633c54d4-dcbb-4c85-b313-6bcabf4ba450", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c8b283-e1ae-413f-8e0b-89e50df09f9c", "sighting_of_ref": "indicator--a530a684-2586-488d-b299-31c2ea3665ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae172d3a-ac4c-43f3-b1bb-a7dbe50c31cd", "sighting_of_ref": "indicator--20f6c957-3623-4de5-9357-d8ba453c04f3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d4c8f5-9d0c-4b26-98b6-bfc1eb0491a0", "sighting_of_ref": "indicator--fad9e28d-c82e-47a0-b9ef-8ae1b81dbc24", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fbcb2f-5149-441c-883b-042de40f03e1", "sighting_of_ref": "indicator--606ec49d-46e2-4210-8012-f398f80db974", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb9450c-5070-4d91-ad98-894c4497f7b4", "sighting_of_ref": "indicator--a6f1fe60-2eb5-450b-8509-28693679e211", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e4b657-46a2-46bf-a9e0-86758ecbac72", "sighting_of_ref": "indicator--e1d95ec5-0ae0-419e-8a78-fc37610675d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5abe0e8-7f17-4c25-9b06-57ddfeef5672", "sighting_of_ref": "indicator--66c34b1a-5e1e-4342-87dc-df8bbae91d53", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68520193-a498-47e4-94ab-ecf372dd0b04", "sighting_of_ref": "indicator--56fdd101-8ae7-4e80-8abb-bc6b25c06951", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab73733-ddab-426f-8179-59de664e8c3e", "sighting_of_ref": "indicator--56fdd101-8ae7-4e80-8abb-bc6b25c06951", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ac84c5-ee1b-47a4-90ef-4e6f26f3b531", "sighting_of_ref": "indicator--97d1a492-370a-4d9f-a52a-7e3c726ba242", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682d66e2-c81c-4245-8a3b-1766e5460c24", "sighting_of_ref": "indicator--9406581e-5189-46ff-9d4e-e4a14e6fda31", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e08744-b3b6-40a9-849f-9781dd9fa9cf", "sighting_of_ref": "indicator--ea3c0aed-9737-468b-be76-6f700bb58ce7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36dd51a7-f889-49cb-b597-162f3693d715", "sighting_of_ref": "indicator--dd52a5f7-5741-484f-91bd-1ee818a473cd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c4d514-570b-4787-af3b-cc8416ced7dc", "sighting_of_ref": "indicator--e120ad65-1dbf-45be-86b7-190cc9c7d004", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708992f0-a85e-43b4-883b-bba26ee6defe", "sighting_of_ref": "indicator--a1e4d64b-9f4d-48f5-ab3e-1177c456b064", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd95e213-f57f-428e-a871-06da67b2a059", "sighting_of_ref": "indicator--aba4c93b-d029-44dd-af27-74e09c94a356", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad38145-0c26-4197-8b4c-563112bc335f", "sighting_of_ref": "indicator--aba4c93b-d029-44dd-af27-74e09c94a356", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828fe97f-fc47-47d8-85ab-3266e6a5ee0a", "sighting_of_ref": "indicator--8bae19c7-3302-4de3-b7eb-e3ebbc111e3d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02838bfb-66e7-435c-85bd-51d47a601c4c", "sighting_of_ref": "indicator--8bae19c7-3302-4de3-b7eb-e3ebbc111e3d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8906665-731f-44de-9910-5378d6b524ea", "sighting_of_ref": "indicator--5ad52b8f-b1dc-4676-8cd2-3618265739ad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c449f0ac-546b-4c38-94a7-4f2d9146b40b", "sighting_of_ref": "indicator--7fa17da3-831b-443b-a77c-732c5e313dc5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242b83b4-8452-49b9-86ff-41ae9c496503", "sighting_of_ref": "indicator--cba7b117-38ce-45dc-bfd2-f9f8782b5b3a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8686becc-a862-461e-b25e-9dcab6dc9511", "sighting_of_ref": "indicator--140ad19d-0ec3-4345-a4b9-ca1560c0fd0a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43f60d8-b49f-4dc7-866e-099095ccad99", "sighting_of_ref": "indicator--86df9986-537c-4f04-b43e-1bebf7c397d5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16b01c5-1626-48de-aacb-ef100b157874", "sighting_of_ref": "indicator--fb8666bd-c583-43bd-b06c-9b9a9b95cf5f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d634392-81be-477f-83fe-dd46093b859a", "sighting_of_ref": "indicator--208ad118-984b-477f-a392-37ded196ad10", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f8c383-6029-4eab-8fe9-7a59e3defe7e", "sighting_of_ref": "indicator--208ad118-984b-477f-a392-37ded196ad10", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10320214-10e1-4adf-a91d-284bf48af19f", "sighting_of_ref": "indicator--7e2c3d99-a528-4da2-a7af-60554c0c06a1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a67b24e-f286-4a3e-a150-76c98fec3e98", "sighting_of_ref": "indicator--f43dc263-0b73-43b8-b441-c93b385e1e6f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3eb032-e3c2-4d50-ba32-038f8243202a", "sighting_of_ref": "indicator--f43dc263-0b73-43b8-b441-c93b385e1e6f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e648b6da-eeb7-495f-a4d7-f67b3132410b", "sighting_of_ref": "indicator--924da547-7349-4638-b574-9d70d3f439d2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c648b043-5d38-4d5a-91c9-b0d5663bbe02", "sighting_of_ref": "indicator--924da547-7349-4638-b574-9d70d3f439d2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f498ae9f-b965-4a7d-aaf8-1974e77d1357", "sighting_of_ref": "indicator--cb20254e-c036-4afc-a189-0f263d325d3a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5d38d4-336c-4eed-a3ba-31f2a9a80664", "sighting_of_ref": "indicator--8d796433-32f8-4a4f-99ee-bd99724c04dc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2439ed4c-d4ae-4a30-b4e9-b1eff7e0faf6", "sighting_of_ref": "indicator--fd722be8-06a8-404d-aefd-4b7781256357", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165afaa3-ad2c-49af-b32d-0b631a6567b7", "sighting_of_ref": "indicator--ef6869b5-fad4-4b00-a6b5-04857f1676b2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f87215-f778-4882-8bb1-96269355870a", "sighting_of_ref": "indicator--ef6869b5-fad4-4b00-a6b5-04857f1676b2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b6a925-e2e7-4052-aab8-d215667797da", "sighting_of_ref": "indicator--2db89d67-7635-4f5f-a447-8201e455f931", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55ca597-117c-4f7b-8d0e-b9a40c23aaf2", "sighting_of_ref": "indicator--3bc3d1b9-79ae-44b6-8cb3-37b4af2e2699", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff6f8f1-e57f-4d87-a83d-f746e7df4a2e", "sighting_of_ref": "indicator--334a56f2-13c3-4522-ba16-6cd0f4550183", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e684f62-7287-4023-a2d5-2b8eab409b17", "sighting_of_ref": "indicator--2f3d0cf3-eefe-4d89-9a0b-090a59b89fe7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0fdc80-6062-4260-b83e-e595a857dca7", "sighting_of_ref": "indicator--780fec80-493f-4f93-912a-57714a5b9acf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ace6ea9-dcbe-4762-ba3d-8835b60546c1", "sighting_of_ref": "indicator--b2499b8e-1c30-4a9b-9099-05dda421aab2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1d1a45-8640-429c-9a1f-8ee27cbf4853", "sighting_of_ref": "indicator--b2499b8e-1c30-4a9b-9099-05dda421aab2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5910dc-f5e9-4fa2-ae2d-0aa77b0fe2cd", "sighting_of_ref": "indicator--81515590-4585-407a-89ac-38f3ed31a0e4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4de67db-d537-43e7-a89d-2188796dfc31", "sighting_of_ref": "indicator--f175528d-ea2f-4b06-9a9d-aaf1bae258bf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab889a90-8db1-4345-a0f8-11ff1e331f69", "sighting_of_ref": "indicator--49925887-0a2d-443b-87b7-e0a89eb17e68", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501a4238-4025-48d0-9ca3-7e4a58749d88", "sighting_of_ref": "indicator--4aa0391e-ec50-4e09-8b78-22fcee97387d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719dc45a-1cb9-4ee6-bbd3-2347d07ef854", "sighting_of_ref": "indicator--a7b9f761-f7e8-49ec-a687-4212d58fb166", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a7ceb8-1612-448b-ad9e-6696a1b9f1db", "sighting_of_ref": "indicator--a7b9f761-f7e8-49ec-a687-4212d58fb166", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45142a70-821f-410d-9a12-4ec7e7439a1b", "sighting_of_ref": "indicator--6d029ac6-9bef-488f-8aa0-aa61c0a87758", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fc833e-691f-428e-9f6e-5f4c04db1210", "sighting_of_ref": "indicator--9805cb54-7d62-40b3-a1d8-ed88127f747b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b433743-104d-458f-a844-e5f9a8acd09a", "sighting_of_ref": "indicator--68fa13c8-af05-4b9a-9210-dad772527a23", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3aceb36-dc5a-4890-9441-226f414b3ee2", "sighting_of_ref": "indicator--757b77e1-b663-4980-bf39-7eb8c46182a7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49aec9b4-cc01-4ec6-9e86-d0b38389f61f", "sighting_of_ref": "indicator--757b77e1-b663-4980-bf39-7eb8c46182a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7beacd-966f-4297-a290-163dc96ac043", "sighting_of_ref": "indicator--c350bfe3-b1c4-4647-a904-3259a3a08437", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4562f14-0ada-49fc-b1fb-c0f3ea093b73", "sighting_of_ref": "indicator--df924cbc-198e-44b8-bc2a-5d0ace2f1c19", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6993b1bf-6eaa-4748-9e23-6871a2266d55", "sighting_of_ref": "indicator--2849fcbb-514c-43c4-b295-be91697b3ac7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2e4ba6-e90f-42c1-b9f8-57eedf1d16ee", "sighting_of_ref": "indicator--47c83ea2-2bfb-420a-80fa-8bf5fc661454", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47e5da6-a7f6-4b9d-b171-598e249de914", "sighting_of_ref": "indicator--f9b1ea71-2c45-4b9e-b91a-79ef201df3b8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c19be52-e057-49aa-b1d0-9f0cceda4c71", "sighting_of_ref": "indicator--ac4e869d-a4f1-4602-a69c-198ea89e5243", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95c3659-1aca-436f-b041-6c8acf17bb81", "sighting_of_ref": "indicator--1f7649b6-88fc-4c4c-b263-56e6090338a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d66419-4490-446f-ae92-8daf79dac879", "sighting_of_ref": "indicator--0eb9887a-a3dd-4551-a12e-1975e53e265f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dab4b5f-c70f-4b94-b228-9ced35ccf9f0", "sighting_of_ref": "indicator--f0c56432-95cc-4e31-b9a0-a02255a36c91", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a31b4ff-8f0c-4ff6-b341-e2fb9ad21b65", "sighting_of_ref": "indicator--986bffdd-b91d-40de-8f23-7563d587a57d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82316f88-fe7c-4d16-8575-a88b5e7eb678", "sighting_of_ref": "indicator--4a861b9e-95fc-4dbe-a2bd-f1b4d8497e91", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c17a6d8-5228-4476-980d-69a1410f1c0c", "sighting_of_ref": "indicator--7d0358ca-4724-4f87-b5b6-5585510e93ce", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3359899f-daaf-412f-8ea4-87a0f26ef0fd", "sighting_of_ref": "indicator--7d0358ca-4724-4f87-b5b6-5585510e93ce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6817daa-6b6f-4b53-b4a7-8dc74f66ee6f", "sighting_of_ref": "indicator--7800c1c7-d8e0-4bbc-9b94-fbcd2d0a3569", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ca872d-e4ea-4d48-9910-52e5f52b9340", "sighting_of_ref": "indicator--2712e012-9fa9-49b0-b7f3-5bce8f528335", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcc0070-cd43-4ac1-ab94-c1cfb2795174", "sighting_of_ref": "indicator--2712e012-9fa9-49b0-b7f3-5bce8f528335", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4834462c-b3f3-4988-8202-6e4ca7d4f245", "sighting_of_ref": "indicator--44ca4749-cad5-4dcf-83d5-9f3e328ab158", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f745fe-bd10-43ba-8811-cac7260c3a18", "sighting_of_ref": "indicator--e69912b5-a59e-4282-91f0-fdb57e7bc1ca", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4cfe1a-559f-4cfd-8061-475c2916efc8", "sighting_of_ref": "indicator--37954d19-a6bd-42b8-8098-a16a801f7d57", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c253d50-b655-4e1c-bfcf-ca923d3b7b9f", "sighting_of_ref": "indicator--7ca256a7-6778-4a37-bf3a-40f1bafecdb5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a93547b-85b9-4905-8f3e-38c9a9c0dab1", "sighting_of_ref": "indicator--cafbc915-e59e-4bf0-8c38-db67e567a7b6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27d940e-cf5e-4e11-b2d3-c9e906b5d6f0", "sighting_of_ref": "indicator--e1702d4f-2e68-4778-878f-c2c1c9516e11", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794181ab-837e-4661-9d7b-f488a75eebd4", "sighting_of_ref": "indicator--d94dbda9-c895-4217-a638-333b3b3194f8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0417042-01d2-4c55-9538-f052fd1726c3", "sighting_of_ref": "indicator--407101ec-99cb-48d4-afd7-cc0fe6a36030", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4922f4-dc68-444b-b806-f35b5d4ac222", "sighting_of_ref": "indicator--d570d40f-9350-4385-b706-12cf13d213be", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7008f55d-0fed-469e-bf47-de53f52e35bd", "sighting_of_ref": "indicator--c361a078-632a-43f1-9325-943f093a5b77", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8516af-e77f-4b75-bb0c-6d60c8239a4b", "sighting_of_ref": "indicator--1e998a43-583f-4d29-9085-b6d8a55924a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe03dd5-c074-43b5-9264-110a5c730af2", "sighting_of_ref": "indicator--aecdcf9e-d291-4784-8c46-936f00d25d26", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f7cf9d-e4ca-4fd1-9d6b-0db63332f388", "sighting_of_ref": "indicator--5e8b7ca4-3323-4a58-9d50-8db5b5d45d2e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd222fc-f02c-4793-a02e-55ecd487ee44", "sighting_of_ref": "indicator--505c21c1-4395-41f0-a74d-b3ae5b8c751f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d84f46-c506-4ff1-a0dc-e0bb9c017ead", "sighting_of_ref": "indicator--38571054-8df8-4887-a8ee-6714547d363b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd143f28-a9a8-4cae-a7eb-43e206586564", "sighting_of_ref": "indicator--e5c3490a-bf12-4111-b6f6-de35982ca7fd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13cbc513-2c91-43aa-be8b-95e6218a096f", "sighting_of_ref": "indicator--85727cb9-75ab-4724-b4ef-9659c05470cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65014362-05a3-4592-a019-90bb514e0bc6", "sighting_of_ref": "indicator--2152c6fc-aea2-40e9-bc74-1f04e05c3d49", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70fb765-1356-4842-b03b-34fa1233c455", "sighting_of_ref": "indicator--1bfe5e0f-3651-4ef9-ad09-66a7bacb8073", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf03319-bba7-4be0-a07a-db4276a828e1", "sighting_of_ref": "indicator--27c21caf-4147-43d9-87eb-c1266bfac051", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4882b787-2458-47ed-accc-4078ca6ea114", "sighting_of_ref": "indicator--5a95f50c-164c-434d-b5ea-e0c05de9e3cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b2947e-3a6c-4c91-91cb-678a6551b9d4", "sighting_of_ref": "indicator--451248d7-d6d3-4a58-9af4-ea88d79913a8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a2b4f2-57f8-4dd1-a93f-c9ae2ffe04d9", "sighting_of_ref": "indicator--451248d7-d6d3-4a58-9af4-ea88d79913a8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63559b4a-d2d6-4655-a8a3-5bc1371debb6", "sighting_of_ref": "indicator--a1eaf63c-0c30-4e6a-819a-60797e2bbddf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d89a14-84af-46fe-a5d7-219281bf6264", "sighting_of_ref": "indicator--a1ec92d0-5788-4d12-972a-24a36388dbb6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe8a29e-0f57-4f90-b91d-81c9edffe9cd", "sighting_of_ref": "indicator--5ba1d9ca-abe2-4d69-8fc6-6cdd16c88e46", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ed3c18-a6f4-4a93-ab19-70b86d7b553d", "sighting_of_ref": "indicator--7d4b1886-3096-4e48-a243-a0447907f5a9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29ad6b3-036c-46ff-8d25-3c59552b6018", "sighting_of_ref": "indicator--7d4b1886-3096-4e48-a243-a0447907f5a9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef7f311-f340-4432-a612-2d1b5617be8a", "sighting_of_ref": "indicator--c75551ac-dbfd-4224-be29-484792673ae5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce8508d-89cc-4e3b-acd4-5f05761bbf45", "sighting_of_ref": "indicator--c04a9304-5a39-4b66-af01-6e19e669d8c9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57dab731-ed1d-4814-9af4-98016af1b3ae", "sighting_of_ref": "indicator--e7c955e8-92f3-4bd4-bd28-b059ec7580d3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1827dbe-31f6-4c56-a598-64abda7695a7", "sighting_of_ref": "indicator--33bc810d-0b6b-46ce-a3b0-97c107c6a356", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4d588e-18fb-4218-a387-af3cc4dfa92d", "sighting_of_ref": "indicator--33bc810d-0b6b-46ce-a3b0-97c107c6a356", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d20e16-1461-49f6-ad70-cef084c4baaa", "sighting_of_ref": "indicator--69a0e4f8-7dee-4be5-b74b-8a8d9a568f6b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb3c673-1fcd-4ac8-a347-dfc725493e0f", "sighting_of_ref": "indicator--69a0e4f8-7dee-4be5-b74b-8a8d9a568f6b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade7fb39-4307-4da0-9997-a1057c8c567a", "sighting_of_ref": "indicator--9163a292-8e7d-4155-aef3-5285ed3b3876", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709670ba-1f9e-406e-8ea3-f29601125638", "sighting_of_ref": "indicator--c404039b-ed70-41ee-a9ce-85c3f2978cfa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4683c196-64e7-4fff-a05a-07bdce47c2a3", "sighting_of_ref": "indicator--c404039b-ed70-41ee-a9ce-85c3f2978cfa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7319ce8b-b9e4-4c5e-9612-6726194c094b", "sighting_of_ref": "indicator--a6d58bab-8acb-44d4-bb43-429dd0162c55", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9b0b1b-9082-4ae6-bd71-2ef33bf57f21", "sighting_of_ref": "indicator--a6d58bab-8acb-44d4-bb43-429dd0162c55", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca324f6d-60f1-482a-8dd0-c14c31054ab9", "sighting_of_ref": "indicator--76934e55-b928-4de0-8662-3ef1378cbc97", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9532fe25-6afb-4662-b42f-9a95101f1bfd", "sighting_of_ref": "indicator--76934e55-b928-4de0-8662-3ef1378cbc97", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928b7c35-12e8-4a26-b6b2-278c30c880e6", "sighting_of_ref": "indicator--7d43188d-5dd8-4ba0-9e15-0aa86825d3c0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91eb0c68-739b-4c19-b036-72af14d7cd7d", "sighting_of_ref": "indicator--7d43188d-5dd8-4ba0-9e15-0aa86825d3c0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4483f9e3-c4c7-4cd5-8502-7aa942c0ccd3", "sighting_of_ref": "indicator--fc97b9b5-86a2-4f6b-bf60-1ae5b0f2a059", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52549d5b-d78f-48ec-9465-f4749d6c1671", "sighting_of_ref": "indicator--ac11f3d3-e9bb-4846-aded-e3f941ae23b0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d28e749-c658-41c8-9932-42994af16d95", "sighting_of_ref": "indicator--ac11f3d3-e9bb-4846-aded-e3f941ae23b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbc5cf7-883c-484f-bed7-00f253e9f6b6", "sighting_of_ref": "indicator--22c99475-7adc-4995-a090-bceb5702169a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b910e35-49f3-4b43-8805-2e413e2e5b20", "sighting_of_ref": "indicator--22c99475-7adc-4995-a090-bceb5702169a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179137e2-3c37-42aa-803a-0d4382bce154", "sighting_of_ref": "indicator--76aefdb2-acd3-4287-b096-b4d35369d388", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dbf93e-d186-49c9-a762-e6a15bc1091f", "sighting_of_ref": "indicator--76aefdb2-acd3-4287-b096-b4d35369d388", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ea49ea-e19d-4e85-90a9-02f5bec1f0c6", "sighting_of_ref": "indicator--ccbb1548-e7b8-435d-a164-fca86cf5aeee", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f665c9-da7a-4fc5-aca0-d5581910a324", "sighting_of_ref": "indicator--ccbb1548-e7b8-435d-a164-fca86cf5aeee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88ec4e2-2111-4a97-be43-aad9577e5a8d", "sighting_of_ref": "indicator--69ad9cb7-9259-4166-bf76-87363842405a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a6074e-8dd5-4dd9-9854-8231157903af", "sighting_of_ref": "indicator--69ad9cb7-9259-4166-bf76-87363842405a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c54be2c-4148-4317-a8f9-589736474180", "sighting_of_ref": "indicator--1ce304d0-1990-489b-83d5-5906d182f001", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8daa54ff-4b0d-4019-915a-48af4a3df70c", "sighting_of_ref": "indicator--1ce304d0-1990-489b-83d5-5906d182f001", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a894c300-ea62-4e69-ac7d-f44841ce29d7", "sighting_of_ref": "indicator--6e46a9b9-adec-4b66-b738-de0060967ca1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9249f7-c625-4dcc-a35d-95db31c949a4", "sighting_of_ref": "indicator--6e46a9b9-adec-4b66-b738-de0060967ca1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca58b2e3-053d-4b3d-b0ac-18c8ae7bf702", "sighting_of_ref": "indicator--c28b111c-55b6-4f4e-80c6-4107a4d17982", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73dfc93-4249-4f14-9e94-449629878c9c", "sighting_of_ref": "indicator--c28b111c-55b6-4f4e-80c6-4107a4d17982", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7879f150-c5c8-4a65-84aa-51401df08b1c", "sighting_of_ref": "indicator--c7d720a9-fdd1-4ef8-a7e0-6a7632c2c746", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81bf5fc4-407e-4bbb-adea-bc7fdbf4043f", "sighting_of_ref": "indicator--c7d720a9-fdd1-4ef8-a7e0-6a7632c2c746", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f577789f-4ec6-4022-b46a-42887bb4043e", "sighting_of_ref": "indicator--3ef4e2ec-6554-46f2-b346-56a68238db5a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e79af61-6379-4dd2-aded-6145a8681bf4", "sighting_of_ref": "indicator--3ef4e2ec-6554-46f2-b346-56a68238db5a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef85387-c890-4652-9096-55c87c44540d", "sighting_of_ref": "indicator--a3f2f104-085b-491f-9f3c-070363d0816f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f64adf3-2b28-47ff-8d7b-0da7c5b0195f", "sighting_of_ref": "indicator--a3f2f104-085b-491f-9f3c-070363d0816f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a29489-087e-4664-b9fb-0c8f37575a3c", "sighting_of_ref": "indicator--67d5e9d9-0f08-489c-a4ec-2eecdea57fec", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ef8c69-ac06-4418-b918-f990e516b949", "sighting_of_ref": "indicator--67d5e9d9-0f08-489c-a4ec-2eecdea57fec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa395faf-4618-4c47-af8f-1090cbf42a6c", "sighting_of_ref": "indicator--33918211-62fd-4ff6-a57a-4c014e1da7e6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94fa789-aad9-4ba3-a5c3-2701f9a7458f", "sighting_of_ref": "indicator--33918211-62fd-4ff6-a57a-4c014e1da7e6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e897caf-0dcd-4d17-936a-4c98c70c9129", "sighting_of_ref": "indicator--b2d3d285-b144-4e42-bb6d-770816aac88a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5d872a-4f42-4031-8160-7e88277d9b9c", "sighting_of_ref": "indicator--b2d3d285-b144-4e42-bb6d-770816aac88a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17eb1d2-aaa5-4234-98ee-c685823764d9", "sighting_of_ref": "indicator--ed91b606-64c0-4113-888f-128bd4be2148", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9666a3a4-2519-4d5e-9326-fc43f8aa7900", "sighting_of_ref": "indicator--c571db6b-ddff-4d2c-a0ce-ee2521f84e5a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73302fa-c6d5-4831-992d-21c114cd1761", "sighting_of_ref": "indicator--bae8124c-7ebc-45d8-859e-58702da553e0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306648c5-c0f5-4d68-be66-2c4cb7921ef2", "sighting_of_ref": "indicator--bae8124c-7ebc-45d8-859e-58702da553e0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a966c805-b755-4262-9704-9430d3e975cc", "sighting_of_ref": "indicator--8d84fb3a-36c2-450b-b8a0-b3d9b02f388f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a826285-8239-4a30-8c79-cf4cc16ef4e4", "sighting_of_ref": "indicator--8d84fb3a-36c2-450b-b8a0-b3d9b02f388f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4847c81-d8b2-454f-8fda-87ad4eaea9cc", "sighting_of_ref": "indicator--7dd5bb2c-c10a-4c6a-a01d-b57ab3880deb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ced198-ca2d-41ab-ab02-a509d8af6fc9", "sighting_of_ref": "indicator--0836b4f5-bd2d-4149-a33b-b7668abfbb2e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e0c1d3-7ff0-40f5-8217-2fb3247bcc10", "sighting_of_ref": "indicator--0836b4f5-bd2d-4149-a33b-b7668abfbb2e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049bf611-3c63-40c8-b13d-83643d1b33ff", "sighting_of_ref": "indicator--01900777-c9ae-484f-8a73-89b3f5e5bd20", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42104326-e433-48a5-a560-7b5df904f9f8", "sighting_of_ref": "indicator--01900777-c9ae-484f-8a73-89b3f5e5bd20", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4398a0-8370-4612-a2e4-f13f2a310bcb", "sighting_of_ref": "indicator--2196b008-2c2c-4f93-8133-939d8a185482", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09111a0e-3fdf-4f70-9f8e-b09fc2f05901", "sighting_of_ref": "indicator--2196b008-2c2c-4f93-8133-939d8a185482", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd42f18-2dd8-48c3-bc7c-6e413e61eded", "sighting_of_ref": "indicator--0fd7478e-41cc-4a11-8cea-17bcf898c56f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d768c6c6-81d5-4d50-9d0c-1634954dc6a0", "sighting_of_ref": "indicator--0fd7478e-41cc-4a11-8cea-17bcf898c56f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16307c6d-65db-4ebe-b809-cbfa7ff836ca", "sighting_of_ref": "indicator--c068e1f1-b5df-48f9-b983-1c5a9a1258ba", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f635be5-c5ed-4c41-9efb-2c367331ee41", "sighting_of_ref": "indicator--c068e1f1-b5df-48f9-b983-1c5a9a1258ba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9908b381-07dd-4058-9a86-bc04d7af2338", "sighting_of_ref": "indicator--b58e76ea-f2ab-4108-be33-95e31fd9b1c5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495afa5c-74ed-45fb-9781-16777408e228", "sighting_of_ref": "indicator--b58e76ea-f2ab-4108-be33-95e31fd9b1c5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d5b9af-6c13-49f8-bc17-1bb6ab79883d", "sighting_of_ref": "indicator--4d85fd8e-8ff3-4308-8fb6-d000b18bc193", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b32a8b8-77ef-4f24-9a63-77cc7d54ee2c", "sighting_of_ref": "indicator--4d85fd8e-8ff3-4308-8fb6-d000b18bc193", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be172cc-7b44-4ca0-88d9-2e96c0b0e7de", "sighting_of_ref": "indicator--c40bba76-76dc-4546-963d-596fb5d42404", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4beb1994-8a3e-442f-8433-3a1cb2922023", "sighting_of_ref": "indicator--c40bba76-76dc-4546-963d-596fb5d42404", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860ca72f-911e-434a-a52f-d2c03f1aa2a1", "sighting_of_ref": "indicator--2e9c2fde-9950-4e6c-807f-6f6160d36d8e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c80a3e-803f-4fee-afae-2d03358c5605", "sighting_of_ref": "indicator--2e9c2fde-9950-4e6c-807f-6f6160d36d8e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b913ecf-3fab-45ee-9332-9da59c6e4199", "sighting_of_ref": "indicator--9ad741a5-cb63-49b3-825b-95ce4255e706", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1facaf6-050c-4de7-aa77-96659a272a0d", "sighting_of_ref": "indicator--9ad741a5-cb63-49b3-825b-95ce4255e706", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0b046a-5314-443f-9ac3-80ea95ff3ec8", "sighting_of_ref": "indicator--ef43cb92-ff8e-430d-8223-a1d4e150430e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482f95c9-532d-4642-a821-6adda57fab79", "sighting_of_ref": "indicator--7c7c9feb-ed4e-41a0-8e75-5874b063113f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e756b79-1904-484b-b26e-86c8ab7ee440", "sighting_of_ref": "indicator--7c7c9feb-ed4e-41a0-8e75-5874b063113f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1773b26-c5b0-4cf7-ba6d-8b03b8dc81e4", "sighting_of_ref": "indicator--7f784d49-ae9c-4128-9739-a7d38420730d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e766e05-d9ec-484b-8430-26e45ec41608", "sighting_of_ref": "indicator--29a52adf-fa65-4980-a605-20cb06599424", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72489b02-c1e2-4738-a6a3-e2a2350fad4c", "sighting_of_ref": "indicator--b87fc628-a74c-4e9c-9506-f72aa42b0ea3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87f9f06-a4c9-48ad-ac6a-6e3787a91447", "sighting_of_ref": "indicator--b87fc628-a74c-4e9c-9506-f72aa42b0ea3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadf0ed2-da2e-4d65-af4c-8f4b46db37df", "sighting_of_ref": "indicator--58d2a8a5-542f-486c-9e1b-6c3c08fabac9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dde2400-b193-40e4-babe-655e783510f8", "sighting_of_ref": "indicator--58d2a8a5-542f-486c-9e1b-6c3c08fabac9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f281944-19bc-4932-8729-a170f3d746aa", "sighting_of_ref": "indicator--c09480b2-caed-41b5-a216-e0a0fe4aac6c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b697919d-b730-469f-a306-13c6bc733bde", "sighting_of_ref": "indicator--c09480b2-caed-41b5-a216-e0a0fe4aac6c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278be866-99ec-4bbf-bcc6-33e9b446e097", "sighting_of_ref": "indicator--73cc6a37-bfc1-4766-bd4a-684b1d3b96b1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11f46aa-a04f-4cc9-a5be-a961148925db", "sighting_of_ref": "indicator--73cc6a37-bfc1-4766-bd4a-684b1d3b96b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4688f303-316b-4967-8ddd-153ed23ccd99", "sighting_of_ref": "indicator--c1319d7e-76c5-4d11-baec-d3ba2f65bdc9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e792146-a507-4f23-9313-bb6d01c73f96", "sighting_of_ref": "indicator--c1319d7e-76c5-4d11-baec-d3ba2f65bdc9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c82c06-e884-4ab3-86b8-588d76bfb813", "sighting_of_ref": "indicator--a40d3b67-147f-48cd-ad84-4845d5117fe2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3919de35-1cf1-4806-ad7b-96eae904c7c8", "sighting_of_ref": "indicator--a40d3b67-147f-48cd-ad84-4845d5117fe2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b5197e-042d-4ba4-aab9-1d98992dbca8", "sighting_of_ref": "indicator--43c6ba80-2394-469f-8bf8-5f66ee079301", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85830867-9b99-410a-9831-bf4c0bbd36cf", "sighting_of_ref": "indicator--43c6ba80-2394-469f-8bf8-5f66ee079301", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df67a318-d17c-402a-b698-e1dfc5e22c9d", "sighting_of_ref": "indicator--fd39a26a-adf8-438f-95c7-40b8bdc766a8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a323b32-dd42-4fdb-9b6d-1d9ad73ad6e7", "sighting_of_ref": "indicator--fd39a26a-adf8-438f-95c7-40b8bdc766a8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b0093a-935c-4e13-aa52-3a77b61f99e3", "sighting_of_ref": "indicator--4d0e0e8a-cc66-4fe0-a9b4-47cde94fc4a7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c22e3f-e32a-4582-bb40-5c80766c9252", "sighting_of_ref": "indicator--4d0e0e8a-cc66-4fe0-a9b4-47cde94fc4a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcb7797-aa31-4f08-b3ec-49944d4a51ff", "sighting_of_ref": "indicator--0884995b-2a74-4157-aa35-1130649c588f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1a0409-a27b-4fbf-a9d7-36b999d27ede", "sighting_of_ref": "indicator--f6accac8-39d0-490b-8f99-d366db0527a6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6e4858-ddbf-48bb-9480-e6c3fc8cf024", "sighting_of_ref": "indicator--2a338a81-780c-4ef9-b276-27a28df66e67", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288d2b45-40be-45e9-879a-604828836cc5", "sighting_of_ref": "indicator--ecec4bed-322d-492a-b8e6-bf83e337d63b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf30911-9729-47f3-8b7f-b33c7cf784e5", "sighting_of_ref": "indicator--86747af4-d31f-4d9f-9911-0f6f5c11dc8f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6994133a-8d17-4777-80c8-12acb098ad17", "sighting_of_ref": "indicator--216f7285-3d5c-4ac7-88ff-b3d054c6ceff", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cd04d5-fa91-481f-a13c-e16fe6c6d243", "sighting_of_ref": "indicator--216f7285-3d5c-4ac7-88ff-b3d054c6ceff", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf02ca7-2828-48ed-b1ea-8ea6249117e6", "sighting_of_ref": "indicator--134b52da-07f8-4ef5-9567-6041030f1279", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd3ebb4-a618-4678-b1b4-e59d6670a275", "sighting_of_ref": "indicator--0697d247-b451-41c0-b3c9-524cd3dbe045", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df584a5-fdac-439d-8cc4-897da35f5180", "sighting_of_ref": "indicator--69a8242b-203b-4bd7-8352-aa78764d5c3a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e260f352-b297-4dad-a4b0-b2dd02cd099e", "sighting_of_ref": "indicator--8e2c53bc-ab47-40ae-a4cc-a142663ba38e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240183f7-1b73-41bf-bb1e-337d3b4fb6f6", "sighting_of_ref": "indicator--9cd7eec5-769c-4694-a592-deea76a06c3d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8fe7d2-d93e-47c1-a0f3-f176b45b106a", "sighting_of_ref": "indicator--4815364c-0d08-4e6f-85db-0efa07de56fc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b13b93-6a03-4450-8a50-021496ce3f61", "sighting_of_ref": "indicator--506aac5c-442b-4717-8e65-072765e436b4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5549f5-3927-40ca-ad02-97833144cff6", "sighting_of_ref": "indicator--8a568561-6672-4455-b56e-f6b5b175f844", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2c35b9-208e-4da8-8f40-ac085285a330", "sighting_of_ref": "indicator--199955d7-e64f-4890-a764-9e5b36926531", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd918a2-21fe-416b-972d-a767c982a6f9", "sighting_of_ref": "indicator--a9aefb7e-e31c-4b64-94e8-c6163fee7d7e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400cc25d-88f0-4e90-ac4e-9aa095ef8270", "sighting_of_ref": "indicator--022cbba7-4430-478e-8b1b-88b722e09934", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e1f14d-6af9-486e-8538-eb3d7fdaca04", "sighting_of_ref": "indicator--d8386378-164d-4677-b4ea-5054507ae281", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283d9cb9-5646-40be-af89-10cba5316f7f", "sighting_of_ref": "indicator--e08bb294-dd79-45d4-adb7-22540343881d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0366ed9-3cef-4e95-b77d-e52007e8d6f5", "sighting_of_ref": "indicator--247ce0dd-3017-4fc3-b93d-04a34cd5b1fe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a40e1e-913c-48ef-ac08-f24b7645525a", "sighting_of_ref": "indicator--7a617d91-eb8a-459f-90fc-cd671ba676aa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b8542e-fea6-43f6-8b93-b50ecd0653ba", "sighting_of_ref": "indicator--7a3a2a18-7eb0-46db-9ff8-657b17f6fc8d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7293289-6846-4fdd-b773-2b5ea0c59e5d", "sighting_of_ref": "indicator--7b5d3d9e-b34b-40de-989f-9d797023203e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b9f4d2-3f64-49f3-af97-f1eff4ec49b3", "sighting_of_ref": "indicator--0d018f5c-06b8-432b-898f-abb20f20b565", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00abebea-4409-4266-a6a0-8693272feec7", "sighting_of_ref": "indicator--e61767ba-aa37-4836-8e4b-78ff6f4083ca", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21b237a-84d6-432a-acb3-0d960b1d1d3e", "sighting_of_ref": "indicator--c9269b65-6e3c-4a68-8af7-36f25436dafd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bca82f-15ef-4d2e-836b-db888273220d", "sighting_of_ref": "indicator--d271c2ed-af61-47f2-87af-3981cf5bfe36", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a3b9ed-fcb4-4a20-a82a-8fca5a3254d7", "sighting_of_ref": "indicator--1281ba2d-ae13-4b49-9339-ee1035302464", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067bb2b7-d3dc-45eb-9fb3-a9ef744c06d3", "sighting_of_ref": "indicator--fa09a374-5296-48cc-abec-3949e8e669bb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b7aef8-085f-4c13-9a1a-3a28ed2bdd4c", "sighting_of_ref": "indicator--265b892b-1dc6-4907-b621-ab9c292bec90", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ed8b78-3cbf-44cc-9bd3-53399ac39caf", "sighting_of_ref": "indicator--e5e42261-9836-4764-bd6c-9ded248629c8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769df927-ed1a-4c2f-8244-3c7e8074f41f", "sighting_of_ref": "indicator--2d47fbdb-7004-46a6-8464-bb382853e47d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35d6a56-edb1-4756-9806-7046f4502fc9", "sighting_of_ref": "indicator--263d687f-5336-4503-8b8d-68eb6565a564", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96120c86-7e69-4e8c-a96c-6641a2381bf2", "sighting_of_ref": "indicator--44bbabd1-0f84-4099-ba33-e2d326795364", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf2fd34-b6dd-45f7-a443-a6a3ddd2ce8f", "sighting_of_ref": "indicator--629756fb-270f-4ba7-873e-de49465435b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d103021f-1ee6-44cb-897e-3b594c3286a8", "sighting_of_ref": "indicator--95386ea9-e84e-46fc-9fb2-7e3453181173", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54378b23-43b9-4c6d-80d9-e3a58c128241", "sighting_of_ref": "indicator--d761193d-96fd-478e-b304-2a975f3921d6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa791be5-b986-485a-9fc3-5043554a4d8d", "sighting_of_ref": "indicator--2b239d23-b783-4f09-8363-2ba589e46320", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d9d35b-5ae3-4d23-b8bf-6a4ec4d30373", "sighting_of_ref": "indicator--ffc4802f-858e-424b-a436-e117b0f41189", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5a4732-433e-43dc-a193-0ed02b674ee4", "sighting_of_ref": "indicator--80c76957-d42d-470b-bcad-ef40976209cf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386e19d0-b224-42c3-8a28-e68fd9e2fe47", "sighting_of_ref": "indicator--72b1599b-a724-41e5-a50b-6fd8244e375f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097dc7f5-64f6-4008-95f0-81a36ace1737", "sighting_of_ref": "indicator--ff1cbb48-7f95-4bbc-aac3-8c996fef904a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d20d89-eef4-4cc8-a8b6-e80913472d69", "sighting_of_ref": "indicator--3db273a3-7343-4bcc-9eea-a81b81432b15", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0001ed6b-119e-4f61-ac33-11e582d335af", "sighting_of_ref": "indicator--06e64854-05ae-43f2-b0c3-8aaf43cab986", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344cc3f0-dd10-4057-9015-f848169df303", "sighting_of_ref": "indicator--ed9dc985-ed68-4aec-aa95-c623284ea0bb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ea74eb-0be3-440e-85ed-2dfbb7d2039e", "sighting_of_ref": "indicator--251fc9ff-05a6-4543-93fa-9824460bcef6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad8685d-87f1-4df6-a773-258e4334d8fd", "sighting_of_ref": "indicator--282cdbdb-959d-4f34-a682-cb1f5c63e347", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de105332-910f-411f-a60c-a3ddc20a5a4b", "sighting_of_ref": "indicator--981f8709-8671-460f-8d96-95a31055d0ee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3691719b-4e8c-4fec-86d3-8e510b4994c1", "sighting_of_ref": "indicator--3889772d-0841-4f1d-a174-e2e927b3df56", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04b2c57-12e9-4e22-8c3f-d91ea322c99d", "sighting_of_ref": "indicator--cf5de54d-d882-40f5-81e8-ba08eac07ed8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17c6126-a463-458b-9cf8-8c67510e89bf", "sighting_of_ref": "indicator--0df587e7-8357-41fc-8333-83fc9147869d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1144f466-3a1e-405c-8592-37c0bee19dcd", "sighting_of_ref": "indicator--f5ed4277-0862-4248-9d7e-3184e45c0107", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff698b4-982c-4ba3-8238-34e94e90c260", "sighting_of_ref": "indicator--4e02e4c6-4b25-4079-923d-8d3ec527c146", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84955eca-806b-4e00-92a1-49ae75b565ee", "sighting_of_ref": "indicator--7672e8b3-8564-452b-b3d0-3a7e84d302f5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b499fd-38e7-49d4-b337-8a025068bba6", "sighting_of_ref": "indicator--80cc8acf-08dd-41cd-9ae0-8d6c090305f4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7496e3-7a3c-4f2a-8519-4bc1f183309f", "sighting_of_ref": "indicator--77fc17b7-4ae6-43f9-8957-0e8a8b4caafc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e39f99-129c-42cb-86e1-25a351fc6d46", "sighting_of_ref": "indicator--006d6757-2134-4af8-bdb5-119dbf694934", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd7d647-5dab-42cb-b73e-49efdbb0bf7c", "sighting_of_ref": "indicator--47808f36-f528-40e0-83f1-450f283f3107", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9c4c49-5481-40d1-abf6-71d22f48005b", "sighting_of_ref": "indicator--b06675cc-7521-48f8-83c6-3b4bd9f305f5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8f3388-160b-4e1f-98d5-b8e27b7436c0", "sighting_of_ref": "indicator--00b0e086-bb35-4126-8684-f56cf2f0c737", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed306ae-3f05-4948-b98a-f1563309cc8b", "sighting_of_ref": "indicator--542eefc8-2e36-4fbc-aa32-f56b09752bd6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f512cf5-8603-4bf6-b896-952f153924a5", "sighting_of_ref": "indicator--346b6b8c-168a-41fb-9d8c-0f50a9bf87d2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a3b246-b948-4265-a4dd-d366e742253b", "sighting_of_ref": "indicator--656d88fc-1ef2-4c8b-8d3e-d3315159f017", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2a921c-5f93-48c9-84b8-c614ba0a5539", "sighting_of_ref": "indicator--3dae4363-a1f8-4528-ab73-27530432f4b6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f84790-2dcb-461a-a62a-860f622a4085", "sighting_of_ref": "indicator--89e2a970-0650-4636-a90e-749cb9b6aaf8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d369ba71-46f2-4d3f-877e-82e9cdffc020", "sighting_of_ref": "indicator--8805d590-435a-49ab-9102-a8991f38fe08", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3035b2c-952a-4a59-848c-f9bc78e176ba", "sighting_of_ref": "indicator--ec142e96-247d-4bbc-9916-0a9ef5fa1270", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd05321a-71c0-4a33-8d36-83def2c243a7", "sighting_of_ref": "indicator--6ece971e-c3c3-4232-93bf-7d8263ec039a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef13932-188d-4262-b04c-43dc7720cc21", "sighting_of_ref": "indicator--6ece971e-c3c3-4232-93bf-7d8263ec039a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b0438c-1ae4-40ca-91e0-49e755549154", "sighting_of_ref": "indicator--2f535be5-f326-4230-b79e-8e4e278a9ee8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1620d4-8b75-43fe-8d10-133f8dbf8195", "sighting_of_ref": "indicator--2f535be5-f326-4230-b79e-8e4e278a9ee8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357b7e4d-8e3d-45b2-a140-88e91d083557", "sighting_of_ref": "indicator--5ec2e5ec-fc06-46d0-9f2d-56cb286c8ba2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba39c36-56b4-449f-822c-e28cf9f58c4f", "sighting_of_ref": "indicator--5ec2e5ec-fc06-46d0-9f2d-56cb286c8ba2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10311933-3584-482b-a3c3-35fb2fba5408", "sighting_of_ref": "indicator--ee005d8c-3521-4a96-9f69-4e8726d05ea1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52eb795-0f04-4b23-bbb1-32165c0d3fc6", "sighting_of_ref": "indicator--b405b0f1-0fa8-4c87-b4a3-abc9132326e1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4eb448-2d9b-4da7-8bd2-bbfefcc45d16", "sighting_of_ref": "indicator--b405b0f1-0fa8-4c87-b4a3-abc9132326e1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73c87b7-60cc-480f-8eb8-b24d7ba793b0", "sighting_of_ref": "indicator--729b4530-f12c-436d-8351-dfbc3801e46e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfbeec1-739b-4e96-801a-03a3d6c592b4", "sighting_of_ref": "indicator--2e3264df-806f-4f03-b6a0-60fa66097429", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3211616a-dda8-4da3-9cf8-e7ad1a39eae5", "sighting_of_ref": "indicator--6ffad952-0b4e-4b3a-93fe-d3ccbf1df590", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2c4443-2c24-44e2-94f5-c00054063d0b", "sighting_of_ref": "indicator--ea6d31f9-11e0-4216-8317-13e4de82b430", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce441602-ee6d-44a0-ba9f-2922f391981e", "sighting_of_ref": "indicator--ea6d31f9-11e0-4216-8317-13e4de82b430", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe9e161-364a-4551-bfbd-a2341d250688", "sighting_of_ref": "indicator--a1664a2c-f1b7-4949-97cf-e9793e6b05a7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562ac9d2-7443-4256-a34a-cbfb41f09ac7", "sighting_of_ref": "indicator--a1664a2c-f1b7-4949-97cf-e9793e6b05a7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885d8c2f-787e-4cd6-b05a-79ffa4badd6e", "sighting_of_ref": "indicator--30b13d7d-9378-4b2f-aa3d-a5ed7f574d03", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777f4002-5c5f-471f-8541-852d8e832ed6", "sighting_of_ref": "indicator--30b13d7d-9378-4b2f-aa3d-a5ed7f574d03", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7431c97-89f0-46b0-8224-bb9fc75b340e", "sighting_of_ref": "indicator--a76c4328-80c6-4504-a4cb-51f08211e74d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07fe5cd-acf1-430b-a6eb-a53aa5a66371", "sighting_of_ref": "indicator--9f152107-03d1-49f6-9d1c-160ba5775f9b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf5562a-5424-4b17-adcf-05aab8ec497b", "sighting_of_ref": "indicator--a89d084a-f5f0-44ad-b3c4-0f291180c168", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98a6831-8faa-4857-b3b9-205fc78991c5", "sighting_of_ref": "indicator--1c61aff2-c31c-4256-ba7f-c4ce6fe3a6f9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66968562-9015-4780-8bfc-43b2f74c7786", "sighting_of_ref": "indicator--1c61aff2-c31c-4256-ba7f-c4ce6fe3a6f9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd945a1c-440e-4988-b7af-4f242a861917", "sighting_of_ref": "indicator--9fc52169-f711-4e17-abcc-a5cb399caff7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbb4239-d2ea-496c-98e5-288a36009d5e", "sighting_of_ref": "indicator--1ceedf24-b8f1-4f6d-8fb5-bb331002d8e8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5883e9bb-f915-42e7-a5aa-1e03dd31306a", "sighting_of_ref": "indicator--cfa11ed6-a6fb-4a18-b646-79b4045ae1b1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365f49b4-4666-463d-982a-276bafd25dea", "sighting_of_ref": "indicator--cfa11ed6-a6fb-4a18-b646-79b4045ae1b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5302789d-8e7d-4740-8362-540178c52ff8", "sighting_of_ref": "indicator--f27493ee-6460-4154-b9c5-5e300bcb2541", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03736f43-f77f-4fd0-aff8-c26ab48f4495", "sighting_of_ref": "indicator--f27493ee-6460-4154-b9c5-5e300bcb2541", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57a9abf-0d3d-4cfb-a14d-34d4b14fe5ae", "sighting_of_ref": "indicator--5f8f3348-c5fa-4539-a404-3346c64b2d57", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45e52a5-201e-486a-93d2-9524edea282f", "sighting_of_ref": "indicator--5f8f3348-c5fa-4539-a404-3346c64b2d57", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94b270d-83e6-42c5-8cc1-3fe0237c29b1", "sighting_of_ref": "indicator--2c45d00b-6e97-40e2-9488-267ff604e159", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6d8d69-51ae-4cdf-8173-9dcd94f042cb", "sighting_of_ref": "indicator--4703c277-34dc-4900-945a-4f37d7f6e97e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc7b7a7-e5d0-4ed5-a25f-c17ce89bb432", "sighting_of_ref": "indicator--4703c277-34dc-4900-945a-4f37d7f6e97e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8807e36e-4ad3-427a-a2bb-a61f8cba5b25", "sighting_of_ref": "indicator--eff47f9e-c5c9-4d41-86e2-5899473a0fd0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0254a84-ff14-4016-8ab3-72117d18b52f", "sighting_of_ref": "indicator--b34a3a60-4590-4111-a587-652acd32e114", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb4f16d-d18c-40d6-bdd3-9d5c83347ea0", "sighting_of_ref": "indicator--b34a3a60-4590-4111-a587-652acd32e114", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05372fb-d37c-48b8-8658-6286ad088ed2", "sighting_of_ref": "indicator--35e36587-61fa-47b8-ade6-a08b56068236", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6441448e-fed1-440c-8255-3810b81b65a2", "sighting_of_ref": "indicator--f38f8674-8057-4bca-8a7a-1ce0da0fa693", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069a8071-aff7-4bd3-99ac-c8f15fb82514", "sighting_of_ref": "indicator--d5691a76-525c-4173-9171-2802c5071612", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47886be7-550c-4f2a-9088-79004ec1bb12", "sighting_of_ref": "indicator--965b5876-d63e-47b9-8e71-7559b20ab095", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a83e52-d1cf-4caf-9720-09b2d382be3b", "sighting_of_ref": "indicator--c0a84ff6-fae1-4eaf-b187-723f3c0738c0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67e5a13-3596-4706-90a4-f2f781390ac0", "sighting_of_ref": "indicator--c0a84ff6-fae1-4eaf-b187-723f3c0738c0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6180c66b-195b-47f2-b54a-7c89df9d5fdd", "sighting_of_ref": "indicator--fe57ca7f-669d-4e65-882b-786135b7ce47", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84918085-6b41-4895-9a30-e66a95145a43", "sighting_of_ref": "indicator--526d750f-9e02-43fd-befb-6c56e420b047", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8d51df-50f6-46bc-801c-7adbc6b5334d", "sighting_of_ref": "indicator--9cfe4684-2f5c-4fe8-97e9-cc494580a6d4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee7b435-558b-44fc-995b-522ef18f19cb", "sighting_of_ref": "indicator--f2306b97-e876-4706-a3a7-a8792b1e2a07", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de723d25-690e-43bd-b96c-a0a88531d7fe", "sighting_of_ref": "indicator--f2306b97-e876-4706-a3a7-a8792b1e2a07", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c1ea90-24c3-47fe-910a-5bddec49e4da", "sighting_of_ref": "indicator--5482c335-1e72-4fe1-a814-d12636ae00d9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa982b4-cdd2-48b1-ab7b-425b9c5c15ea", "sighting_of_ref": "indicator--0b683fc3-dc93-439e-90e6-5f0876aa41fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070ce453-45e3-455f-9528-da48a644ff61", "sighting_of_ref": "indicator--5288a659-a77d-43a3-bd8f-0da6a9417e93", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce3568f-533f-416e-8956-7645304c165a", "sighting_of_ref": "indicator--484f10f6-ab10-4603-a13c-13767ea37add", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615df844-b529-4a66-a048-c8f68371097e", "sighting_of_ref": "indicator--484f10f6-ab10-4603-a13c-13767ea37add", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14121e4-41d2-475c-98ff-114c38faa249", "sighting_of_ref": "indicator--172cc92e-7495-4cef-ab85-0470f52b39d5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62831772-481f-4339-82dd-e85a2d084c8d", "sighting_of_ref": "indicator--07bc6e87-8365-4372-8c5d-0c5a2607c8c5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6537c4f-5286-4e6c-a3d8-6d162536d2ea", "sighting_of_ref": "indicator--1eb0e9c5-4d4e-4dc1-ba5d-458bafd5346e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bbf6dc-bcdf-4b4f-bb45-eb50192436b3", "sighting_of_ref": "indicator--367a1ad5-24db-4ad1-83ee-a90ed5bd3f79", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3224b686-bb12-430a-a5dd-94d354aa9599", "sighting_of_ref": "indicator--367a1ad5-24db-4ad1-83ee-a90ed5bd3f79", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2975ccde-1077-484b-a87d-4e5c7725de82", "sighting_of_ref": "indicator--3f7f92b8-9815-483f-89cd-cec4c4ce92f9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379ecbd8-b5de-4c28-ad84-700df8ec567e", "sighting_of_ref": "indicator--3f7f92b8-9815-483f-89cd-cec4c4ce92f9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02ac27c-f50a-4844-98ba-31a018d0eff1", "sighting_of_ref": "indicator--2f5ce132-fdfc-4222-9d69-baee5936d4f4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19820f92-a120-46da-a8d5-01f7b9d08c48", "sighting_of_ref": "indicator--3cf5f38a-31ee-405b-b1e3-c160b1ceecfc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7e9782-566a-49be-ba71-c1edfcc9138b", "sighting_of_ref": "indicator--2d0fbafd-5ff0-4366-a958-ec1c8a644e6d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8d7cc8-9b36-4535-ad67-dc45faad07f6", "sighting_of_ref": "indicator--2d0fbafd-5ff0-4366-a958-ec1c8a644e6d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0950af8a-84ba-429e-9267-f2ab41f112e0", "sighting_of_ref": "indicator--4dd47ab8-8b9f-465a-aea5-69477adcfa2a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae4d7e9-60a5-481f-9f25-ea93acc860ce", "sighting_of_ref": "indicator--4dd47ab8-8b9f-465a-aea5-69477adcfa2a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165ae14e-537c-4c6d-8af9-8096ee934fb6", "sighting_of_ref": "indicator--80ad21d9-748a-496b-9208-d6dd99bf40e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00efd6bb-b53d-4a4a-be5d-c8648341cdab", "sighting_of_ref": "indicator--fb81598c-7502-41ca-bfe8-7bf45d8ea166", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5660f4-81e8-4d7c-adea-33259e73f737", "sighting_of_ref": "indicator--49fca922-0eb5-47ab-ad99-9c5ee21249ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6bdc45-a81a-446f-af36-f640e1c7873c", "sighting_of_ref": "indicator--b3273ae7-d5a3-4d8e-80b7-cb7304c710f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a79c929-2f1e-4f20-8907-66aa7f1be326", "sighting_of_ref": "indicator--62c1a819-03b9-4cf8-849b-0fe35b288d1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272eea39-0cfc-489e-8ce9-a7a770bab269", "sighting_of_ref": "indicator--30806b04-e03e-4c03-bf38-d2276b6249ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897dc097-1193-4493-8f23-b945cc1b72e9", "sighting_of_ref": "indicator--8541459d-2e55-4de9-aeda-9d39e8f727fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4531b6-1b54-490e-924f-e6e3d5f103ce", "sighting_of_ref": "indicator--bc4fa5b9-ab55-44b1-b945-ec8e44df0101", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8f04b0-2125-4826-835e-999333274b07", "sighting_of_ref": "indicator--d7453ed2-b28c-488e-895b-10c65dcbac81", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26af3a89-41fa-4225-bd55-a17a683b406f", "sighting_of_ref": "indicator--1f4cf78c-7d04-4ebb-88bb-96caf3f504e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bd2616-f10f-4331-baaf-add41d833dba", "sighting_of_ref": "indicator--555dc88b-88ea-4cb5-93ee-e529fd5607ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c605eb43-f89c-486a-85c8-87369c30f1c8", "sighting_of_ref": "indicator--28d1e78d-e4c4-4de4-b32c-d12197219aa9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d9e59a-d942-43a7-86cd-2f175b99fef3", "sighting_of_ref": "indicator--01dda914-8ce2-43ce-9815-41061d29f15b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1db1979-d37f-4dea-b5bd-3ac6c0a8f973", "sighting_of_ref": "indicator--db50c19b-ea6c-48e7-8133-39b6b3cd9fcd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a551f4f-a01c-4900-80ad-247cf1d7010d", "sighting_of_ref": "indicator--49c19359-022a-4ef1-b309-7bbf564f8fd0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ceddc4-0d2a-4be4-93cc-dc8c83fdbb91", "sighting_of_ref": "indicator--9319c108-81ea-4a81-9d7d-d88457db0356", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42cf79e-29eb-4004-9056-01af95f2df09", "sighting_of_ref": "indicator--3c273286-60dc-4eaa-b413-1905ff54e6a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01ee08f-3254-410b-8d90-ebb2e201bbef", "sighting_of_ref": "indicator--1522e9b2-15da-4a22-99f4-bcfad590fcd5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c477457-bed6-4950-9621-5ed1db324dc4", "sighting_of_ref": "indicator--25b7ae8e-ab5e-4be4-b76e-ff54f2af9525", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96460265-ab19-4530-8c22-207ba7d309ad", "sighting_of_ref": "indicator--9ee3417d-bff7-4382-9f02-d0e28eb542b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6107c5-4a03-4b02-b2f7-a79fbee5501c", "sighting_of_ref": "indicator--7c614f5f-7be5-4f85-ad0d-714893dca94e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5feeea2e-a26d-499d-bbbd-20c221973b8e", "sighting_of_ref": "indicator--c78f9cbe-244e-4973-ab7e-ef43ac4a8fa2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98200d8-f857-49d5-9278-da57a8b311bf", "sighting_of_ref": "indicator--dd1ab5fb-4c41-4904-aab8-60f605d665ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8532742-0d7d-4abd-856a-1048c15bdf77", "sighting_of_ref": "indicator--9d78a007-79c5-452d-ade1-fd528ecfe9e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea879b1d-ac25-41ef-b43a-4a0b5477422d", "sighting_of_ref": "indicator--3f1ea1e2-6fa4-4cd3-b60c-06d3e6730954", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edac0545-6eec-44d5-bb65-a7cda023b246", "sighting_of_ref": "indicator--62f4d035-8430-4f2c-bca9-83c67feaee2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77253462-6ece-47f4-aefe-c36cd496f853", "sighting_of_ref": "indicator--d1dcf929-569c-43b7-a536-1df5a6278703", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5c812d-9636-4b38-a46f-175411357976", "sighting_of_ref": "indicator--92133383-571a-49f4-9f9d-92cb80f3748f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae9b685-0486-4f2f-a3ca-323f4a5552fc", "sighting_of_ref": "indicator--1a838f33-0d2a-439d-a11b-498d333acd1f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0832e21-01b7-4a90-98bf-af5b15ec72fc", "sighting_of_ref": "indicator--6cd2a22a-3eb0-4c35-9914-42bf0d3e618c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49dad0fa-fe93-4301-aedc-477ebc8c8ff4", "sighting_of_ref": "indicator--ef068a61-ecef-4f73-96fc-23018b036662", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22d3283-4756-458c-9c0b-93954711eee6", "sighting_of_ref": "indicator--ba5a4ed4-1189-4124-8add-e529f75ad3b0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5490f7f5-c6d7-4dd2-a2e4-b89452d763f4", "sighting_of_ref": "indicator--74601e47-57a7-400f-9896-93567a52d7a0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5888d358-b95a-455c-bb6c-8a44780a8fbb", "sighting_of_ref": "indicator--34a4695d-ad86-49c2-bd0f-cdcdd7e1b86b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cefee1-957d-4ba8-aa49-e63f6fe40cb3", "sighting_of_ref": "indicator--0a3f304a-750f-4843-8c02-914ceda3ff87", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13374efc-50f7-4987-ad77-6c0393543245", "sighting_of_ref": "indicator--a4ec51fe-cc4a-4e28-9630-ead798a0aff8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce77ef43-3021-4002-980c-e220ad6f61b0", "sighting_of_ref": "indicator--6a6bc57b-1002-491d-b4a5-cdd55af5e9c3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e594f0d-3214-4ed6-8405-e5f5aafcf829", "sighting_of_ref": "indicator--5b8f2e74-beb5-4f58-831b-a63c7e7e63ae", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcaa780-2fe9-413e-83d9-d7abad783443", "sighting_of_ref": "indicator--0de8d8db-eeed-4285-9aee-5c8fad7db3c5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1744e523-891b-49a3-9447-d9bc8467cf4f", "sighting_of_ref": "indicator--92bf6ba1-7bb0-497c-8cee-6de8a0e86900", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5484cf9-34e5-4dd4-a9c4-038768b9ac55", "sighting_of_ref": "indicator--012c9632-fe40-4f4f-b799-52675020e1df", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869a23d8-ff07-4c07-8042-62ee071743a3", "sighting_of_ref": "indicator--9bef5d37-771b-4f08-96f4-72aed42273fe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1861f3-14ce-4c89-99d6-6d3158a1eea9", "sighting_of_ref": "indicator--80b5df23-5587-4b4b-b32f-d9f9247fa9a8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd5504d-6063-4868-895a-1dc3641ba1d2", "sighting_of_ref": "indicator--608b356c-5696-47fc-b89e-7e9828061ca8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bf9a95-a7bb-452f-bda1-465a9ef9bb21", "sighting_of_ref": "indicator--3bdbe6a9-2799-40c4-95ee-7fece92d6413", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5ec32f-4648-4187-9abb-e395742268e9", "sighting_of_ref": "indicator--522df16a-4839-437e-a104-586aed515330", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3ead61-aed9-4788-b84c-6563c45150f4", "sighting_of_ref": "indicator--9c7ea488-b3a3-4a52-bdf7-3e3600c4bff7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0afcd03-3a3f-4219-b0a8-c45943fb1358", "sighting_of_ref": "indicator--a7628a29-ec1e-4d64-b51d-dc9325ad60e1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e49b2e-9bc3-4b62-9499-a20e0e03ee81", "sighting_of_ref": "indicator--5ee9c3ae-47b3-41b7-80e3-60fd579d3b99", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf12214-e418-4b98-bddb-0137f6b55afb", "sighting_of_ref": "indicator--149555b4-c367-41c4-8252-bda9ca7a69e4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c16d14-0c45-469e-90ce-4023a3a70f3f", "sighting_of_ref": "indicator--aa3570b5-e3c6-4f21-b6e3-7f7235ad11e3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5fa997-43b6-49e0-9510-97f535593e5d", "sighting_of_ref": "indicator--ed88a541-d5c7-434a-90d5-d3117091a271", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9995c4-13c8-4ef0-9ec3-d8d8c8365198", "sighting_of_ref": "indicator--dd2dcaa3-1aa3-4841-8b2d-5ebffb7343c9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33260aa1-6a9b-4918-9963-58a23770302c", "sighting_of_ref": "indicator--77840efa-9f66-4699-9031-fa697479dec2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98246f5b-760f-4ec0-8ae2-38464623ca3f", "sighting_of_ref": "indicator--5f3309e3-06f6-4a78-854f-b3b2a7d62edf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3c2fec-73e5-499d-a339-c24d461228e9", "sighting_of_ref": "indicator--9b45c365-4477-4761-b1da-f0d4986578e3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319f5f7c-540b-460a-8583-fc302c945295", "sighting_of_ref": "indicator--126babe3-adf4-4937-88e9-3c89da0bcb6d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf02973b-3b48-46fb-bcbb-81bc5e1e870a", "sighting_of_ref": "indicator--afc1bfe9-47e1-4614-bfb0-273417d773bf", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ae8b86-f56d-43fc-894f-84dccb9efd31", "sighting_of_ref": "indicator--63c3c7f7-49c6-4e5e-95d1-e0fedb3982db", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031502c1-dec7-4879-a2a3-c1f6c65e9e93", "sighting_of_ref": "indicator--affc519e-4363-480f-b2d2-3e6137c1b1c9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cbdb6e-1ad4-4917-b07d-4b6dffe9e4a2", "sighting_of_ref": "indicator--0441a070-1ecc-4465-979f-2b951957f14e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8d9c9a-e239-4537-b452-a0448e10b34c", "sighting_of_ref": "indicator--82a6365e-0fe6-49d1-8285-4355a779ffd6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41576f4-9e1f-4c1a-970e-aff74ebdd1f9", "sighting_of_ref": "indicator--d14214b2-957e-4bf2-bc15-d00d50ba6331", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31eafbc3-4b34-4b40-b214-732d43dee8d5", "sighting_of_ref": "indicator--7e06e6ca-27d4-495e-8634-acd34b516f92", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bdc982-2f38-431a-9729-d16a8bb6ca11", "sighting_of_ref": "indicator--813a2e3c-02a5-4bd5-82db-2f3f4a775606", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4300519-e68e-48d9-bfe5-890988ae1f29", "sighting_of_ref": "indicator--ef8728d8-c309-47d9-8e7b-cc942f8c07ee", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324eba7d-02f9-4096-8212-4b4bfd72dd83", "sighting_of_ref": "indicator--ae4bdef5-95b5-4894-a659-cf3574780563", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f866d57f-e33e-4c1a-a796-ff10abd98f18", "sighting_of_ref": "indicator--c57d3f57-1a45-40a6-858a-bb9d21169e63", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014e8672-864e-4f82-979c-98a0057060b0", "sighting_of_ref": "indicator--fa6fb5f6-1c6f-44df-b5a6-12be0a3f5c0c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccc3816-939b-409a-a21d-0ee48f6ccc3c", "sighting_of_ref": "indicator--295e573d-5b18-4266-a9bc-99ed7f40639b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1adc80-55ec-41df-a5dc-63514213a06f", "sighting_of_ref": "indicator--fe9127dc-4dc6-40ca-966a-2e57738ee2f0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5d0b4d-27bd-4d83-affb-bfed9100e3b5", "sighting_of_ref": "indicator--111e640f-7b89-42b6-8b79-22bbcd5f112f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24668b1-f1ca-412d-a55f-8f737cc2eb68", "sighting_of_ref": "indicator--48a36159-99a8-42f6-98aa-d3f4b4198309", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a879fb-5013-4a32-9e33-00806fde8cf1", "sighting_of_ref": "indicator--6dfe3cc5-efb1-4d69-9ce5-d8bfbe5c9941", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47573dcf-a6be-4518-ad96-dc3fcfa0b852", "sighting_of_ref": "indicator--0f1ae4b9-acb4-45de-bf43-f0d64993defa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976c36f0-bf47-495f-8c79-ba9ac312f6c9", "sighting_of_ref": "indicator--eeff2056-1c1e-4906-a61d-c35f0c42c5b5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e68910d-94f7-4787-a7ec-b210740d2698", "sighting_of_ref": "indicator--92f67d63-1d1a-456c-918b-9cebf2af5d27", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0964623-abda-4721-bdc5-0b65b1d2da35", "sighting_of_ref": "indicator--a46388e5-877f-46dc-8925-1c802fc7e7a1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbf3143-6f15-4490-b694-13d1cb48e305", "sighting_of_ref": "indicator--aff8774f-aaec-4184-82a0-4a0de6eef7fd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a679c310-d48c-47ad-b546-637dff81e6c1", "sighting_of_ref": "indicator--aff8774f-aaec-4184-82a0-4a0de6eef7fd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fba368e-4324-4358-b655-b7ce811404e7", "sighting_of_ref": "indicator--c6cb1584-d1a9-4ccd-b6e8-8cd6e29a4826", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3bbebc-0c7c-4079-9a65-83184bc1a4f9", "sighting_of_ref": "indicator--512267b0-e0ac-43fe-9a42-b92a908dce6a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5398783-771c-4cdc-a936-62aaaf81ee48", "sighting_of_ref": "indicator--5c8b6af2-d26e-4fbc-9142-f19722b9fa03", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208fbb57-0d62-422c-8176-954fb3269bea", "sighting_of_ref": "indicator--39a9bd02-e6be-4019-afd9-5a891d07b025", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27b5890-4c9e-4e23-a572-ff3d6fe16849", "sighting_of_ref": "indicator--98d322e3-1f1e-485d-9f32-3740cc8b2def", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e6a795-accf-4c2a-8fc3-38bbce618ef0", "sighting_of_ref": "indicator--cc54e36a-4363-4271-9d51-b82f3c70a079", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7327d6-3f9b-4210-ae87-79e21c43612d", "sighting_of_ref": "indicator--d6486c66-2a2e-4a05-9c87-6891ecd4badd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83363265-e338-44db-a6ce-5395aa6f61c3", "sighting_of_ref": "indicator--79940c69-ae18-4077-b7b2-927b7fd3b935", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06750258-52bd-4fbc-bf11-919458fce9a5", "sighting_of_ref": "indicator--15e53c96-8e85-4498-920e-9ed26df1fb16", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67d93c2-c8e3-4ae2-b375-51fa15cc40a2", "sighting_of_ref": "indicator--3c64b213-a338-482a-8551-6fb7f0758730", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d6ad78-9e56-4eb0-b0fa-85d8c2166c46", "sighting_of_ref": "indicator--ed2bdc83-cac0-4fce-a71f-4f4479991d21", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09e5daf-ae02-4c79-bebb-bf11e58a0b94", "sighting_of_ref": "indicator--b335a059-aaae-464b-b715-1509afefea3b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7b4381-a449-4127-91ed-0b5d3e6a48b1", "sighting_of_ref": "indicator--f110b3da-d6b9-4641-95f1-ec0ea4448ecc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3c4df0-9dbc-4227-8aaa-208aa1489a50", "sighting_of_ref": "indicator--1e217e47-1e5c-483f-b99c-df4fd16b1686", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b12c7d9-8420-41e9-81ab-59430516d52e", "sighting_of_ref": "indicator--18cdc73d-8c08-4923-86d3-a7af56e73e1c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbecd15-8a3f-4b28-b7f4-9ed2a14e5d99", "sighting_of_ref": "indicator--570fe2f3-5c46-4039-9883-fea062920573", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5770d7-ea9e-4e8d-9ee4-68c97f216558", "sighting_of_ref": "indicator--d846dfa6-4ae5-4688-9f84-285013fa9d3b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ef03b3-cde0-435a-a5d8-d35d8de5f238", "sighting_of_ref": "indicator--4b0b79f4-9223-468a-9fdf-b540c889ade2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c825ba1-aaae-4b78-af4f-8e8ea43922a4", "sighting_of_ref": "indicator--969841bf-5c86-4d5e-8498-ae3cd4cd77fc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e59447-5fea-4bf0-9ffc-78db8c268339", "sighting_of_ref": "indicator--ffedb64d-2314-46d8-bb83-518fc8184b26", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5057b30c-8b41-4234-b1e7-5687361cd1dc", "sighting_of_ref": "indicator--5a5efb67-c711-4df0-adc6-679bae8d56cc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1bdea13-1441-484a-9038-49902d9f2a1e", "sighting_of_ref": "indicator--3cb16d49-7da9-4657-85ed-d51be65a5cdb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd71e425-9ffc-410d-b0c9-d4937bdd8bf7", "sighting_of_ref": "indicator--5c972c01-0936-49f9-b8ef-e1976ebaefb7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45269b6-cd8c-4548-8143-aca959893ee1", "sighting_of_ref": "indicator--7fd2d6c9-f405-4514-8251-619b25b5b66e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d46e57-ccaf-4eb2-91c6-feb65e9d624f", "sighting_of_ref": "indicator--851e6c73-892a-4ad3-8511-7a22eaf704f6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f9202e-7e26-4136-93f7-d0bc75ce8141", "sighting_of_ref": "indicator--40fc1179-8a1a-4bc6-b3b6-3bf4ac0ceed1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521fe021-935f-4a61-b6e9-29876e5b4a0e", "sighting_of_ref": "indicator--0dda592f-c5b5-4466-851d-bce6cc7163ae", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1bf228-ef5b-4554-af1e-5cd274e32511", "sighting_of_ref": "indicator--330c5694-2374-4b33-b781-7d25d27f54ad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aabafbf-07f2-4553-bd98-7e657137d27d", "sighting_of_ref": "indicator--48b5abf6-1bba-42b5-b718-5f6f28af4eec", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631634ca-16ab-4273-b384-54a620dc963e", "sighting_of_ref": "indicator--0764385d-9ef5-48fa-abe8-2cdd7127c939", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc75d76b-0674-4950-a28e-3f66b824c8f5", "sighting_of_ref": "indicator--0764385d-9ef5-48fa-abe8-2cdd7127c939", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e62b03-8ddc-4281-9e19-54af7a0bc570", "sighting_of_ref": "indicator--da87befa-ea08-4ade-949e-45b9eb6e09ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aca81f6-f89f-47f2-a0c6-c7521cb1335c", "sighting_of_ref": "indicator--bfe74d77-d686-4178-877a-ed550effe7d5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23091fa-b674-49bd-9092-3807afd7804e", "sighting_of_ref": "indicator--bfe74d77-d686-4178-877a-ed550effe7d5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1647eb-ddc4-47d8-ba57-264fef0f914c", "sighting_of_ref": "indicator--b9e319d8-90a6-4ce1-98c8-3594ae95d89d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3597e099-3886-44dc-aaaf-51f72cf9e979", "sighting_of_ref": "indicator--889e3c35-7d8f-4865-a01c-ef6d4115d63d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278d932d-0858-485e-9639-5ab6a3eab23b", "sighting_of_ref": "indicator--eb817212-19b7-43ea-9841-c095f819fd9b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478f27e9-9a3d-45c3-b3fa-704e735a6220", "sighting_of_ref": "indicator--5885b802-3800-44f9-bd54-27fa0d390413", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8188cbc9-910c-4f10-b5b8-01213d4344dc", "sighting_of_ref": "indicator--6e30d5d1-a913-4cda-bd2b-d07be67637df", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da2c291-a638-4806-b0ea-e66cc12bb539", "sighting_of_ref": "indicator--6e30d5d1-a913-4cda-bd2b-d07be67637df", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee94e3b-b450-4e8a-ab4b-2cefd5e08295", "sighting_of_ref": "indicator--407a6425-6501-460f-b487-abdfa8d0b269", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791ca952-2560-4553-afc4-328e91a4629e", "sighting_of_ref": "indicator--45e600c0-cc13-4ed2-ad61-e122ddda936c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a892b0-2fdc-4cfe-bb9c-a136cee9cf84", "sighting_of_ref": "indicator--857b1ca8-0b18-4f93-a701-49865d6e1597", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2958b5-5171-4133-adaa-5b2bd8a9b98e", "sighting_of_ref": "indicator--d827a124-c976-464b-8000-1af6ad7a3775", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac98f9dc-4684-48f6-8a12-adc87595a3f5", "sighting_of_ref": "indicator--893242db-97df-4a61-8135-8e2fd942db45", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb4c11e-1baf-42fe-9113-4bd4852e1910", "sighting_of_ref": "indicator--accbaead-968e-4502-980a-eac40e710c53", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bcb0b2-b889-468c-b7d4-d58419cc84c0", "sighting_of_ref": "indicator--cbd6b79e-3869-4c9d-affa-ef68549e3cb7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86df8b05-f546-4690-a1c5-706803c26218", "sighting_of_ref": "indicator--fb617c8b-9d53-4827-b794-191ebc387660", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f32342a-7170-4c4d-a882-f0b5214ac260", "sighting_of_ref": "indicator--b58f26ca-275e-4fb0-b3ee-bfb6e52b321b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4828e4d3-ea34-4540-b697-fd2478719b1f", "sighting_of_ref": "indicator--b58f26ca-275e-4fb0-b3ee-bfb6e52b321b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a166b9f3-49cd-4753-9080-048c5ab26d3e", "sighting_of_ref": "indicator--935e087a-23e0-497a-91cd-a41e494dd5b4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c738e63c-38d2-42a2-9b0b-2a1d82e25200", "sighting_of_ref": "indicator--a01e204b-96bf-42d9-9365-9089c0849c72", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d7d490-04df-43dd-8e41-3efb3831bbd0", "sighting_of_ref": "indicator--79d1e769-7373-4643-b82c-76bf3263fe4e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98eee73-27f5-4efc-93ea-9a1b0b19c52c", "sighting_of_ref": "indicator--db664695-5460-4805-ad46-865ba4c73a29", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d348f71f-83e4-4de4-9b68-3f4a98cc5e29", "sighting_of_ref": "indicator--db664695-5460-4805-ad46-865ba4c73a29", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c7ef52-fe03-41e3-b6bd-f5d4a766b0f4", "sighting_of_ref": "indicator--6c7c5e34-03d3-44a3-8c23-f2b9326edc67", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47c0b67-3304-4e4d-9b38-135da99a2e13", "sighting_of_ref": "indicator--6c7c5e34-03d3-44a3-8c23-f2b9326edc67", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4cec01-9590-427c-b2fb-d256d5ae17fd", "sighting_of_ref": "indicator--541490f7-4321-4647-9e45-beec9d72f522", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e7778e-40d0-44f9-b596-983c25f3b332", "sighting_of_ref": "indicator--541490f7-4321-4647-9e45-beec9d72f522", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8764860-5e4e-4b1c-b8f9-0cd7c51c7c1b", "sighting_of_ref": "indicator--84ae30b5-d4a4-4a7d-9fd2-f3eeac7f061f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca5e6d4-b5ec-4a51-a837-3e323b90beda", "sighting_of_ref": "indicator--84ae30b5-d4a4-4a7d-9fd2-f3eeac7f061f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d1d6c8-79ab-4b2e-a88a-2de0b3d1cd1f", "sighting_of_ref": "indicator--f3b2bc59-b1cc-4868-bc86-ea9b52ae7888", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbd29a4-65bb-4dae-9aa7-f423e0df1890", "sighting_of_ref": "indicator--f3b2bc59-b1cc-4868-bc86-ea9b52ae7888", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d89b69-87ce-49a8-8190-9af0b3155414", "sighting_of_ref": "indicator--accd079e-0b75-4c15-a790-c5ad576dda87", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0e8cf9-8b79-461f-9b76-00a2e2a62bb0", "sighting_of_ref": "indicator--accd079e-0b75-4c15-a790-c5ad576dda87", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0cfbc8d-f5aa-4e78-a299-fdf99221e0f5", "sighting_of_ref": "indicator--99eab437-b5ad-4bf8-9cbd-bdb00a50169c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef940c6-d4c7-4e62-b6d0-87326247ddba", "sighting_of_ref": "indicator--99eab437-b5ad-4bf8-9cbd-bdb00a50169c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e8625a-f341-45db-ad2a-533c7cffe927", "sighting_of_ref": "indicator--4cd8e919-2150-4f14-aa28-6ba8874b2e15", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf719e55-0840-400b-a370-c9e121404a6e", "sighting_of_ref": "indicator--4cd8e919-2150-4f14-aa28-6ba8874b2e15", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49880758-60d1-4418-829a-80ba2abd7ac1", "sighting_of_ref": "indicator--89637a4e-61e0-479a-aff8-8634957afacf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64ec5a3-49c0-4b13-95c8-dcb17dc06655", "sighting_of_ref": "indicator--39395463-f8cc-419d-84dd-7a96210f54c5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcb1252-b21a-4aef-881a-3e2e4138b941", "sighting_of_ref": "indicator--ae4a007c-8730-4f01-9ee0-78f517fff970", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45afbf3-b875-4b5d-8f7b-cdcc78cabda7", "sighting_of_ref": "indicator--99d703be-5bac-406f-bec2-40b2e1ca8f37", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a04907-4885-4fc2-b5fe-f342b8144d0e", "sighting_of_ref": "indicator--b72a26b1-2b62-4ec7-b5f0-f68c1c06038a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fc2bf3-add3-4d08-8f81-45f019796a1f", "sighting_of_ref": "indicator--ca1ba4c5-6d83-4fba-bc88-7bbc6abe54e8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750467a5-908a-40f4-b7c1-0e8862767774", "sighting_of_ref": "indicator--3a4f13ab-51c8-4dfa-b086-e35a62b4217f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b809e77-309b-481e-b52c-7ace2e6dd3a7", "sighting_of_ref": "indicator--3c50dbed-4eb9-417d-99a1-a69127439e8e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ffa197-611c-4fad-ac82-795b1fa81be6", "sighting_of_ref": "indicator--3c50dbed-4eb9-417d-99a1-a69127439e8e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94004f3d-1ba8-4218-b92a-f78bbf34cb49", "sighting_of_ref": "indicator--6efef18c-1468-4ae4-b0fb-c7396b299143", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23764282-dcb1-44af-903e-5e7c31518363", "sighting_of_ref": "indicator--86551668-87ba-4297-b6b1-7ad1dc776d69", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab131e49-58e0-41b3-ab55-abbe36c92bde", "sighting_of_ref": "indicator--86551668-87ba-4297-b6b1-7ad1dc776d69", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bda205-6644-4f2d-83e3-6f5669f15f99", "sighting_of_ref": "indicator--1f927259-da3e-4064-8c47-e70c74dac246", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93ffa8e-2447-4d39-a476-32ecdbe4c5a3", "sighting_of_ref": "indicator--189e2690-b9be-408c-abf9-12249b570b73", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc382de-52ef-4055-aadf-2ab873017a91", "sighting_of_ref": "indicator--f2769194-df5d-44aa-a2c8-a55f6bd7482f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114d2933-27ad-4087-9520-a10cf64732a8", "sighting_of_ref": "indicator--f2769194-df5d-44aa-a2c8-a55f6bd7482f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a114ad94-34f9-4701-af6e-9ed31116d7c1", "sighting_of_ref": "indicator--08e68c41-7215-4174-baad-35865fc9f796", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da16bca5-3fbb-45ae-b49a-c8e2a6794262", "sighting_of_ref": "indicator--a2de3d73-8029-47cb-91b5-782e82fc0f01", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092955b0-c00e-4c31-a324-2ad2928928bd", "sighting_of_ref": "indicator--82b26a74-f38f-467f-b7c7-3134dadaaf26", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59459b3f-94ca-4138-8715-3c2a0a66701e", "sighting_of_ref": "indicator--960c9d09-ec1d-4a4b-a80c-432f60f48613", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1b1eaf-6efc-4720-9c71-1ad691ba7189", "sighting_of_ref": "indicator--7ea05163-182c-40f9-a882-fe1e9dbb48e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303176f4-1fb7-4ac7-9393-357266ccca04", "sighting_of_ref": "indicator--40ef18b8-6b3e-4b96-a1b3-23e6ff071cf3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e92329-540b-4fd2-85f2-5df46d3eb317", "sighting_of_ref": "indicator--40ef18b8-6b3e-4b96-a1b3-23e6ff071cf3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97933c1d-830b-4619-9b7b-f6db9cb6c0e8", "sighting_of_ref": "indicator--84250ee9-32b2-4752-9236-78c5bb03d312", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc7d670-79da-4b61-8d38-e9798ca724c8", "sighting_of_ref": "indicator--5b0a38f2-3077-4baa-ab0a-22cb2a1b9915", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcaf316-ba03-4b2a-bdcd-d430468af916", "sighting_of_ref": "indicator--5b0a38f2-3077-4baa-ab0a-22cb2a1b9915", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6783eb34-85a3-4470-bd85-396e79413970", "sighting_of_ref": "indicator--efea248a-534b-4d6d-9fcb-09b174f852d3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf9f771-050d-478c-85fc-a182d0d83d46", "sighting_of_ref": "indicator--97fb558d-bfc0-4c8e-99e9-41131c490879", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cec089-0fa4-4de8-88bf-ca66c8d8ee18", "sighting_of_ref": "indicator--97fb558d-bfc0-4c8e-99e9-41131c490879", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd5eb9b-c482-4577-aee7-f435a0880a62", "sighting_of_ref": "indicator--6fec461a-46d9-4535-a290-a3b929dd2826", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6664d5-db01-431c-bc05-45ef80cb5beb", "sighting_of_ref": "indicator--6fec461a-46d9-4535-a290-a3b929dd2826", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad8e383-7937-47bb-bd64-b80be538e28e", "sighting_of_ref": "indicator--f52561b2-09ee-481a-a277-7c6e7fd95324", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd490a5b-6fc1-479e-9386-2db398b04728", "sighting_of_ref": "indicator--f52561b2-09ee-481a-a277-7c6e7fd95324", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717967f0-bfec-4850-91a3-746edb6f0d99", "sighting_of_ref": "indicator--244df089-af3a-4aa1-82e0-ab7794e99f9d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972ada89-79bb-4ae9-ad6d-ea63b0c83ac2", "sighting_of_ref": "indicator--244df089-af3a-4aa1-82e0-ab7794e99f9d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b26fb7f-b2c3-4733-8886-b1ba2906d489", "sighting_of_ref": "indicator--f767ce28-0b8c-41a5-9a80-a33be178b213", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77a6a2d-3e73-4c26-bad8-de5e24f2343e", "sighting_of_ref": "indicator--f767ce28-0b8c-41a5-9a80-a33be178b213", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a92e56-7044-41be-accd-ba8f1674a3ea", "sighting_of_ref": "indicator--151694cc-0b17-45dc-9766-c42f6eb6e709", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1381bf6f-dc5e-4002-8368-443e455f392c", "sighting_of_ref": "indicator--bced32af-83cb-440c-a74f-5de984c5b50a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb194d25-98ba-4f7e-b200-766026a0ff86", "sighting_of_ref": "indicator--1f081200-776e-4ef6-8c86-63c841c576fd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6cc1eca-7d59-4943-bcf9-1b14d61427b0", "sighting_of_ref": "indicator--870166d9-f11d-4ee4-86fc-41e9592f86a1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f7ca48-de4e-4878-a05b-9b611114aefb", "sighting_of_ref": "indicator--bd758fce-3434-4726-b406-0080847db280", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a12de3-ed21-449a-aa63-bfb7e666f2d0", "sighting_of_ref": "indicator--7e3d3d1c-37c7-4195-b9f9-633156faeab7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057a79d7-71d6-4328-8677-4c0b4e79d58a", "sighting_of_ref": "indicator--82c5675a-0322-45d0-b45e-c5221a1ab7fa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d5ea19-62bb-4cdd-814e-4ccbe34506ad", "sighting_of_ref": "indicator--20d0d025-7e17-4f76-a584-3eaee5d17390", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16792978-c6ca-4c41-baa5-c4e9809c86c8", "sighting_of_ref": "indicator--a39ad940-bedf-4d6f-bbf9-c2e083ee961f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19aeeb4d-90f1-4916-a337-910bf8e49b52", "sighting_of_ref": "indicator--5044098a-4615-4c30-9436-421951571506", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d480da5f-e8cb-4fbf-96f1-185e2b623569", "sighting_of_ref": "indicator--e31cd8b9-8a27-4534-a84e-7c2cd1a13bb5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ba5338-39bf-4615-8d9b-f2b19a9d5e48", "sighting_of_ref": "indicator--e02caa72-c67d-4ebb-a597-3b8394671f80", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac21116-7b98-4bd2-8688-7d58fb885666", "sighting_of_ref": "indicator--da616d8f-6896-4d98-b219-6b299fbb94ba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08208997-c4ba-4a79-a96b-aa25de5a857a", "sighting_of_ref": "indicator--642de111-5df7-4c90-acee-75ba3dd9d744", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90de98f6-5c80-4a6e-a287-869d80a7f340", "sighting_of_ref": "indicator--88429a56-fb2c-4da6-99a1-9a3a5255be2e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a68038b-05a4-4d27-be1a-01c4920b771f", "sighting_of_ref": "indicator--6602d785-fcff-40f0-b2b3-25a0d534196b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5532c26a-6e31-471f-82ce-f7e52b4c6293", "sighting_of_ref": "indicator--b1dd55d1-c122-4afb-8a8d-14345c9b1199", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd30a2c5-ea6c-46a8-83ea-fc3e39ff1655", "sighting_of_ref": "indicator--d8f342c4-c36d-4c7c-bc73-f6a329767b45", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b436080e-383f-4f21-a856-81c213a414e1", "sighting_of_ref": "indicator--d3c40a45-33db-4fa1-bef9-3cc50044835b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083a2914-afce-419a-a381-bcb63aedac9a", "sighting_of_ref": "indicator--e3e42143-13a6-4622-8914-48791e98013d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3e2e77-0605-4a09-a502-78c002ecd6a0", "sighting_of_ref": "indicator--8461173c-13e9-4bcc-9cd4-7517da56bbd4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da44e7d5-5177-412b-b558-250a5c086fa5", "sighting_of_ref": "indicator--44194edb-d924-43ed-82a9-d3c0b4b380d1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d0bf25-9ebc-4933-ae18-1bdcbe8306ae", "sighting_of_ref": "indicator--d126fb37-d76d-4f09-8def-e3ac26a3c39d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77fc171-6f29-448b-982c-8d2e7434200e", "sighting_of_ref": "indicator--0f267a11-4974-42e9-bef7-dda563e580d1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d231ec0e-8c06-4028-92ee-606392b7dcb4", "sighting_of_ref": "indicator--99728887-a90d-414b-8f51-8d43cc9b2be4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e45b16f-4dfa-49e8-94e5-f0b4297162fa", "sighting_of_ref": "indicator--9bfc3b7c-d8a8-4d2e-9119-646a290ea075", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d223cf-11eb-4315-8c17-87471bfc58a8", "sighting_of_ref": "indicator--7d2ccff5-9e39-45c1-859f-194e59966130", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5b01f7-9e3a-41da-a890-85a27ed40911", "sighting_of_ref": "indicator--2f0ecf27-ae01-4c9a-abea-d0000f9ab9b0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8caefbb-8874-4223-a3a1-4379acf281e5", "sighting_of_ref": "indicator--a84245c4-a8e4-41e3-8731-178ad8512995", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103cc36b-2a33-4eea-9ba3-9d08cf58955b", "sighting_of_ref": "indicator--2f903439-b08e-48a2-aba2-9e6b5138b902", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f7c80a-5db2-4153-a570-e34cb411d1a5", "sighting_of_ref": "indicator--7f5bbb2a-afa8-4193-9207-7ab61ab380cd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2289d01c-35c6-4498-96c6-6376c0d8874f", "sighting_of_ref": "indicator--f00e0384-28bc-4de1-874c-4bcb200003ca", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36fce24-a7fd-44fb-b6db-5ec147bdddb6", "sighting_of_ref": "indicator--218fcb36-8f31-41e8-92fa-1db11b2cce83", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49928980-f6b4-4a05-96d8-6d7f4302164e", "sighting_of_ref": "indicator--36fb2269-e9ba-4995-9dfd-265383e5ddf5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547c7ee1-969d-414f-8cb2-4e25be2ed142", "sighting_of_ref": "indicator--63333d26-69d6-4d06-aa9d-8bf44fceef83", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ee7208-6a4d-407f-8fad-2fb1f694592a", "sighting_of_ref": "indicator--c81ec0cb-7824-4479-af1b-29f546cacae1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d80658e-cc07-454d-8aff-7a68ed844042", "sighting_of_ref": "indicator--dccbcf21-fc17-42bd-a22e-11abcb1c04d3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4f0051-a6f3-4319-a39c-c133b30460b8", "sighting_of_ref": "indicator--8c637205-aa74-4cb8-8fa7-efb798cb9e09", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b071b2b2-3eac-42dd-b991-de41c0487d94", "sighting_of_ref": "indicator--576b1d16-b763-4097-8a10-7793220ff8a3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c91b604-f5c4-4e05-93c9-ce124c91c0ac", "sighting_of_ref": "indicator--7d39e019-578c-4abc-a25c-89c8398ffd36", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dcd3bb-f9ed-4374-8953-f9b4bb3a6234", "sighting_of_ref": "indicator--dfa93a48-6431-4078-be41-ba72113648b3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebd7952-46c3-4be5-9d96-6e5d3be6c741", "sighting_of_ref": "indicator--3729f6fc-9fb2-47f6-8da4-01b75ec73f03", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e357c07-3c16-4be3-b257-2e358d20299e", "sighting_of_ref": "indicator--fd491ad4-75c8-406c-a30e-b6de25174038", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc729c9a-a006-4b50-a5d8-b8890e249f0c", "sighting_of_ref": "indicator--a09004c7-a273-4014-8c14-186a2e849c7e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c464e188-86b4-4317-8996-41c3174f0f24", "sighting_of_ref": "indicator--3c4c93da-79d9-47b5-890c-4c29628cc851", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfd12ec-6857-4288-bf2b-b07a315ce16e", "sighting_of_ref": "indicator--f11ba8d0-6517-4b80-a92d-fe6153833afa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266289cb-e387-44c5-a280-b4063712572b", "sighting_of_ref": "indicator--d235583d-7f01-416c-8c4e-b9e491efe685", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49824bb-1c8c-42a1-a940-cfc6bd7493ab", "sighting_of_ref": "indicator--760c4102-7999-4fce-8d05-ee305222da5d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0e3d5a-6cee-40c4-b683-981ffbae991e", "sighting_of_ref": "indicator--be908874-57cd-4e08-8401-79640d499814", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20758b2-2246-44f7-9a9d-bd17d1e9fe7b", "sighting_of_ref": "indicator--cee3a0e2-73c5-4a76-b996-d7f03ed6244d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dab68c2-bbf7-45e8-917f-b15fc05e9f1f", "sighting_of_ref": "indicator--10430066-d7c1-4903-8317-d686a96c1043", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efc6804-d437-4fbd-9df8-238b73eb82bb", "sighting_of_ref": "indicator--ccece0e5-776a-426a-8532-e8e32de0c94b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62326c36-5cb2-4ebd-9972-477fac20aa29", "sighting_of_ref": "indicator--06205deb-9642-4cb3-b35b-f5ba6061e941", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476f2283-4e7e-48f9-a89f-4dc01197b39b", "sighting_of_ref": "indicator--b4662ef7-9258-435a-9e9c-45a73e9e59d8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd45a146-72fd-4a2f-b5ed-2d8f310e8f8c", "sighting_of_ref": "indicator--f0388cb5-c4d5-4a9c-9261-bb55ff501d60", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2369cc67-f103-4784-92f5-83df62952db5", "sighting_of_ref": "indicator--a0aa27fe-d3c4-484a-9644-89c1bd7ddb59", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47020a3-f4e9-4186-a39d-c2bf5df62a9d", "sighting_of_ref": "indicator--b96677a5-f453-4a5e-b633-beabde4add0e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a5bf4b-2a09-4fb6-a32b-fb92bf735005", "sighting_of_ref": "indicator--b1ba79e1-2440-44ee-9b48-0f3e25512084", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7274ac05-8901-4221-9d20-1bfa6407bd75", "sighting_of_ref": "indicator--a20867dc-346a-4440-a057-a7b3ddf9cd41", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6bb446-566d-4673-b81f-21e09359fb88", "sighting_of_ref": "indicator--14d2dc9b-0aa5-40ce-a33d-e06ca549ccc2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7467a13-d319-4817-a546-3bd07d6ccdac", "sighting_of_ref": "indicator--b5f881af-16ff-4af0-85c4-9d98c425cafd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4dd216-84ae-40fc-aea3-85ba937a0f1c", "sighting_of_ref": "indicator--bca76df6-9847-4417-84cf-871b8933ca8e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16868a5d-d549-425d-826c-c1837f3ee10c", "sighting_of_ref": "indicator--7f68487b-8cea-42b4-8e23-75a007c39cc6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad39215b-a71c-4f60-9773-5432c9b01d64", "sighting_of_ref": "indicator--83ef1db1-e946-4dd6-91a3-158df1eafe54", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c387c89-8e76-4e4f-ab3f-a1818204a3f0", "sighting_of_ref": "indicator--f922dcad-7552-4d2c-b0c0-9792addd8d74", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cacc9f7-18dd-4f89-9d80-d497e075bfb9", "sighting_of_ref": "indicator--1fed36b7-5449-4587-9a0f-0d0ae6a30ea7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf25d3dc-1182-4a3c-97cf-3c0613763223", "sighting_of_ref": "indicator--776ba51d-0314-450c-99c5-3787c52baecb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db8774e-29d3-45f9-8b24-ab1add5d5f8a", "sighting_of_ref": "indicator--0ca71610-947a-41cd-b7de-050d681b7aba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7104184-4348-42a8-ba2c-0b5833bbbdbe", "sighting_of_ref": "indicator--406c0e20-dadf-4728-9a0c-5bddbfc432ff", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd605bc-7fb6-4f15-a4f6-0f3e57fd6966", "sighting_of_ref": "indicator--c4d2f5dc-0cb8-457a-bb94-79e829d9b4b8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb1e3f4-0e33-456f-b792-dbe38787ba4b", "sighting_of_ref": "indicator--8a35a00c-4b48-4c7c-95f0-5147658ec4ed", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa38ced-327c-4791-a3bc-1ae47746de71", "sighting_of_ref": "indicator--60ac0727-665d-4fb1-950d-adddb3d25341", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c0a7ff-036b-4c70-87c5-7b09f46d60b9", "sighting_of_ref": "indicator--eb59644a-7778-43b0-b7c3-2174234b4b01", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f70b3a-d644-44c8-ba85-de77ca42419f", "sighting_of_ref": "indicator--53633bb3-71ae-44d2-8ad2-8e1ae81420fd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f8dc54-bb96-45ef-b9e0-1e28f53e737f", "sighting_of_ref": "indicator--be19f3d8-9603-4236-bfa7-ea44ab440350", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe889b0-5932-429d-9a1e-9dce3a6d1dd2", "sighting_of_ref": "indicator--28bfa3d1-4547-4559-afc8-0c25e9101070", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6105509-e8e5-4d46-9453-28590f6262de", "sighting_of_ref": "indicator--aa0526aa-d175-43cd-8531-8eb9df9d71c8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c03499-81a6-4f32-922f-8f078b19aa32", "sighting_of_ref": "indicator--3aadfe04-d555-417d-8cac-5e2a8acc37db", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c847a8-910f-4f85-b141-dd85ff535493", "sighting_of_ref": "indicator--842c213c-65b1-43ad-be59-55af33f3dd63", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052ae063-1a55-42fa-857b-1c8a2ee7f061", "sighting_of_ref": "indicator--08c5bfbf-14ce-4b58-9e55-5ae7af96db98", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35a33fd-c78c-4920-9224-4f0ed7d9b25c", "sighting_of_ref": "indicator--836d57c1-ba1f-475d-aaea-19a1666ef738", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6af967-bba8-457b-b07b-c4dfa22e4259", "sighting_of_ref": "indicator--54f7ee2d-a2fe-406b-94cb-3f706d6ccdba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3d9bc6-1104-4de3-a591-167a6b23bf05", "sighting_of_ref": "indicator--d2724b75-31ea-45f4-a3ac-8eba5ad0f119", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37c9ae5-c918-4a94-8db9-5d3d831a3f19", "sighting_of_ref": "indicator--322943c3-1a2b-4356-8fd2-4937ee138a50", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d85b34d-1c12-4b6a-8d7c-afec306f9ae4", "sighting_of_ref": "indicator--1f26e93b-4011-43db-956d-f4935e148329", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3124eb62-51e0-4b0a-991f-94f3aa9611ec", "sighting_of_ref": "indicator--7d89c882-1681-4d9f-a17a-8a5e5f80fd76", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9449b087-2c20-4989-8c1a-adee682da4fa", "sighting_of_ref": "indicator--fe78749a-e6c8-4d96-a127-3e00a3806aaa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b467dca-0853-4631-92da-e2c746686260", "sighting_of_ref": "indicator--004263bd-38b4-49a1-9f46-048032b0bf14", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3659672a-9854-4b8f-bea2-6b6a30a9366b", "sighting_of_ref": "indicator--b78b7425-5a23-4904-8ed5-05d3ab4b5206", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de6f088-3fcd-46c8-8d17-fcc3989936ca", "sighting_of_ref": "indicator--798da572-a2a1-400e-8bcd-ad95d4647fa7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886ac448-6c1a-4ec4-a316-7dd7ae5ac8fe", "sighting_of_ref": "indicator--a544d7fe-75c5-4da4-b8e2-6cb91d2925ac", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903034c2-a716-4dc4-aac7-237abc8cbaff", "sighting_of_ref": "indicator--e94779ad-d0b5-4361-b8f8-f66fc773740c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d8c37f-9e21-4b78-b220-db3a1dd20184", "sighting_of_ref": "indicator--fc2abd42-74e7-4bbf-b1c6-b8f687b76bdf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83096e4d-33e5-4e2c-9d40-f070cef2db0f", "sighting_of_ref": "indicator--095585c0-7997-4e12-b83c-6e7513a9c128", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738382ce-5605-4f5f-9fca-d216a5fc82ea", "sighting_of_ref": "indicator--ef261307-2eb0-4c4e-bfc8-611c85c14454", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f1fe77-ccc6-48da-9dd9-e70ba23e8e4e", "sighting_of_ref": "indicator--714bb58f-cff8-4d27-86f1-0c8e61ef0cbe", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe379924-502b-4cf8-a5cc-666b6897cbaf", "sighting_of_ref": "indicator--bebccdff-ce27-47ef-9cc1-467d8628346a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1620d4a5-729e-42ea-9518-8bcb2596eb05", "sighting_of_ref": "indicator--4792089f-1c88-4778-91d4-fb8d7f70ab6f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b92dfe9-592b-49b7-914e-7c1b1cd80f5d", "sighting_of_ref": "indicator--cff136e0-0cc2-4e5c-8259-42aa0d620ebe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a64026-0109-4cd1-94c0-a57008a2e6c3", "sighting_of_ref": "indicator--1686f163-b935-4a53-985f-9bfc67224393", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39a64b5-3870-4314-91c1-772ba4b2f917", "sighting_of_ref": "indicator--cae49a9c-44f6-414a-9da0-61b542dbde6a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70b34d0-8809-4248-b1b6-f40b84bdf1b8", "sighting_of_ref": "indicator--3bf6175a-642e-4078-bd46-b841f83d5074", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45b8051-3941-4dcc-bec3-c712776a8181", "sighting_of_ref": "indicator--3bf6175a-642e-4078-bd46-b841f83d5074", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e3013c-424b-4550-9103-f610f64882ae", "sighting_of_ref": "indicator--5b3fe39c-9426-4910-952b-a00ca89e4670", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5f086f-8315-46b2-80fa-d62d378551ed", "sighting_of_ref": "indicator--c83e64a1-ccb4-410f-972f-78a7b49fcfe1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a21784-ab0a-4a5b-a5c3-86fa4351a755", "sighting_of_ref": "indicator--c1a562b9-fbb0-407a-bfdd-c62335db1ddb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f625407-b1eb-4351-ae6f-d14aa1a6d519", "sighting_of_ref": "indicator--c1a562b9-fbb0-407a-bfdd-c62335db1ddb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f9cb7d-0e3f-4bca-bf37-1f37de960da7", "sighting_of_ref": "indicator--cf5fbb4d-519b-4bdb-b8a2-4a5a3c023a4b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053b52b1-d829-4deb-9beb-96ed558d27e6", "sighting_of_ref": "indicator--f4440268-5649-4648-8036-4593e6d1b06d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b028ac-7875-41b4-a084-f7df385af32d", "sighting_of_ref": "indicator--932deaf6-21f9-47ee-a3f7-818b481b8c6c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868be1c5-7c52-4902-81db-4dc1f1cb3ba6", "sighting_of_ref": "indicator--e7f0304d-5a72-4029-8cae-14e77ec822be", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03de681b-4306-466e-b18b-0cff7e65bd80", "sighting_of_ref": "indicator--c9edd6cf-cef5-45fc-98e2-675cf1e85405", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2a982f-793d-4ab5-af8f-00f9220e3b8b", "sighting_of_ref": "indicator--5f10ca0b-3aee-421a-b1e8-0dee20629e27", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a701dc4-1c64-4e82-97ec-bf30b377bc01", "sighting_of_ref": "indicator--bb9eb8b3-0651-4c1b-b2fc-48cd38200268", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200855e6-71c1-4f56-9ba0-3899e4e61e60", "sighting_of_ref": "indicator--d3469d23-250a-4d78-973d-90974b59748b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0399ed1b-27b3-4224-aa8d-be3c013cf71e", "sighting_of_ref": "indicator--e9642044-02f8-4097-8afe-fe4a53d5eb34", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7be2757-fc97-4266-93b4-d8a9cb3ec40f", "sighting_of_ref": "indicator--0ffc0969-9fc4-45a0-aa37-db7ecb1e91e7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7312456e-37e4-4ff1-955b-49482573f263", "sighting_of_ref": "indicator--11ddf16c-05b0-451d-a460-e4138f27f488", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335890ce-8f65-4878-a601-24602598ff8d", "sighting_of_ref": "indicator--7557ca73-8ff8-42b3-a189-0134d2aacdad", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd89d28-7bbe-4edf-b27f-b98d657a5556", "sighting_of_ref": "indicator--5bb883de-5401-45c5-a3a7-7ecaab37fb43", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5def357e-1325-4b84-ba04-0d5b8128c908", "sighting_of_ref": "indicator--cb360093-9376-4b33-8ef8-cb248666e4e5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e33f35e-2c84-4045-a4f4-098da8b5a54d", "sighting_of_ref": "indicator--1f499224-0616-47ef-8004-227201e22a75", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32c2079-a195-4dee-afe7-057ae98617da", "sighting_of_ref": "indicator--1f499224-0616-47ef-8004-227201e22a75", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027253fd-9361-4e92-aa29-ac6c9451d807", "sighting_of_ref": "indicator--d2aa1926-b783-4445-9f64-1a6ec2805f65", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde28444-27a8-4ffc-92dc-fc6c446f8aff", "sighting_of_ref": "indicator--79716db1-9447-46aa-afaa-e0fda00eed7f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66b5dcc-6016-49dc-a5ba-fe3034c088a4", "sighting_of_ref": "indicator--2dc4c8f5-f356-4416-91be-819784900df4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c59deb-8753-474d-9385-a57d3aa4fccd", "sighting_of_ref": "indicator--4b552919-1b47-4cb0-9b9b-09f2b9b396a6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48f387b-805c-48ca-b017-fbb0f09f8112", "sighting_of_ref": "indicator--7b18d9e9-6095-4201-9c5b-96b05c6b1f20", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98d0e7f-237b-4f73-8cfd-3de87b09d667", "sighting_of_ref": "indicator--65cff443-c555-4fcf-9cc6-b608426e08e4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca5ffb9-c02d-4e35-96f4-67364f89390f", "sighting_of_ref": "indicator--7a581f6e-475e-48cd-a71b-6b1326ecebb2", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8dc1f8f-7418-4ce1-bd19-5c0750cb11ba", "sighting_of_ref": "indicator--ea943d74-d33e-4f87-b559-3f22da69bccb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf2889d-0abf-4ebe-a7f1-3d39f5399131", "sighting_of_ref": "indicator--a8131015-555c-4ab7-9066-be6101ded9d8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38a1aee-c4ef-49a7-b152-d72d9147a700", "sighting_of_ref": "indicator--cd2fd7bd-8b5b-4b1d-9579-68c7b2ef8465", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421a8a6c-6a65-4746-8fda-4a90245d6ae9", "sighting_of_ref": "indicator--3d3419e3-383c-45ad-9bd4-ddd67008aa05", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2899c7e4-c7c6-4ab8-b197-296dc7db5d62", "sighting_of_ref": "indicator--c2ebab92-729d-4c6b-a4d9-26ddb750cb1b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a88bece-af66-4beb-8f23-917f8a7c203d", "sighting_of_ref": "indicator--fb49d1e8-8a31-4422-9f90-9164e489cd5e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54af33a1-b590-4931-8f89-f46f2d0fc605", "sighting_of_ref": "indicator--a94a8566-0c31-4098-9d45-0576a80dca4c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be88cfb-f547-496d-8f29-ab0ea24a143e", "sighting_of_ref": "indicator--3a435579-e3fb-43f6-bc1d-510b5cb35dd0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6baa023c-108d-425d-95ca-d7a61e2cba5a", "sighting_of_ref": "indicator--c56c49c9-5f02-449f-820e-38e98cd2d1c9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b1b56e-4d70-4451-950c-8681ad37c502", "sighting_of_ref": "indicator--b263b388-f1a7-4ec4-9737-9af9018a0e3c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556aa9d3-a022-406c-8292-a5ff0994b5a3", "sighting_of_ref": "indicator--45d4f4fd-704a-4728-bbc9-1b1e6acf8db1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d4c0cc-d47d-49c1-a533-c250c0517d0d", "sighting_of_ref": "indicator--d8916a01-693f-4783-8c50-a41b08301984", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c787a622-a529-46c2-b70e-315c84b27feb", "sighting_of_ref": "indicator--19e30a23-f1db-49d3-be3d-2651e7472ef5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5a4e66-f8c0-48c1-a280-7fcc50ea4f5f", "sighting_of_ref": "indicator--d142705b-92db-4451-9d20-c169dee5d4b9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d83427-158a-4670-b628-06a36f82d581", "sighting_of_ref": "indicator--2fd0bbe8-6edd-465d-9faa-774424ee38d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04057e5-f43c-4d81-95ad-0f63b069cb82", "sighting_of_ref": "indicator--742bc0e3-dbfe-4e48-b9ab-ea74ccd67825", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3d045d-d60a-4657-96c2-364caf7d40c7", "sighting_of_ref": "indicator--ec4061f4-e3e8-4d92-88de-10947a0aadb8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8627a6-c6e0-4416-b2c8-93bbf8e16ecb", "sighting_of_ref": "indicator--04f62b12-dd94-4270-8747-56e6266fd8d2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9efb66b-1c7e-487e-a48a-1340592e86c2", "sighting_of_ref": "indicator--a29b208e-3e6c-48e7-b653-a97e4b4a45ab", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb27ad40-2a16-4585-8f67-631f44b7f029", "sighting_of_ref": "indicator--81eec8c6-9796-4310-ac7b-1acc96fd6a20", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35332a9-1d64-4be6-8439-e083d4b7c8eb", "sighting_of_ref": "indicator--35b909ce-2e19-469b-8ab2-e78409d2d33a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c17aa0e-2713-40ce-8aff-ad16ca4319f4", "sighting_of_ref": "indicator--decb2669-b82a-48fb-96c7-c73bcb924454", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71795cc2-6dde-4048-a1d7-d0f0529c8007", "sighting_of_ref": "indicator--e7f97458-912f-4acc-83ec-8f88448e56f7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2b9c78-13b6-4170-8157-a196830f9472", "sighting_of_ref": "indicator--d4d24c8d-15e8-4d4e-af39-38014154910a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198728f3-b159-45fe-9f50-8a96d325a890", "sighting_of_ref": "indicator--bca234b2-73f8-4fbe-b620-9d44092c77f5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e08e9c-beb2-4f96-9eef-8475fb5359c6", "sighting_of_ref": "indicator--73301664-a488-42d4-8724-5650f83d090b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356ed2a0-5e80-49dc-abdc-5e6f2b9ae83b", "sighting_of_ref": "indicator--22e84d8b-f086-447a-88ed-c63fbca685b7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9f9837-69ce-416a-9e09-8c5f457cd534", "sighting_of_ref": "indicator--c35cc970-89d0-4f0b-b071-f3e4df7ceb3b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53b059c-36d2-4d27-881b-9ff6e26f5690", "sighting_of_ref": "indicator--13391344-d552-4042-89e1-a9ce03ccc9c6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74570102-63af-4c10-b12b-d595f27c0c00", "sighting_of_ref": "indicator--8b9905f6-d1a6-4b99-b46b-e9de372e20ea", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c836b1e-27a3-4452-b9a7-22ea6c108932", "sighting_of_ref": "indicator--d4bcb0dc-2d2e-4eed-b416-26cab3dc95f2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9f0f02-d871-414c-94f0-af8bdd0cb16b", "sighting_of_ref": "indicator--bfb62db7-4a4f-47c6-936e-c51af1a34e0d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4fe14d-daf3-4f36-846c-44e76ab1657c", "sighting_of_ref": "indicator--2c4694dc-b8fa-4c81-892a-2dd692f26e82", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b562d7-1ec5-4685-9f69-521f54b07206", "sighting_of_ref": "indicator--b7af8dfe-a379-4c6e-8c40-7966b879d2ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f218f032-1e5d-49a4-9059-e5710bc49246", "sighting_of_ref": "indicator--3ac3c071-efe3-4b6f-b5e5-87944b1c05b3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a163932e-c591-40ec-ac65-b8cc6d719ce5", "sighting_of_ref": "indicator--e7ceeb9f-9f29-46ad-adfd-daf1f2416c12", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66e0dc0-8d44-42ed-a9b5-c24a6185be05", "sighting_of_ref": "indicator--8fcccd01-edaf-4b48-8dfe-37de0d5eaad0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60322879-7588-4ec8-b3c8-7e811a686ec6", "sighting_of_ref": "indicator--bbee6cfa-3d02-4135-93e8-8b9bd46e9832", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048dd752-7f95-4ada-99e7-3d8f1f74e61f", "sighting_of_ref": "indicator--594a2d29-9590-4f73-b555-ee7ff031feed", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4662e1-d405-4548-b85f-a0508fe6815b", "sighting_of_ref": "indicator--f892cbce-3868-440a-bc8e-d89392dc33af", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2764a573-d20d-49dd-8267-e09133fee3b3", "sighting_of_ref": "indicator--1f53aa6a-7b51-4620-9450-b0329b010bdc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b79ea8b-208e-4225-a62a-2e577f424b22", "sighting_of_ref": "indicator--5edb53d2-57d8-42d4-8a12-36ba35272430", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558ae4ba-b6c1-4bbd-84fc-aea7616e80a9", "sighting_of_ref": "indicator--46ca8b19-9c28-4a05-971e-a60705b3ce59", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059371e1-93b0-476d-a4b5-238b51db9e4e", "sighting_of_ref": "indicator--115747e6-4265-4c43-844e-ac3d53fe2c9f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282220a7-5e3b-4af6-8259-4c53f14b71fa", "sighting_of_ref": "indicator--4cadbc57-cb09-40b1-8b44-b149ab549f87", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a065be-a09d-4d17-81f7-db8805bd17b5", "sighting_of_ref": "indicator--7d794f13-2e36-4f06-bff5-7676e236c21b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfa6ea2-f1e3-423a-9373-25fb070862c0", "sighting_of_ref": "indicator--b09f8696-c4f3-4580-8e02-ad162ab258f9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55197471-149c-4736-ae83-1be7ae495593", "sighting_of_ref": "indicator--b1f2e18e-27a4-4c50-992d-20c74eaf5acc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711652f5-8877-4008-9d86-71462b04e274", "sighting_of_ref": "indicator--a983d4f1-2c3f-4678-bf06-5fc44bc89ec5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f90e314-4c10-42a2-95ba-cc7a9613ca84", "sighting_of_ref": "indicator--c5b3fb84-2ab8-4580-8a40-06fef4eaba59", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a37164-65ec-4d93-b525-2080a9a996c3", "sighting_of_ref": "indicator--43fcafec-13e5-4f8a-891f-5a8e58e994f8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128ab511-dbb3-4b2a-87dd-8c4e123d45ca", "sighting_of_ref": "indicator--2be86627-379c-47d9-b14b-21bcb85fd414", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2364be28-706f-42f4-8dd6-627831ab7d8c", "sighting_of_ref": "indicator--319b299e-4ba0-4d5e-8c0e-ec0f64b18782", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e073f7bc-7527-4ab8-95e4-58843789752c", "sighting_of_ref": "indicator--829c15e6-a2e4-4fb2-8054-444dca70fdb9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185035f4-1a82-492f-bb99-3a31911d624d", "sighting_of_ref": "indicator--30451dd2-057d-4ddf-90d5-e7174bf8adbd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865cd489-383a-4b7e-b0f9-6d3f01a206f4", "sighting_of_ref": "indicator--3a361ab4-a806-4cab-9f47-2500e789f29e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00100579-5e83-4c5f-bce2-bb69f1074848", "sighting_of_ref": "indicator--54d2de19-aa30-4e17-8bf2-f7c2b1cc0ff6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89d2920-23a4-4c76-a13d-959e5284deb1", "sighting_of_ref": "indicator--be520698-abb2-47bc-bf56-32260509d05a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2ba842-c19a-4fd3-8e05-94de33b0efab", "sighting_of_ref": "indicator--8d823316-ce62-495d-84f6-9741a3607656", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3e2f5d-1e18-4baa-a816-94135fb0b24c", "sighting_of_ref": "indicator--7f6716e0-0b47-4455-8c9e-8a3aa8003aa0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a266855a-b055-4ad5-8463-48bea56f1d00", "sighting_of_ref": "indicator--c33b8d6a-c9dd-4f94-b316-ca2d83616079", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff43680-c600-48f1-990a-dbf3d618ae9f", "sighting_of_ref": "indicator--0cc4e830-d73b-4d11-8768-23cb211fbeab", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97a63bf-618b-4880-af98-d482299be18e", "sighting_of_ref": "indicator--8ae4b642-4fbc-4043-8ece-fd6c945e7977", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5158e26-812b-4680-9565-df9f2088540a", "sighting_of_ref": "indicator--8ae4b642-4fbc-4043-8ece-fd6c945e7977", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e517f439-09f0-4cd7-8a21-21957b6e4a28", "sighting_of_ref": "indicator--61577a0b-ae5a-4383-b8db-1419e2f8cedd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75773de2-9e94-4407-8f03-3f2998d4a7ff", "sighting_of_ref": "indicator--51c35d6b-d0ad-4e01-bb28-14a5b28384d3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22a4945-cab8-4307-b899-335bf8331165", "sighting_of_ref": "indicator--231d46ab-0755-43e1-ad0f-fe2a26f7fdaa", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f165a017-55d5-4373-96f8-8b93770487cd", "sighting_of_ref": "indicator--f176e8b2-1132-40c8-ba17-967850a354ed", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee230f0-3da8-4a1c-9a2d-42707bdb8a26", "sighting_of_ref": "indicator--d2c9a2d6-59bd-45a4-84f4-5ea2c09733de", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3342cbe-b4a5-4557-9b1c-580934879a56", "sighting_of_ref": "indicator--471b8b9f-68ea-44fa-acd0-59dcb572a74e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c28cef-a91d-4dfe-aa36-9d0faf0d37f0", "sighting_of_ref": "indicator--471b8b9f-68ea-44fa-acd0-59dcb572a74e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9417c9a1-2088-4f65-b091-5d068c5fbd01", "sighting_of_ref": "indicator--b3a917e0-02d4-499d-90e1-ccb11cc718b2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1538e15c-f9f2-4802-8c66-99fc04c5be2f", "sighting_of_ref": "indicator--b6002541-ddb2-4915-a506-99c030fbdbe7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57947f59-db1f-41fa-b9bd-d5aa866e6a9c", "sighting_of_ref": "indicator--32cc7b15-0924-4f1e-bb17-ca711aae1d17", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e067a8-31d7-4c6a-bc77-26a601685769", "sighting_of_ref": "indicator--1e9ec12e-d272-46aa-95bb-1629990415c8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f8478a-2273-480f-b9df-609d492ed2d8", "sighting_of_ref": "indicator--e2d43eaf-98c2-46ae-b636-4c32c34ee4c0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a71b8e8-2558-421a-8339-20bbe3615006", "sighting_of_ref": "indicator--ca50c6a9-0116-4d17-b176-2394e28e9422", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3c40dc-d58e-44b6-94dd-d9e738503d90", "sighting_of_ref": "indicator--d4a7c6db-3a55-4ddb-a84c-8f335ff0d282", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a8fbc5-6bad-4fe4-821d-8e22e2352915", "sighting_of_ref": "indicator--f5537e41-2b9f-4f86-b979-36ede556d81e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80254e04-5f0c-44c3-bf1f-a4b5771cc0ab", "sighting_of_ref": "indicator--f09819d3-59d9-49c3-9609-8c52926d38a2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ee0600-f45f-41ec-8c33-380055a9b135", "sighting_of_ref": "indicator--c3a29bdb-c9e9-4e12-bb65-eb981bd85a24", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb48054-06ec-4afd-8798-4b186c0f920b", "sighting_of_ref": "indicator--59195479-11e2-4451-a446-ad716fc9bda1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab9b64b-a9b2-4f9c-bc7c-3c71982a4913", "sighting_of_ref": "indicator--0ffa9b85-8c8c-4e6d-8fdb-d1636a568d7e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d456cfc-271e-4848-94d9-9f45eccc4385", "sighting_of_ref": "indicator--6c2f3c97-fead-4efd-8fd8-e5f80682ceb8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbfa27a-8a24-4350-8ae2-9c6bbccd5bee", "sighting_of_ref": "indicator--e10f8603-15cb-4db7-b7a9-69017b9a5534", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edad3247-3562-4c0c-b1ab-1eb8900cf690", "sighting_of_ref": "indicator--f904d9c5-5853-41c0-aed2-489008fd0f9f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18d6326-55f3-49e4-9631-a77a4599914e", "sighting_of_ref": "indicator--2fea708a-31da-457b-aab9-13bef1cddca9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1a2ea5-01cf-4f3e-a9cb-6ed7d9c98031", "sighting_of_ref": "indicator--a4e3aa17-ae9d-4586-ae19-dd35c6be101a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8410bbe9-59d1-42f0-a527-67e31fe89aeb", "sighting_of_ref": "indicator--eda8582e-339a-4187-a619-10361abf17c1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2de42a-0b91-418d-83b2-25da5ab8f10e", "sighting_of_ref": "indicator--db980f11-f22e-44f5-a692-3459f37ffea4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2c2afd-91b3-41ae-a738-892dd2de9f60", "sighting_of_ref": "indicator--1fc2fe80-1049-4dbb-8229-9fec7de3ea84", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38f84dc-f4e7-469b-a92c-da54c041eb72", "sighting_of_ref": "indicator--b204c33d-5cbd-4067-bdcb-76c6026d4240", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f43d103-3ed4-4a13-9b52-130d40e66b15", "sighting_of_ref": "indicator--11089398-95c1-4451-b257-1716c0d75168", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c165da1b-c884-42e1-8384-08ff03f1f24c", "sighting_of_ref": "indicator--922d14f4-1b41-4356-9709-1d4ae6cd8670", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d833a85-4de0-48ef-92bb-7877d94ebb43", "sighting_of_ref": "indicator--c76cd196-ad94-4ad7-bee7-bf7a1ac3689b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5bcc03-c7aa-47f4-9231-358cf5e73e40", "sighting_of_ref": "indicator--77dc7460-9f22-4933-b38c-f3a711ec8506", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ca1f73-f9b3-475b-9338-2558d5c181dc", "sighting_of_ref": "indicator--3259e427-a5fd-46ba-8d38-1d5883869096", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c71c9e5-1ba9-49ca-939b-b1799261668c", "sighting_of_ref": "indicator--d01a2f10-699a-435a-abf3-437c8ed92f15", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc7dcca-530a-4d34-a0b4-1e835b1b69aa", "sighting_of_ref": "indicator--d65c5843-0265-4944-8e95-4a7323348f05", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccac015-4335-49c9-ab33-8519bfd39503", "sighting_of_ref": "indicator--184894b8-87ac-49ad-87c1-65cf3a7ea4e8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d48d31-7490-48be-b0b1-424a2dd95bcf", "sighting_of_ref": "indicator--e2d5deed-9647-48bd-9bd8-ae15a1f98880", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d6820d-10f8-4622-9fa0-159e70c11697", "sighting_of_ref": "indicator--7254d0ad-8b0e-4148-931f-c9a9003a516e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c8fc79-866d-4567-b890-0a894547fd5f", "sighting_of_ref": "indicator--b1014083-77e3-4269-983f-691ad414f135", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9e8e5f-66cb-4ff1-93ea-52a8062445ec", "sighting_of_ref": "indicator--e21fc5a7-bef0-40ab-8fee-f3d52f60fd3d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9b9cde-66b6-47d1-bc12-3c195a73e107", "sighting_of_ref": "indicator--3bbfb944-4a2f-425f-8d8b-98038eec3766", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b44cf9-b9b2-4522-bb6c-d7c9b70f1688", "sighting_of_ref": "indicator--e0d22211-0ca6-4b38-99e9-f458ef1c35aa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2ea2e8-37b2-4539-9dd3-e6e37c292cbf", "sighting_of_ref": "indicator--dc2da698-42ce-4572-a013-66cdef3ff419", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4803fa-3619-4c64-87aa-a850a4e6df56", "sighting_of_ref": "indicator--b3bba718-7c22-4420-b2f8-eeee90f293f2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e21b34-f65c-4961-89ff-b612b380bae5", "sighting_of_ref": "indicator--70627d14-a2b7-4a08-a188-03112aeeeb50", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411096b9-19f1-487a-8f12-32cbb3a52781", "sighting_of_ref": "indicator--8b6e80fd-ecf8-4146-a0a4-16da1b8820b2", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c156d432-93c6-4998-bc1d-9f3f49279fa0", "sighting_of_ref": "indicator--85ee243e-826f-453d-8e78-67c33252a3a0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba8344b-75b3-447b-876a-0f0b3ac1cf8a", "sighting_of_ref": "indicator--4168122b-7048-4bf8-a2ca-34bf439c87df", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420b4067-da4c-4217-9818-2dc8aae3a697", "sighting_of_ref": "indicator--4d7aeea5-6d60-439b-aafa-88c280b8e04b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e08e84-8290-40af-8ac8-7e95be35fad9", "sighting_of_ref": "indicator--c70a430d-41c9-48a7-8bd7-bc85b77a4304", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4b2ac2-d4c4-45e5-be7e-288b353362de", "sighting_of_ref": "indicator--d0afe1a1-74a3-4ba1-b07b-20673176d0b1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550e5160-1f7e-474d-abd6-0f4478976568", "sighting_of_ref": "indicator--7f247e84-a7bc-4525-8df9-e070b4acc45d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e49ab9-6e9b-42d4-9017-907413c37a4d", "sighting_of_ref": "indicator--8648c35f-b5ea-4d10-869a-bcfcbb4f6e3b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6239a649-58ec-40d1-8f09-319fcbc9ca96", "sighting_of_ref": "indicator--07ede20a-fb0a-47d6-ab62-8691e7f65992", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298880cb-38b4-4ecc-8ba2-ad989a546ea2", "sighting_of_ref": "indicator--a546e3cb-8546-424f-a2ff-33b23d14fee5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194a6b99-1922-4210-9661-20b6fa86fb35", "sighting_of_ref": "indicator--76663423-29f4-4c6f-93ba-e4163c141484", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f20783a-069b-4a54-90cf-f2e7215f8b66", "sighting_of_ref": "indicator--445b0e57-3f57-4ee6-805b-eff5f44cbba1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8058f78-9c57-42c2-827a-d3cc7d1de5fc", "sighting_of_ref": "indicator--6790a805-5214-4493-9fb7-c221406c0256", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e6d3ff-a935-49a9-b60d-27dbee6bd723", "sighting_of_ref": "indicator--481cc7df-c487-485c-838b-e35d46bd74e3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9d1d78-6051-48ee-87ec-3623f2003a02", "sighting_of_ref": "indicator--8b241fba-e5e0-4617-b361-f597308c0d75", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab5510a-52c7-4d8d-9db6-f4b49d4b4dd2", "sighting_of_ref": "indicator--81f1b10c-4c19-43b9-b458-f57773303e8a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa8ac4f-e1b9-4310-a3c2-7f7df3ade726", "sighting_of_ref": "indicator--62e4dc95-20e0-464e-9011-afd287ffd680", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58087a6-b7d8-464b-b985-f949c6132c3e", "sighting_of_ref": "indicator--cc163e0c-9b33-45c5-bb06-0b04a3ddca88", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa74621e-3374-4a68-9fea-be05c8a13a0c", "sighting_of_ref": "indicator--c74d79dd-682a-4be4-b550-f524f5866451", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0700118-de1f-4727-8c65-cfe988dc3b8a", "sighting_of_ref": "indicator--b36e327c-67b8-4da7-8939-a67d00e20cff", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c23a51-c1bb-4bc9-aeaf-2a4b96a9ef27", "sighting_of_ref": "indicator--c17d657f-0f49-4dcf-b180-b18e47b0a4f0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1819636d-11b0-49de-9f0a-12af780bf0a8", "sighting_of_ref": "indicator--cbb99aeb-e041-43ff-aa0e-3d0e511a4a96", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d063cdab-b396-4882-ab8f-10b8aec76d93", "sighting_of_ref": "indicator--8baa7409-7063-45cc-b5c0-42b46dc3c3cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ac217b-df01-48dd-a788-0634c706acea", "sighting_of_ref": "indicator--aa2546da-218f-4814-b33a-0dbf479e8949", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1556ed2e-9d49-46e3-b9c8-9b8614494051", "sighting_of_ref": "indicator--0bc7245c-4087-4a60-8e75-f40f13e16999", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd1ad4d-dd7c-4b20-b74b-05c2e6f12239", "sighting_of_ref": "indicator--2a77aa53-5515-4091-bd70-73c3e01e90c4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d25bc7f-7747-4627-8f32-7469d149b4ac", "sighting_of_ref": "indicator--75806c52-d2e9-44a0-a232-1562287e7e9a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f1d6a3-0319-419a-946c-7f1a2dd1cd16", "sighting_of_ref": "indicator--3a5f617f-429e-4543-975b-a70c8bc46f42", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0aed113-10f6-4d88-a3d2-c7380a7a77a7", "sighting_of_ref": "indicator--a6ed0924-4fb9-4b9d-919c-6b162b2e10c3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93b4f6d-9f16-49ca-b5b3-6ff5c4836faa", "sighting_of_ref": "indicator--20f8a463-67cb-4c77-809a-3ea2c0fe4f99", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7ca469-20c6-4ad0-bfa7-6183954b3c33", "sighting_of_ref": "indicator--79f241db-5669-4bef-96be-05a92004afc6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d38585-049e-4d80-be4b-a27550f1c57a", "sighting_of_ref": "indicator--b4a59f69-490b-4bf1-aca9-6d3b240290a3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d802c1e0-5e38-4631-aa86-ed1e2e9b0dc7", "sighting_of_ref": "indicator--aa971b92-6401-4ad3-8e91-cb82d43500cc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1a1565-ac8f-4512-b4cc-9848aeaebb23", "sighting_of_ref": "indicator--fa80d088-221d-4da3-b2c6-33f3e47a2bd4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf7ae14-86f5-4c38-b7c5-fa25f34495bb", "sighting_of_ref": "indicator--5e644c84-8615-45e7-ad89-401afe1ff051", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96952d1-2a6c-4287-8c57-e63a1517f26b", "sighting_of_ref": "indicator--a63df2e6-5c76-43b7-9547-52684750958d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7cf014-dcaa-4256-99f4-d50a3dd21e76", "sighting_of_ref": "indicator--0fda292a-b8fb-424e-ac1d-9ca2969d9e10", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b29b5fe-9003-4a3a-a866-6d79d9a6400e", "sighting_of_ref": "indicator--a8c8c1ee-457a-48c5-bc34-fc1db2c36d37", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d14b696-73ab-4446-995e-b98d016b9b28", "sighting_of_ref": "indicator--5b1ae5cb-1e7b-4d20-b4ed-1aecdbb6ba00", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6dd4b0-5978-492b-a987-143028e9e9b3", "sighting_of_ref": "indicator--640f93e1-7c72-48a8-b5a8-00d39f6d5105", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59279dd-9fb2-4c16-bad5-f1e60cf62479", "sighting_of_ref": "indicator--2c2c00b8-f440-4d2c-9eb3-4abcb6819e62", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8304c715-e7ed-4608-b34c-843b18c1ebf6", "sighting_of_ref": "indicator--c13f480a-f5b2-4b87-bf7a-ad9e84c142b5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5e4f86-33c4-4248-b2e2-d8d78906813d", "sighting_of_ref": "indicator--35dccec4-94ad-4bc8-8355-fc55443fd50e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031db106-f357-4d56-ab68-eb7d1d442908", "sighting_of_ref": "indicator--94ad9235-c091-43b8-87cc-e1e908ffe143", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228fc0a7-532b-4d48-b1b9-4a85362da0bb", "sighting_of_ref": "indicator--01a5cd4d-f139-4979-8fbd-5a76a85833a6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32871b5e-39b8-400c-a4f4-0c690d929869", "sighting_of_ref": "indicator--4a6fe838-386a-4942-9236-f0aaf6193e50", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18a33f6-12cc-4933-b838-e4396a0266d8", "sighting_of_ref": "indicator--afa9d925-4c9c-4bc4-aeaa-8ca7565a7b0c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9f6d06-5a8f-44ce-b9c0-7f9fb064faaf", "sighting_of_ref": "indicator--2a2108d8-8c80-4b2e-b62f-87c7eba77f12", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c07b4df-7074-4180-aaa5-5c2428f49fe7", "sighting_of_ref": "indicator--41c3be76-e5c7-4cbc-81ad-11673fa5b8d8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba6f4b5-b50f-401a-9c3f-558f00053d44", "sighting_of_ref": "indicator--afcf6172-5cd0-45d0-b22a-f59df152c38b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc2ab28-d18c-4eb1-8847-8fee3ecf7bfc", "sighting_of_ref": "indicator--bfeda439-e491-494b-b669-bb65ed00f5ac", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4b8977-f343-405f-890b-cc397e6b6c66", "sighting_of_ref": "indicator--a555d60b-4710-4d19-9201-989fde77c915", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ec7b56-d5a1-48b9-a68b-1d937767e39a", "sighting_of_ref": "indicator--f617e8df-11f3-4176-95b1-0449f9353109", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a242dd-2802-4b6f-a137-dbb77b10f579", "sighting_of_ref": "indicator--9c98aca1-9679-42a5-90ed-6726e89f5603", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556e5c7a-4820-47c7-9f42-46bfb4714c73", "sighting_of_ref": "indicator--f5b685a0-9c1f-4e43-ad79-1f4d2c29e264", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0b7299-a3e3-4e7b-bfdd-eb25e9f82343", "sighting_of_ref": "indicator--01deaa99-240d-4de6-a874-ca9cd20ebd38", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6818527b-c8e2-4b85-8acf-8f3ab67da4a0", "sighting_of_ref": "indicator--127a5a2c-8bdc-4908-96f9-43a74c74e5fb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3ff16e-f5ce-44ce-9ce6-a9023f49ba6a", "sighting_of_ref": "indicator--60d4b175-37d8-4e97-bc6a-99587deca4cb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781b0bfe-dd82-4030-a99e-27acced1b778", "sighting_of_ref": "indicator--69836211-1917-4398-b255-580c93488f30", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47ea336-d14e-472d-a5c9-0bdd211da406", "sighting_of_ref": "indicator--cb600def-32f0-486c-ac14-4f836d7a80f8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10b25b7-303f-4b22-986c-e26ad9573f4a", "sighting_of_ref": "indicator--404e5a3b-168d-4786-af40-86b7775406d5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b639e4c8-7515-47b7-9216-8f42a6a9092d", "sighting_of_ref": "indicator--e7b2dcb3-704d-4c31-b2e0-091e2c77061a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1155e6b-fd42-4c91-96bd-c9b606652443", "sighting_of_ref": "indicator--082ac93e-95c3-47be-be0c-ee702e8ecff0", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcd07e8-69bd-4939-96ec-b4fdb43ab3e7", "sighting_of_ref": "indicator--40623d16-7eeb-4b30-9a9e-7e263580539e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e0cfd9-2a88-4ab1-b979-b9c916023e77", "sighting_of_ref": "indicator--6e48f69d-b836-41b0-baa3-e2a38a6dd3d5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ed2584-6987-4558-b910-76d905bf89c9", "sighting_of_ref": "indicator--d050acb2-6cca-4125-b1a1-b287986b81cd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de51c98c-f285-4ec5-81b2-d98dbf8f1ebd", "sighting_of_ref": "indicator--d06a8be2-d7d5-4809-b1b9-09c1bcfc9f0d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e1a871-372d-47d4-9024-bccfdbcf6f44", "sighting_of_ref": "indicator--78996ca4-ea43-4790-9ad8-fdb1ccd02e89", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521506e5-b200-4e22-9e6f-258ef8997390", "sighting_of_ref": "indicator--d2f82efe-853f-470c-85ad-29ae3b9f5111", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e782aadb-3a51-440b-94f9-3250de0b8e9e", "sighting_of_ref": "indicator--e69f27ce-20cc-457e-8c03-4cd6ee659bca", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f194f6-2126-42a9-b846-4ffb6e211ad4", "sighting_of_ref": "indicator--45aa0fbd-19c7-4338-83b1-fe8073bad764", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acce010-dcb7-4a4a-adb6-5b8574a38211", "sighting_of_ref": "indicator--436cfa22-41b2-4fdb-84d6-30a42cd73228", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f0e486-965d-4671-b532-67245bcb2ab0", "sighting_of_ref": "indicator--74b50f8a-e701-43f3-93cf-0d7efe9b8aa6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c12c94-7e85-4df2-bf94-e8f07f3d6d18", "sighting_of_ref": "indicator--c4395dcc-1324-4cb5-9c7c-33b41bf81133", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06586d64-19cf-48fd-8eb2-21babb782328", "sighting_of_ref": "indicator--67e02001-c951-44b5-9eab-db6fcd5bafce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5893a6-7d97-4c81-88c3-04a9d593e6a8", "sighting_of_ref": "indicator--a9fae0df-2d03-4029-a44d-bb5469596212", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8c2c8a-35ca-4483-9b93-ed701c1215dc", "sighting_of_ref": "indicator--9ffcee27-8ea8-46f3-8b64-589754d9ddd9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81327794-0695-49b6-acc3-794625a1b919", "sighting_of_ref": "indicator--8e6f1893-fe11-45f0-8476-80555def2653", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f271c265-b37f-42ed-b12e-7e09446313ac", "sighting_of_ref": "indicator--8d0348a5-b7c5-47e7-bb3a-1309ee1dcffd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7a1636-f1de-4684-9954-2f1a0151fbae", "sighting_of_ref": "indicator--b4a43506-e44b-473d-b87b-3c2d69eaa4c3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55efa24-e378-4752-ba99-b8f52550709b", "sighting_of_ref": "indicator--3c88fc70-5ff2-46c0-a30a-ed77924fad5f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcc7712-7a66-4c1c-b200-f2ae26b0599f", "sighting_of_ref": "indicator--b19e96cb-5b25-48a2-978e-82af1ce0d1c3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f47b73-16fa-4209-a77b-a029b75d60e5", "sighting_of_ref": "indicator--666141a8-be06-4833-b8cf-894964065c67", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fad0a0-ed42-4073-bf5d-3c76ec74cf1d", "sighting_of_ref": "indicator--b5647a8a-ac82-4bef-9cad-13a2aee61832", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02171a4-2691-4f2e-b96a-4489039a00ab", "sighting_of_ref": "indicator--a601185e-afa5-485e-b83d-08ced7b7fb08", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374777c0-196e-4291-a96c-b08a8703e98a", "sighting_of_ref": "indicator--31884f56-cb09-4a5d-91b8-c6a47cafa983", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdd025d-61fc-42a6-9b71-499b88dcfe9e", "sighting_of_ref": "indicator--f8c4e0c7-f317-4607-8423-77da46ad583c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ea4ef9-7557-4a5c-a128-3eb4e1201863", "sighting_of_ref": "indicator--099c9efc-1f40-4f1c-b631-51190c6fce64", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79605e3-96bd-43c8-bb97-dcd6a446ee04", "sighting_of_ref": "indicator--099c9efc-1f40-4f1c-b631-51190c6fce64", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74688fa8-537c-4a0f-be69-6c3fb06c65f1", "sighting_of_ref": "indicator--1997be88-b6c2-4f25-b0db-1a88106718d4", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5c1fb8-1d01-46ab-a0b9-f933c5c7eb37", "sighting_of_ref": "indicator--d7687350-4bde-475b-81b9-663566d7db91", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1fce46-1ceb-4952-a7fe-280679608283", "sighting_of_ref": "indicator--d7687350-4bde-475b-81b9-663566d7db91", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6a379a-caf6-4150-8ed7-d23a75e53622", "sighting_of_ref": "indicator--bb87bc79-deb7-456d-9883-b7c28048e7fd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d09144f-6b92-4d00-bf06-5d108c31a017", "sighting_of_ref": "indicator--95c7d911-fe98-43dd-ab3a-fe4388350b3a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffeffa41-fd7d-4028-8e69-83b25ae0b8db", "sighting_of_ref": "indicator--95c7d911-fe98-43dd-ab3a-fe4388350b3a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755b0741-3c15-45f6-9688-ff2de3bd6932", "sighting_of_ref": "indicator--e98edb48-425c-4b7f-a7af-d1e086d11425", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7b6ca4-b17f-4a1f-a138-cf1702d07680", "sighting_of_ref": "indicator--e98edb48-425c-4b7f-a7af-d1e086d11425", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767242da-00af-4d93-8b70-859cd188beb9", "sighting_of_ref": "indicator--e6832d52-5dfd-4fa4-9a09-1afbb0854316", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baea3497-5787-494f-b4f6-8cf6377f7227", "sighting_of_ref": "indicator--c6c67c02-0586-484f-ae6d-b0dd1b28151e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87468d86-b798-485a-91d0-66361e2aad99", "sighting_of_ref": "indicator--c6c67c02-0586-484f-ae6d-b0dd1b28151e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc05b9f-b735-4e72-83f5-30aa58908f26", "sighting_of_ref": "indicator--0589b04f-d631-458d-bbdc-fe6a86ece37e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f935fad-98c1-4546-9901-88108a946e0e", "sighting_of_ref": "indicator--a8a1342e-9471-472b-ba8a-6e4fa317550e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393f109e-3158-4445-961c-c28af36e3470", "sighting_of_ref": "indicator--9dd90a95-3894-46cc-b3e7-5c3fd77ca5ba", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4283119b-5c29-445d-8a22-3cbbfcd019e2", "sighting_of_ref": "indicator--9dd90a95-3894-46cc-b3e7-5c3fd77ca5ba", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7fb8c9-d18a-4e3a-b6f5-52c6481fb335", "sighting_of_ref": "indicator--5acaa187-e214-405d-94ed-42069acf49e4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f42f9b-2f9d-487d-960b-c6a1a90418e0", "sighting_of_ref": "indicator--f8113865-90a7-4714-9127-af587a942203", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f38c4a-bc56-4fb1-a1f5-f3958627022a", "sighting_of_ref": "indicator--67681dcb-888f-45aa-925e-7d59e5ea4829", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93808374-58c1-4423-b49e-8f62c87fe695", "sighting_of_ref": "indicator--67681dcb-888f-45aa-925e-7d59e5ea4829", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9e3003-cdb3-42cc-ac3f-babf3a28f5d0", "sighting_of_ref": "indicator--dedbdf79-925f-4d83-b521-45c8fb1b817b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a93faee-8c23-4c1b-9f71-b5021e30ff8c", "sighting_of_ref": "indicator--dedbdf79-925f-4d83-b521-45c8fb1b817b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77ac55d-b89e-4cdf-a6f0-f952bcd66b70", "sighting_of_ref": "indicator--a75bc221-0cac-4d43-be4a-3d83ccc81ed1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddfbac7-dd69-4136-8c1b-1b7d193bdc02", "sighting_of_ref": "indicator--c3f9a621-f938-4ec5-8f78-207dafdad6fc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e832eb8-161d-440c-bbdd-1d86df103895", "sighting_of_ref": "indicator--143437fa-3f4b-4f0f-9ea8-8d521518ae8a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a795b05-7124-4902-b150-00d546a040f0", "sighting_of_ref": "indicator--143437fa-3f4b-4f0f-9ea8-8d521518ae8a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81979b83-d896-43c6-9dbb-1770d3e042a3", "sighting_of_ref": "indicator--d4aa5bf3-2c3f-4dc3-995c-baccc6c3695f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3540cb70-6997-4865-9584-5d4b1000cbc3", "sighting_of_ref": "indicator--1a7a8e42-67e2-416d-88e2-5c9d79e648ba", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b04eef0-7e5b-4974-ac04-56e5e4901bc1", "sighting_of_ref": "indicator--a960a7c6-928e-4e9d-9454-3496512e88ea", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4ef6f1-0e93-4b54-b416-e9f3d3333f0b", "sighting_of_ref": "indicator--85392065-866e-432b-8a50-46ae6537d098", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2697f36-b6d7-44ee-beb4-8cc99d0f97b6", "sighting_of_ref": "indicator--85392065-866e-432b-8a50-46ae6537d098", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013df2e3-1b6d-46bb-9277-0190f8d02209", "sighting_of_ref": "indicator--709beca6-fa46-4905-9806-f6d60591cf64", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557bda5b-7668-47b8-aafd-f3e1be81ce8e", "sighting_of_ref": "indicator--d293a9ea-a30e-4645-8f78-1709bf777a83", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fadf795-9f6a-4571-b05e-d405cf9ae1bf", "sighting_of_ref": "indicator--d293a9ea-a30e-4645-8f78-1709bf777a83", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd677c0-a1b7-4191-bcf2-a4124bfd4642", "sighting_of_ref": "indicator--a876369e-83f7-4e36-b0e8-e605c7dae17b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc33269-0dab-43c9-badb-75045b0f86f8", "sighting_of_ref": "indicator--950bcb87-3f68-4fbf-965c-da9d2052d476", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943c46de-36a5-4ead-86eb-51b58c32a003", "sighting_of_ref": "indicator--8564c3ca-84bd-4fde-b68a-b949dc2b5dd6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf7b95e-31de-434f-ab9a-6d2453c577d7", "sighting_of_ref": "indicator--8564c3ca-84bd-4fde-b68a-b949dc2b5dd6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5395428-ac7c-4eb9-8944-8a8ae2d340d4", "sighting_of_ref": "indicator--492b83b9-db01-470d-a262-9a2a00b92e1f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7dea9d6-1bed-4645-a7b1-4ef6d2a1638e", "sighting_of_ref": "indicator--6397f23f-b18d-4ebd-84e5-3283d6003c71", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb3baca-ea13-4088-ac87-6db5ac75e434", "sighting_of_ref": "indicator--6397f23f-b18d-4ebd-84e5-3283d6003c71", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab04050d-8dca-46ad-a4e8-7b0e4b678b57", "sighting_of_ref": "indicator--8ec74c8c-7c3e-4de0-a8f6-004d62f6ae8f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fe661a-9dfe-4838-94e1-3b8a8bec6fc7", "sighting_of_ref": "indicator--7d72a66f-c828-4c5c-887c-b094a3a54bdc", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b69c85-5118-4bb7-a686-bc4e7eb8b616", "sighting_of_ref": "indicator--7d72a66f-c828-4c5c-887c-b094a3a54bdc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332f9b83-1d02-43e6-a86b-5647c1a23717", "sighting_of_ref": "indicator--89e8da6d-8e7c-43d5-bd19-dc73a48d1a83", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c5dd90-e76e-46c7-bc2c-e594a21dec4a", "sighting_of_ref": "indicator--23efe016-fbfe-4ef3-8182-e082315bd17e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1beadf97-5b64-40e5-9852-9eb42bc9bbc1", "sighting_of_ref": "indicator--23efe016-fbfe-4ef3-8182-e082315bd17e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13126898-890b-48e4-8704-1b66dcbd2c51", "sighting_of_ref": "indicator--293639a5-8b2f-4904-8ad5-a3e7248f03dd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d183bf60-6a4b-4093-9dc8-886d1804e2c9", "sighting_of_ref": "indicator--b54990d3-1337-4aef-9478-7554a0d456fe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6667bd-06bb-4f4e-9201-a3d2dff58528", "sighting_of_ref": "indicator--5d09526e-2746-4e05-9db4-f54930757f80", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cafc555-344d-4e46-9fdc-3b6c7d277ba9", "sighting_of_ref": "indicator--da63fb9d-2014-4b7c-be6d-1eb196d16bf1", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfc03d3-bf30-4bb4-9a36-dacfe74aae5b", "sighting_of_ref": "indicator--da63fb9d-2014-4b7c-be6d-1eb196d16bf1", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d86fe2-16a5-4141-8c65-231479858be4", "sighting_of_ref": "indicator--1f0331ff-856b-44fc-9df1-e1c124384539", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af901443-bade-4878-8553-3556a4786880", "sighting_of_ref": "indicator--56cf5479-7f1f-4232-b241-177b45b7ced7", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8788aa9d-80e9-4581-a943-79c5ba3f3723", "sighting_of_ref": "indicator--56cf5479-7f1f-4232-b241-177b45b7ced7", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d6e896-7bc6-4cca-bdfc-aceffd27d9a0", "sighting_of_ref": "indicator--c05e5235-cb1e-46c0-b48f-9b439750e9a8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84a4511-3c57-4c89-bdac-6bc9d8dbc208", "sighting_of_ref": "indicator--b3226cdd-39c8-442f-8a2e-0a81098dd8bf", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55578010-fb58-4fc0-ac17-31866e621c10", "sighting_of_ref": "indicator--15f7c887-cfbd-42b3-96b6-9ca1d23257c8", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c152154d-f9b3-4b40-bd2a-42194b803e59", "sighting_of_ref": "indicator--09ffb862-515a-428a-8a82-b600d4253855", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870585a6-1296-40b3-8ca1-eefdcfbeb676", "sighting_of_ref": "indicator--4e9e4fd3-d019-4340-a2f3-69bb7ef61465", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9019615-4e24-4d32-9cc4-a53ff5f379bd", "sighting_of_ref": "indicator--4e9e4fd3-d019-4340-a2f3-69bb7ef61465", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08248c4-b071-4cd1-adca-52f8074f0821", "sighting_of_ref": "indicator--cdbeacd9-513e-44e7-b325-0647ed8aa6ce", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c1cb74-6803-45fa-a4a1-c724b7f84539", "sighting_of_ref": "indicator--5c61a89f-53f9-4cbb-b05a-e7dd95da4234", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1364421b-af82-476a-8a6f-a42dc2f447e0", "sighting_of_ref": "indicator--5c61a89f-53f9-4cbb-b05a-e7dd95da4234", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84c8980-6339-47bd-b871-f8595216c7bb", "sighting_of_ref": "indicator--caa73c4f-8448-429d-bd67-568bfcc73686", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f1a3e0-f2e8-4146-acb6-7270ea3848a0", "sighting_of_ref": "indicator--caa73c4f-8448-429d-bd67-568bfcc73686", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44608b18-cbb4-4705-a720-f4822f451a06", "sighting_of_ref": "indicator--2b05e16e-fc0a-475e-aa5e-cfbb7764827b", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcae7ad-e7a7-4fe7-a063-8ed735cd9fef", "sighting_of_ref": "indicator--ceb21687-d4e3-4d4c-a47f-e14af143429d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33eb5d81-807e-485c-bee6-b976058f9fd2", "sighting_of_ref": "indicator--68877b88-424b-4f92-801b-63938a8adc09", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd417c3-2a59-4e37-bfe5-0df78c3ce6e5", "sighting_of_ref": "indicator--68877b88-424b-4f92-801b-63938a8adc09", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e54c85-979d-4d20-a419-5efc9e3af038", "sighting_of_ref": "indicator--9ec3acc7-56c7-4928-b427-68b41017f24a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc91b1dc-5884-4da5-8246-de1c87e276fe", "sighting_of_ref": "indicator--9ec3acc7-56c7-4928-b427-68b41017f24a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1501f96-7cc5-414f-a306-03bd927d1c04", "sighting_of_ref": "indicator--756670f1-3076-4e11-a919-d088b6edefbd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a530433-8a26-4743-8460-612088a896e7", "sighting_of_ref": "indicator--756670f1-3076-4e11-a919-d088b6edefbd", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c88e712-23f5-4195-9cff-dc4cb2ada3e7", "sighting_of_ref": "indicator--f9ac02c6-d5b9-42cf-abec-e5a811f905d3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d47414-ef63-4f15-a034-21f2f73f0782", "sighting_of_ref": "indicator--b6172ce3-aee4-4814-b0c3-a2dac0ac5f30", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae85669-06f9-4a53-a827-99d7a6a33f78", "sighting_of_ref": "indicator--54b5cf7d-10d6-447b-b157-dae67b336b20", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23317dea-d8e2-439a-bf09-ec736f32ea64", "sighting_of_ref": "indicator--54b5cf7d-10d6-447b-b157-dae67b336b20", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb4fd80-df66-4db1-ad74-1a01c71a4cf1", "sighting_of_ref": "indicator--cc5dd373-9436-42df-a62a-fd998987b623", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aaf6698-1b8e-46cf-874e-10e5801d2283", "sighting_of_ref": "indicator--cc5dd373-9436-42df-a62a-fd998987b623", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e18b2a1-cb24-4817-9549-bcd80a278ba0", "sighting_of_ref": "indicator--9e987ac2-2789-4db4-b753-25cca5a12ff5", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcf8bfc-8e18-40b4-a5de-91a1182a3556", "sighting_of_ref": "indicator--acb8606d-9ab7-47ec-a79c-36f08e569797", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02815586-9720-49a4-98fc-4eee378eecac", "sighting_of_ref": "indicator--acb8606d-9ab7-47ec-a79c-36f08e569797", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72fe211-ab54-4372-ba14-cfd65cb8f6bb", "sighting_of_ref": "indicator--c3523404-7989-4902-868a-ca1d2a96375c", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c0ff67-2008-4a8f-befb-619b13cb1f55", "sighting_of_ref": "indicator--c3523404-7989-4902-868a-ca1d2a96375c", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585f5b19-4bfe-453e-81e9-1f78f136bbce", "sighting_of_ref": "indicator--0b1062a0-9603-48fe-ac70-76813a234b29", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c82da3b-1bb4-420c-b846-93751d18714c", "sighting_of_ref": "indicator--0b1062a0-9603-48fe-ac70-76813a234b29", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced023c8-0ad8-4ec2-973c-954b86be8e9a", "sighting_of_ref": "indicator--03fe6dcc-f349-4ee1-95f7-4c8e77f5556f", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c35911f-aa5a-4a2f-965c-11b174537add", "sighting_of_ref": "indicator--03fe6dcc-f349-4ee1-95f7-4c8e77f5556f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96ad3cc-b5c4-49f9-883e-094d84bbbe31", "sighting_of_ref": "indicator--3e68a5f2-4d81-4198-9b65-356c1953f0c6", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bb77e0-a936-4f88-a8e7-fcafd2d6a0e6", "sighting_of_ref": "indicator--3e68a5f2-4d81-4198-9b65-356c1953f0c6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225fa7f0-8c63-4cf3-b72e-95f35769d9d3", "sighting_of_ref": "indicator--0f280318-2268-4b4e-89ef-a3910ea3dd5e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bb9852-9ed0-45d2-a684-1c917d350b65", "sighting_of_ref": "indicator--36a26da2-2cb3-48e0-a01e-413f81e6ebb0", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e3dc9a-977c-4d6a-87b3-80949a8daff9", "sighting_of_ref": "indicator--5c6607ab-e87a-4977-8e4d-5d213b155be5", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907b5d75-2ce9-42f7-8a0e-72258f045647", "sighting_of_ref": "indicator--97a5a2eb-2488-4254-b144-0b41afa9b4d4", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ab34b6-f8c7-4fdb-abcf-c91b7a393440", "sighting_of_ref": "indicator--d2a8f8f7-c251-4f37-9ac6-e3ed73833a28", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ee3f6c-0140-4cdf-987d-a3739180171f", "sighting_of_ref": "indicator--d38b69dc-adc1-4fea-a6f3-f5f92df2d5be", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10cebab-6c22-40c2-83cd-86af0f98d216", "sighting_of_ref": "indicator--d38b69dc-adc1-4fea-a6f3-f5f92df2d5be", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2aaab93-a597-426c-9d5a-eddcabe03723", "sighting_of_ref": "indicator--5f1f05ee-93ee-4f03-8921-c406e541b756", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6e152c-6cf7-40ab-81c1-8b99d28101c8", "sighting_of_ref": "indicator--5f1f05ee-93ee-4f03-8921-c406e541b756", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea800b5-a71a-4140-a6cf-28cd9bd7525c", "sighting_of_ref": "indicator--6cd9f1e5-9be7-4464-a8bf-2924f3c430cb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fbeae4-a064-4c83-83cc-abd0d5e63416", "sighting_of_ref": "indicator--6cd9f1e5-9be7-4464-a8bf-2924f3c430cb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987c075a-4c5a-433a-a619-c7b61dba8115", "sighting_of_ref": "indicator--41eed438-b815-4f53-95ef-1b3d98cc23be", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8307565-5e4b-4a40-b72c-77912ad7fdf7", "sighting_of_ref": "indicator--41eed438-b815-4f53-95ef-1b3d98cc23be", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40f0d93-5106-4224-8a40-daede294709f", "sighting_of_ref": "indicator--52acae14-8577-4c69-bb0c-901bbd550627", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809925b0-ff88-43ff-92a9-c466a6c91cc7", "sighting_of_ref": "indicator--52acae14-8577-4c69-bb0c-901bbd550627", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a5b231-9efa-47fa-8f89-c229867ff71e", "sighting_of_ref": "indicator--77417390-4c89-4ab6-b85a-d65f132ede38", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb671f11-e11b-4197-b770-00cb5b46b02a", "sighting_of_ref": "indicator--77417390-4c89-4ab6-b85a-d65f132ede38", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a76d04b-5bca-430a-b5c5-25966ca8929d", "sighting_of_ref": "indicator--4867e3b4-66ec-4e6c-96f5-75c3fa4858a9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d2d594-ed70-4518-bb1b-e5a33b4e72cc", "sighting_of_ref": "indicator--4867e3b4-66ec-4e6c-96f5-75c3fa4858a9", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33a4cd1-2072-4c93-922a-7065f6bfec6a", "sighting_of_ref": "indicator--a03fe69c-5cfd-48ff-8259-f43b2c724385", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188482d9-2f7a-43f8-899d-1ad58983aaa2", "sighting_of_ref": "indicator--d279205b-7f44-4811-85ed-ac6ee3bd4ebd", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56141dd7-0eab-4ef0-9d39-e21a7fc3f596", "sighting_of_ref": "indicator--45ef304d-a189-4bfb-bb51-e4e18e7f4f0e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6968c5e1-cd62-4d72-aef8-c8fa51a4c0d0", "sighting_of_ref": "indicator--4424bc70-02ef-43d1-bb4c-92d45acceead", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a9c078-8d40-4026-a10f-5c46934602c4", "sighting_of_ref": "indicator--8c776110-4355-4117-8b3c-1d92cef027f6", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3b1d13-681d-450c-a72c-7336c3717f02", "sighting_of_ref": "indicator--05e963de-e0a8-49c4-9a04-f22fd0dcbadc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4a7679-a9a5-41bd-9668-12c2653e81ce", "sighting_of_ref": "indicator--6daddaca-2a55-4088-8f84-56c82f43fadc", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c9e276-9368-4d5a-af9a-7dbf1fbca311", "sighting_of_ref": "indicator--a3e9e0cd-4282-417b-9578-ceeb4c214517", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63df10b7-56f5-443a-96aa-e24d8fd54b80", "sighting_of_ref": "indicator--a3e9e0cd-4282-417b-9578-ceeb4c214517", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf64e20-0e06-492d-8bff-1c6fe4e57638", "sighting_of_ref": "indicator--b680b2bf-30ee-4b1a-8f2c-e78612567b49", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39cbc648-15eb-4758-9d9d-9f673208033b", "sighting_of_ref": "indicator--f8836ba2-11eb-442c-a6f0-e8ca7cc68979", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26643479-dfa7-415c-b0bd-7b40e1cd5c12", "sighting_of_ref": "indicator--41dd3512-f55c-478b-b012-17fa5cdb6806", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af27416-0d66-4668-bb61-53de208119cb", "sighting_of_ref": "indicator--9226fd6f-32ea-4350-899f-4e45e5b1494d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3375b9a-62f8-44f4-b413-c0c950840e60", "sighting_of_ref": "indicator--9226fd6f-32ea-4350-899f-4e45e5b1494d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf1c160-f45a-489e-a6ab-77cd7a54b0c3", "sighting_of_ref": "indicator--e6a781b5-1461-4808-a47b-a6e07f997fbe", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2bf995-5bd2-43fe-9e33-83fc3a0095fe", "sighting_of_ref": "indicator--e8a23113-8d9f-4ecd-b403-400fccd98d40", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d4acff-ab6c-4f00-9a42-6df07d5f7601", "sighting_of_ref": "indicator--2bc0fbd2-a3ed-4c8a-9902-9d7a0b72301f", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805d2b0f-ccf7-4438-ac82-09a1211aa755", "sighting_of_ref": "indicator--08a66f20-9c66-4534-bc3c-d400c8bbda80", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9148e03c-dbbb-473b-9ea4-5164cc09e91f", "sighting_of_ref": "indicator--6b06c0f8-29c6-4269-a3ea-4de0a2249e7b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3f5c1e-5362-4ac7-b671-2c95c694e828", "sighting_of_ref": "indicator--3e2f0fbf-b735-4d43-9f77-6ee2ec72398d", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773bc222-7a28-4e4c-9442-93be146cf39e", "sighting_of_ref": "indicator--3e2f0fbf-b735-4d43-9f77-6ee2ec72398d", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8276d8-f575-4504-b367-c6e1a19e669f", "sighting_of_ref": "indicator--24135bff-39f9-4f5e-819d-8c877db5818b", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472f4c27-9264-4400-980e-b454e2c6e868", "sighting_of_ref": "indicator--6c3b385c-e979-4bc0-b74b-fa2c21276dee", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80a75ef-57f6-4e66-94ed-91f0ccc6378c", "sighting_of_ref": "indicator--8dbe1bbe-67ba-4dfe-bd18-bd95b416219a", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6dde0ba-d7d8-40a4-afca-65c197df6305", "sighting_of_ref": "indicator--8dbe1bbe-67ba-4dfe-bd18-bd95b416219a", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aaef7d1-7da6-4ec3-a539-e2b86830fe1f", "sighting_of_ref": "indicator--11ba839b-9893-44fa-9a86-2fbe98f9f2fa", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e369304c-052e-4ecb-9e10-c6bf84b99374", "sighting_of_ref": "indicator--64096c6a-db54-42ee-8c26-2df768c03cf3", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad46773-5481-4c3e-a088-7720508e8da5", "sighting_of_ref": "indicator--3a51c561-283d-4bc3-b7ae-fdd95bb38b31", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e998e9c-227c-406f-9872-4655b9e8ddb0", "sighting_of_ref": "indicator--31310236-ba7c-414c-9e9a-fa45a5036a6e", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e407c3b-4352-4b12-85d2-f17b45f7db57", "sighting_of_ref": "indicator--31310236-ba7c-414c-9e9a-fa45a5036a6e", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1bb73f-7a06-4227-98e0-24c659d2dc49", "sighting_of_ref": "indicator--0ebb4f80-14c5-439b-9f63-e3d1af1a91fb", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96c9c3a-5bea-4127-ba9c-65ecea5f059a", "sighting_of_ref": "indicator--0ebb4f80-14c5-439b-9f63-e3d1af1a91fb", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19608def-7152-4daf-a49d-06fa798d4cad", "sighting_of_ref": "indicator--05bbb4bf-a686-4ee0-a7d0-e003889088c9", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921bdf3d-fd7d-482f-b7c4-09d0918a84c6", "sighting_of_ref": "indicator--d31dd6aa-416b-40d0-9f90-4e1bb4411ee8", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92b5c9e-013b-46c2-b2a2-6f94db565281", "sighting_of_ref": "indicator--c32c5af1-22b1-49b3-a637-82ddf091e253", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8c5150-1546-4314-94b0-54165a49b2f0", "sighting_of_ref": "indicator--c1ed6983-8df7-42e2-8ba6-d6d96f60ecc3", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2edfaa2-fc73-4787-91e8-2dbd1378207b", "sighting_of_ref": "indicator--2518032c-0b6a-42b7-956e-79a5f503c713", "where_sighted_refs": ["location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54025287-2423-473a-bdc1-3353d4058ed2", "sighting_of_ref": "indicator--f63ccc94-3ee5-46a8-b2c0-a4829c812563", "where_sighted_refs": ["location--a77a88e4-ad15-40f7-9a67-635abf48884b"], "first_seen": "2026-07-27T00:00:00.000Z", "last_seen": "2026-07-27T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--ff778c9e-7f95-49a9-a18e-e1554094d47d", "name": "Threat Report for 2026-07-27", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-07-28T11:00:06.258Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--a77a88e4-ad15-40f7-9a67-635abf48884b", "location--fe58a3f1-eb2b-4852-b9ba-3dc610b5342c", "infrastructure--1adab1a2-b8e9-4ed8-9f9e-11c105038416", "infrastructure--6fe0408e-1792-4d51-87b7-aee1b94a3c31", "infrastructure--b7a3389a-4962-4f89-9b1c-63b491a1fcee", "relationship--cebdf357-5b24-4958-b557-dbcaa5118f7b", "infrastructure--46db0cad-fe03-46db-b16d-bf22f5b773fb", "relationship--995cbd82-0d0a-4ae0-a3b3-ab14cbbf3560", "vulnerability--3c0008c4-2f55-4e69-9930-95caf3c0f026", "vulnerability--94e105c4-21ac-4da2-8708-f98b6fd14014", "vulnerability--661a1fc8-ba83-4ba4-b721-f04a6d928639", "vulnerability--1260f962-2d21-4bfc-8116-57f1f3b0d401", "vulnerability--60d89238-2ce2-4648-a0d6-a28ef3da185c", "vulnerability--4bcc5cbd-c961-436d-92c1-96e5cf95900d", "indicator--b541b941-c1b2-46e5-a986-42dffb013c99", "indicator--93c96ca8-cc78-4bfb-bafe-c6d9ebcf2a4e", "indicator--e0d1c420-634c-4f3f-bf20-4afcb4c954f6", "indicator--bfb3d9b6-e111-447c-8433-4de6d6424d45", "indicator--8a4bc40a-e475-4f3f-b0f7-83d5a303ea0e", "indicator--5a861122-6ec1-41e0-84b5-85cf21006e0b", "indicator--7014f065-9bfe-45c7-8a3b-fd08fccf49f5", "indicator--8775bd7f-a4e5-48cb-8a6b-98f1d61489d4", "indicator--92bc4645-8b97-42c8-afac-2aa9ea395124", "indicator--29e6dd04-9838-426c-bc1f-125f7f2271c9", "indicator--76ecf718-a3b3-4375-8ae3-6d2461cb905e", "indicator--64f9b851-f03a-4649-9202-497f10dc74ff", "indicator--918bc083-bec8-4fb3-91ae-272a40411635", "indicator--9a851c11-3cde-41f3-9ed8-ece74cfd1f6a", "indicator--837705cd-9e02-454c-a9e3-4f2051b4d25a", "indicator--3bad421e-d6e5-4505-b5af-8d4a9ec3893c", "indicator--f85fa151-d384-4bed-b844-112879186654", "indicator--c5eb3039-84e8-40a0-8a4e-7ab250de2933", "indicator--04fd4491-f0a8-4925-9f54-46a5941c258b", "indicator--f8dff279-f7d8-4232-b666-fc9b313a7042", "indicator--d29b2c13-4bfa-4da1-87ec-74b7583067d3", "indicator--698496fb-ceec-44fd-87f7-37924328c2ec", "indicator--d9e7771c-7305-4821-9211-3217b26971de", "indicator--e882da7d-bf05-46c1-8748-4699398b7722", "indicator--7c6f7eae-e741-43e9-b1db-83ac12513dd3", "indicator--e72d3af2-6295-4243-8909-4c40db7c2a70", "indicator--ae2fa087-62f6-406d-8647-3b9f450b2178", "indicator--73fa3228-0c27-457c-a4b7-ef48881cf727", "indicator--02231a21-e7c6-4b40-ac8e-ff832a7dbd0f", "indicator--99129d67-b578-40d9-96b1-2c9c0d5d2c6f", "indicator--0260cd4d-917e-447b-9086-fff63f849300", "indicator--d9458e17-9ac1-4b58-8817-32efc2d133ef", "indicator--212d3f22-7180-438c-b6cc-cc8cdbda9ca2", "indicator--764d3e0b-e45d-4c48-8408-0bc2ab47677f", "indicator--ac2ddcb1-d69d-42ee-94ea-aabcfdfb3b3a", "indicator--1718f333-f22d-45d3-b312-bfb2ae3ec651", "indicator--b8dfc87d-aa90-47bc-9919-8b6b5a3f40ef", "indicator--4625a54c-4689-43e2-900b-c41616f751cb", "indicator--b098abad-9485-4581-b921-1169fffbf398", "indicator--b8596c75-8ab1-449b-b009-6c14caab40c2", "indicator--7e99de8c-81a9-4576-9af3-c695d778ae54", "indicator--87b53ddf-26b8-4d3b-b53a-a4ddadb03a5d", "indicator--71a8974f-1e1b-4394-aef5-7fb74785ff88", "indicator--dc2b4fe9-b17e-4012-96f5-cc83c30f8157", "indicator--9ab3311b-64f6-4547-80e3-0a0c24f3bce7", "indicator--4440830e-1cf9-40c8-a71a-65621d1091f6", "indicator--28a4e19d-5eca-4817-b7b4-73a31bdc265d", "indicator--85cfdf84-adf4-44c4-8e2b-12e8411f34b8", "indicator--cefc9fdb-0f0a-4e29-80cb-bfb680817ca2", "indicator--e16d2d15-67ab-4c4c-bf5e-3f6f172d661a", "indicator--20ed8727-d8b7-48ac-967a-276dbce8b808", "indicator--dcc536b8-fd6f-4726-acce-21c67f1f7ba4", "indicator--d189a4e8-ff1f-4830-9282-f6a276d907ab", "indicator--385696a1-7701-4f2d-a1ae-42cdfa90dd30", "indicator--f793c51f-c52e-4fbf-9d48-439f10d2ca66", "indicator--896e9984-2e90-4d3b-89ae-d3f41abee4a2", "indicator--9990e234-cc15-413d-a316-2991fb94d844", "indicator--1598889f-d1f0-4f89-a3dc-7c1cb8e7c153", "indicator--580eac0c-5b18-45d8-8fa6-1e928963c8cd", "indicator--62e7e282-fc84-42a3-9740-08faef267354", "indicator--d3e0de24-b2c6-453a-8e81-12b6ed068971", "indicator--18a85f90-8ea3-4c2b-95a6-b5cfe448eb9a", "indicator--b3521dd7-5b99-4796-b623-68ff3c9c676b", "indicator--b0d4efae-9225-49e2-943a-04033979c61a", "indicator--567f2359-636d-421a-8d0d-f5d8284034b9", "indicator--ea35c9ba-3c2a-45d8-b62e-d0bffaeaebf3", "indicator--fda97673-3ee6-4825-8d6f-62b45db7b4f9", "indicator--3f18b222-2b8d-41c1-a70c-2c05d100a1f5", "indicator--bdd92e41-cb3f-4173-a101-301d8f1e52ec", "indicator--35076687-7d9a-47ff-9a01-2fa06a18d44f", "indicator--f4bff578-6ad7-4fc2-b547-d6feff208c2c", "indicator--211eb63b-26fa-4730-9a27-1aba3111fc56", "indicator--9fb7d313-87ee-4939-a986-709a5eac1b25", "indicator--dfda3f72-4cc6-45d6-9b51-be17cd3066df", "indicator--183079a3-9f94-4224-8515-1f58f824a4fc", "indicator--e0bd603d-50fc-44e0-94ae-7b4ef351bfb9", "indicator--c1f0bc09-d389-4db8-9541-332215b526ef", "indicator--01681b22-a328-459f-866f-d6098b914be3", "indicator--783f13c4-d22b-4c09-a27c-4a68bbaf6b61", "indicator--83edc27f-2b9e-4353-b474-5236f59ba42d", "indicator--6cd9d949-40a0-4ac0-a6fe-ad34befe0016", "indicator--b977b4ed-6be6-41d0-a3db-bd139b4ffde6", "indicator--a0fe5658-a3d4-4dee-81a7-77d5875f94ab", "indicator--e01bc18b-31cc-41a5-b6e5-b42dd68a6c43", "indicator--32a44420-1ea3-472f-ba26-561c28dcfe00", "indicator--7a51e5de-bb1e-4500-969c-6e10696e6ef4", "indicator--92bf8624-b330-4907-a8ca-c3b088580cdf", "indicator--ba8edad9-e257-4685-b9df-65bcf289080b", "indicator--72807dd6-a4f5-464e-98d7-add4ad4407a4", "indicator--66747ca2-7aa2-4241-a8c5-283cc60fa5e3", "indicator--909ac5e5-72f0-4ca4-af47-1bf1fa8d710b", "indicator--37d583d7-34de-4dff-b462-0b0de5a33d19", "indicator--c3c9f7b2-5428-4de3-8677-b353f7fbf9b9", "indicator--917b5205-8612-4e8a-bbe1-070c7909bc68", "indicator--f2a9d8f5-5358-4c18-91b3-d7801b9d778a", "indicator--1df3bb4c-4e72-4118-823a-b78dfac004ca", "indicator--c20a75bc-8543-4055-afc7-9348af5d7a3a", "indicator--1bc6873e-01e9-4145-bb96-f20712a834d6", "indicator--2941c23e-358c-4b49-a261-d2c19418c8eb", "indicator--5ace3be6-86d2-456e-8f3b-3a2cf59d6adb", "indicator--b1dedc70-da29-4684-abf4-d1d932205d7a", "indicator--c5326d36-131a-4cf5-9cbe-9c92438dd69f", "indicator--e77874e0-24ed-4145-b3fa-4c1e74fd6fcb", "indicator--50924215-5496-4277-b547-dcd04bf2c9e5", "indicator--58914373-adca-4157-a349-c1bd0b48c554", "indicator--fcede3d9-3b3b-4921-94f4-4c08b9d93f77", "indicator--8bec94d8-e21d-4547-a959-5050f8aeefd0", "indicator--5accd4d4-de17-441a-b9e1-71e3f3b64e72", "indicator--9df6fda9-0905-478a-b27e-6730d1bd95c7", "indicator--4a6796dd-43f6-42b9-9c9d-924a21cecb8a", "indicator--e0927913-6bce-4f87-aac6-37e289513054", "indicator--90555257-04ff-41db-8d93-3a8ea8393908", "indicator--cd40201c-f63f-4fc7-93fb-edba5e39d4aa", "indicator--ae6eef4e-dbc9-45db-a136-cb00083c1208", "indicator--3e3ee902-f045-4b4c-9ed2-b326226c4839", "indicator--efb8f69c-6cd7-4bff-b775-dba46ab8f318", "indicator--b5f13ab4-12d7-4d55-af98-a1e525129159", "indicator--5401d55d-33fc-4e44-9b9c-57773790f4cd", "indicator--bdb02d64-980a-4954-b2c9-3465ab36db8c", "indicator--f85d0159-cdea-4e75-85b7-1397ac5dc572", "indicator--62009e67-9ea2-4c46-ad30-8853f5fb2d2b", "indicator--3d304ea8-fd6c-4dee-bd2b-19a283914866", "indicator--ee076fa0-906e-4be2-9aac-ca5dd6637cee", "indicator--75a8b5a2-21d2-4b41-9429-5098bcbab9ab", "indicator--44c22e56-3781-45ac-bf24-1d44b3905245", "indicator--ed87c125-8d5d-4d82-a14b-a2475337553e", "indicator--1a61e969-5cf3-4199-90e4-eb0d4cc31a7c", "indicator--c2511e8c-980f-46c3-be80-d00aad80d2ab", "indicator--ad63111f-5060-4523-8c49-6d34a0ad3585", "indicator--090156cf-5cb0-4522-96dd-86ce739117c5", "indicator--6dd8e4f8-27bb-4261-a9af-4d8e9139ab43", "indicator--27463ca6-0fd9-4cb8-927c-9af930aff170", "indicator--de1eface-992e-484f-902f-3f73cddea9fc", "indicator--423bbf87-3d23-4366-9cf8-9009504fc7c7", "indicator--f208d331-aebb-46a0-88d4-454841417589", "indicator--064e368a-12d7-4bf7-ab17-bee38f3fbc22", "indicator--c87336fe-6fd6-480d-93fc-2c04ad5d8989", "indicator--2c38d735-3267-4fd8-9852-72493779d835", "indicator--443d794e-a11f-47eb-875d-b1118d205849", "indicator--adda2f0d-0bb4-40d6-9d88-a87ae62a7ab1", "indicator--14e98773-6493-42e0-a140-175a00eca4d6", "indicator--4bb307e8-872f-4fe0-ab21-00c316ea46fc", "indicator--9eefaa0d-2396-4904-b49d-6d8a964abbd6", "indicator--cb0ec241-a01f-4ac7-b1cd-34790bb0df18", "indicator--1f982f98-0caf-4199-85b8-b77d54368bab", "indicator--25edec5c-f9f3-4ce6-a2c5-0c3e5e2e18cf", "indicator--5c1161a8-5c19-4366-a962-a7055adf196f", "indicator--774fc7dd-d926-4c97-8ccd-5bcec991d5e7", "indicator--e994b530-5d40-4dd9-b240-a5fc393679e3", "indicator--5965d19f-28d9-4033-9937-f02adf8ef47b", "indicator--887c74f4-0f12-4eff-b4d5-e9ee2cf353cf", "indicator--88d93012-cc2c-4d80-9186-a5ed65ee128c", "indicator--cc6829b2-9596-4611-af33-a5687b23607d", "indicator--c7e2c60a-e5ed-4671-8b5e-8b31be7bc8e3", "indicator--8f97a466-d4a6-482f-923e-942bdb826153", "indicator--2ba0fcdb-909b-4fc2-a606-b0f41e68ec33", "indicator--6149b6d3-4067-43aa-993d-84294d9de94a", "indicator--6f7bd69e-4cc3-4449-a70c-3773cbe68fc2", "indicator--354445b8-077f-4f4c-87ca-f40d338c9102", "indicator--bf53f2c1-5874-4fa8-b1f6-d951c86415ae", "indicator--aafcce15-1b01-4cfd-911d-d7613dc4e239", "indicator--c8d7c4e6-f06d-4593-96f6-6f908f492969", "indicator--da50ffa5-3f98-45ff-adc2-ef0a295b5040", "indicator--20fc16a6-a1ef-4ed4-b64e-9e834eaad1d0", "indicator--33424006-838b-4720-8d21-b3f5d513a636", "indicator--5e1e4d74-5668-4d90-b20c-a8aea842da50", "indicator--06fe3bb7-b741-4d20-a5a4-67ff21309e69", "indicator--cc582782-c789-4bfb-b740-8dc35ce6a3f6", "indicator--0de89ae3-9403-4b12-9e28-e88ed986ce86", "indicator--469f79eb-ff42-416e-a13e-6028742d4609", "indicator--40ea7143-930c-4b92-9603-7f94a1af14ac", "indicator--5513f2d5-604e-4427-b8bb-0014b974b0fd", "indicator--f4a3476d-5187-4b86-a7be-0dab95101a9e", "indicator--14c41d47-eadc-40ad-9c85-5d08e60fb659", "indicator--e72fd8cd-02de-4d90-a8e7-2e0208bebe6e", "indicator--423b8b59-a97d-4528-9ecd-612747572bf3", "indicator--bd55e93d-2209-4d02-be79-81fda2470cf0", "indicator--6bc510ef-225c-4a30-99f2-535d45f2a9e4", "indicator--9204dc83-30c8-4611-996c-0508b8d16759", "indicator--484de4a8-cae2-4be2-ac71-0f1cccbde920", "indicator--d45837f4-0bbd-4373-adbc-36dd531fbc95", "indicator--6e11a94e-b8a4-4412-b424-662b6703574f", "indicator--692399f1-685f-410a-9fe8-2318ce64a57c", "indicator--091b04fe-7f8e-4c8d-8b35-f9a35c36c244", "indicator--183cf363-3a6a-4f70-aff5-66c35a0fa48e", "indicator--6b08eefb-ba47-4d83-bad1-b81f41943bf8", "indicator--312b025f-2318-46c6-b510-bb693edc0964", "indicator--4f9535b8-c344-4198-b15c-a63d84072bdc", "indicator--1c306e86-682e-4fcd-a5df-a8d255607e23", "indicator--e05a6851-3a2c-4052-a158-623bd5eaad71", "indicator--d573b693-ff7a-4664-b84b-bcdcd77cf449", "indicator--c45b3967-2d9a-44f7-a2bd-c297d59b4658", "indicator--b54c5e12-1e28-45bf-bb2d-fa60c2c44a91", "indicator--7d8ccf7a-0dab-44b9-8110-c88fbb42ef9d", "indicator--48f282a7-23b1-4241-aab7-7db00f25d8bc", "indicator--b6e89d45-0203-43cb-a599-f4e6e6e952e7", "indicator--808f5e1f-8a9e-41c6-b4cb-16313e14d3b0", "indicator--cce4dfaa-1def-4ade-8892-3124866eaf96", "indicator--8a63bc03-de07-46a0-bf93-a0becdf57501", "indicator--83a5a650-895d-4352-b00c-9601c94f8df6", "indicator--e7a97838-cb07-4132-84a7-95399735d814", "indicator--f7a3fd20-fe6e-42f4-a740-f35d8e3c4927", "indicator--ae5cf09f-3ee9-4726-92d8-3c1ed483947b", "indicator--63e13f06-ceaa-4f15-8e18-f6d30ec0bb22", "indicator--758b8247-c89b-4509-a803-fe67f47bd6f7", "indicator--cc3d5c8f-b421-44be-9712-11bb2d6b7598", "indicator--28d88d13-9036-4eaf-9630-0e549773e0ab", "indicator--53259498-076f-4013-8c9e-9a733dad9a1f", "indicator--05358b1e-c403-47f1-a674-9488078f01fd", "indicator--27100186-cf18-4c24-ab12-af89333856f4", "indicator--6a097eb4-9264-4eab-9055-2e124a8dc77f", "indicator--12dd67bd-2027-4316-8926-647d00c3d080", "indicator--28607aa0-f079-4199-9a68-1ec522942595", "indicator--78b9c77a-326a-4e71-8769-dc4bd9444116", "indicator--bb82e941-7bf0-4f8b-9881-b521470758b1", "indicator--ef775735-10ef-4b48-b00e-5ff2fb950d5c", "indicator--d59a2809-8883-46f3-909b-19558622687d", "indicator--a6db9531-375b-40e1-99f0-8b1e74706e56", "indicator--edfc4047-c5c7-4d44-b9d7-d2e52bd1562b", "indicator--a1d88df3-e438-45e2-9167-6e573465a95f", "indicator--81fcb39f-517a-452c-834c-5a255864128e", "indicator--58dc89bd-9af3-404d-bcb7-94df05bdd479", "indicator--05efb290-5908-415d-b562-fd54a77b9091", "indicator--f4cd4ac1-d6fd-4c2e-be34-acadb97a9ac6", "indicator--c91ad7e1-8643-4442-ac43-c828e9fa4349", "indicator--42393621-10bc-4842-852b-77a1a86b0883", "indicator--e736f9c7-54fd-450e-b5ab-d25effde11b0", "indicator--14468a45-ef19-4b30-b05e-f963ee64aa29", "indicator--50618ead-f4ca-4ee3-9cee-c39ab870c37e", "indicator--f2d8edca-28de-4ddf-9e3c-9ae6b9d1d757", "indicator--3a1aa905-1dca-419a-a277-bde3af3f7275", "indicator--052834c7-8df2-4157-990d-a5e5245934ae", "indicator--fd4d4f13-e255-4244-bd85-efdb110d8936", "indicator--6762ec16-08db-4c9c-9f1d-a0474d31a5b6", "indicator--246b76f8-f7ca-487f-9c50-fe7a07f776e2", "indicator--a3ca304d-343d-427f-8178-54cc53942dc6", "indicator--b7bfcc24-846d-4336-b058-e7804a04d278", "indicator--b10e5194-f7ca-4699-baba-6397aac43e0d", "indicator--f769f94e-9c38-40dd-8dfb-abcf849aec7e", "indicator--2a7f4a61-da8d-49db-beda-1e70c7763e7a", "indicator--df3b3fa0-5f8d-4509-9d1e-d52025c21816", "indicator--b28ad73a-3408-4ba4-a703-e48879d071f2", "indicator--f1f3a4f4-d9f8-4ca1-8e90-0fc55f8d21c6", "indicator--fcbc81db-d188-4d49-96d7-38fbf8b793b8", "indicator--a8f41deb-e644-4ab8-968f-664c0132d5a6", "indicator--89a68b16-5ee7-4451-9cc0-d6ec97e6e3c4", "indicator--6bb0aa8c-e0f8-467d-a4d2-d5b195490334", "indicator--c49232ee-d768-45ee-8cae-6164bbcd4221", "indicator--a96feda9-42c7-4cc3-b826-afcfb5c249f3", "indicator--20a69df4-9891-498a-90c7-71d27ce253c8", "indicator--28cf3ea6-d0e6-4f50-9fce-f5f4bdc9b466", "indicator--16cc320c-05d0-4d2e-8af5-3b3063d52b33", "indicator--2549f0d0-f484-4823-9220-5ad58a449fbc", "indicator--ec378ce4-a090-499b-816a-091bd27430eb", "indicator--69b15c46-0100-4678-a0e7-1217f9092913", "indicator--f4baa025-d45c-484f-9310-fbdad825d4e3", "indicator--a8f825ec-0b3d-4e65-b16c-7c02c7d1feac", "indicator--af1f21f8-e276-47cf-bc91-59ac2e052956", "indicator--b02e2edb-c4e4-4dfa-a6ad-23364c06efb8", "indicator--939d3582-93cb-4c75-859a-a9e303405544", "indicator--d303470c-dac4-4416-815f-6ec2a0f07de8", "indicator--704e8a2f-1bc8-421c-813d-b81e6aebd80f", "indicator--689755c1-bf8d-4ac5-bf3e-551d6f944eaf", "indicator--e3fd8517-8dd9-4e54-a4c9-9ff6e7eda325", "indicator--b3423138-cb72-46b7-b659-0a6a05d27607", "indicator--7cbccf7e-762c-40d6-9551-6a6e2f0c29f7", "indicator--192d306d-cf30-4697-83ee-e3fc5e4f6243", "indicator--35f782c7-a529-4234-a7d9-7c1397eae5ae", "indicator--3f547851-74c8-4a10-9c2a-dad017727c7f", "indicator--26c44819-d09e-45f3-b70e-1d6f8ce81ef4", "indicator--11dc34d0-3ca4-49ec-9b7c-adae0bc3f6b9", "indicator--5e321569-69dc-492f-a476-b38d494f5ab6", "indicator--160731a8-ecde-4647-afb7-b0ffbb32999b", "indicator--916f9796-6da8-476e-8ebe-51928d7e385c", "indicator--290c2ca5-4a0a-4a78-be75-1d52c12d7464", "indicator--7a037a74-91c4-4e55-a60e-d61d0a9ff5f4", "indicator--365649ea-373c-47b6-9268-9204c63a67a0", "indicator--a875f50d-8b7e-4b10-bb85-4721bd3e8a73", "indicator--51ab57fe-083d-4e97-bbfc-f4a1c9cfb0a2", "indicator--205e6329-ae2e-4d5a-a996-22eef07c9a84", "indicator--5af2e918-8de3-425f-8586-97923e96fa90", "indicator--036ab024-3359-4de5-9795-d4cfa5418e93", "indicator--d77bb868-c29c-43f9-93ee-f89e30f4f233", "indicator--5d4dea79-e5ad-4805-ada5-37fb5446ee09", "indicator--4c0e4e1b-fa27-498c-9e26-9fb308bf09dc", "indicator--78078fb9-fbf3-4323-91cf-2118ab6487ec", "indicator--c768b7df-1ae2-41e1-84d9-a4ba1a49c1bc", "indicator--8751509c-3890-46da-9b70-76c55f59fa51", "indicator--2292d9a5-c082-48e8-a1e1-e860bb6146c1", "indicator--37340a10-9445-4916-aaa4-2a0b35d3a0ed", "indicator--c4820a00-6da7-4097-8d9d-120eec04bb92", "indicator--5538b8ea-d1ee-477a-ba74-2bfc8d7290a9", "indicator--77739b8c-cf82-409f-9291-a4629ec90ab4", "indicator--d928ff0a-2745-433b-9a32-108567eb850a", "indicator--a2e68739-0402-4d6e-82e2-664c86f3bf67", "indicator--07aa9837-5468-4a87-b04c-6dfe143f1d0e", "indicator--a43417cf-ff95-48b8-947a-8d05ce6d4979", "indicator--e19347ce-366b-434c-b5f9-f61bcde5875f", "indicator--d278a2a1-bc09-420f-bbb5-f630b1cafd9e", "indicator--1a1612c4-42f9-4c95-a62c-3d6252c7ad8c", "indicator--c746cc98-b91f-45f7-900d-8edbcdccb664", "indicator--a5bb7115-8e1d-4989-b4f0-de758129543d", "indicator--fe0453c4-e3fc-4588-8e49-8e846dd7202e", "indicator--d1846106-6186-45cc-85e2-6b80af7b750d", "indicator--e415caf0-ebb9-4135-a2d1-2b0b2fe11e23", "indicator--7c282871-b8da-464b-a569-0a41fb97a17a", "indicator--796f8135-e1f9-4984-8df2-5aeca5380021", "indicator--e0cda271-d1f1-429b-aa5f-a3dd670aff45", "indicator--e0bf77c2-4796-4bcd-a835-2e46c46e37d3", "indicator--3748d1fb-2eea-4296-96a6-a70a6e4ea4fc", "indicator--e00769c0-041a-4ef8-8c61-6ab637382e31", "indicator--084d070c-48aa-4538-9132-f98be00e4d1b", "indicator--84dda71a-ea45-493b-98df-76e9719c38a4", "indicator--6e3ec84d-434a-41fa-ac37-d2cb60dae023", "indicator--34f92a82-18be-491f-afb2-91278925bfc6", "indicator--dfc79a5f-5977-400d-82c5-ac574197149a", "indicator--97688f0d-e4cc-40a9-92ad-8c1d87f177ff", "indicator--655f8eb4-1f0a-442b-b734-1a3d3fd5ca7a", "indicator--f6670322-4985-45e9-b5f3-f91a434a6982", "indicator--196b75fe-0d67-455d-b495-32d5cdeb2fdf", "indicator--f6adcdd9-9247-4446-a55d-caa19b3436e5", "indicator--ab9aa122-c222-487f-a43f-4746d37b32fd", "indicator--77181dfc-9b6a-4569-83f5-9e00d7a5d0c1", "indicator--a1988270-10a7-4f4d-96a4-3aa69f1153d8", "indicator--ef0deb69-3f91-4481-a78a-663fe8046941", "indicator--9fb9b21a-77e4-40e3-8328-233325b3c866", "indicator--c46d0684-aded-4eeb-b347-8de9f0bdad8b", "indicator--2c6929f5-a619-4135-b661-daf341aaff8a", "indicator--524cfa56-f4ee-4856-8fe6-55c2f26fcd62", "indicator--94f35e74-fc89-4ce9-af31-8871eca386b1", "indicator--19d734f2-6cbd-460e-a602-352b35b9226d", "indicator--84763179-a4a2-4c94-be30-0ab169325f68", "indicator--d61a6ca5-880a-4c14-8299-8366eac22431", "indicator--4abdb2d2-dcfe-40d4-8b80-0747050be45e", "indicator--082d4b3c-c5ee-4ebf-ac9d-9cc99ea44a8d", "indicator--e8bca0c9-10b2-41fb-be8d-70d112b8be28", "indicator--e546764c-0de1-429b-a3b7-13559517c612", "indicator--0e3e2623-1c8f-4123-945b-8b94f7f7df1e", "indicator--66617443-d010-4377-9e80-95292541de37", "indicator--12b81bd3-816b-40f7-9579-a7cc724c6780", "indicator--6e53304d-6bc8-48d4-867e-41fe0d088784", "indicator--6c8e58c7-a6c7-461e-93f6-3349812ec9fe", "indicator--7db3cbc9-773a-474b-9f12-a3a5e0e3adaa", "indicator--d4afdd2a-fa43-498b-915c-1dd4375724e6", "indicator--3895c8d3-c204-46e9-b45e-968bd69dc29d", "indicator--fe0123f2-64a5-49f4-9a53-fbb41c7bdc3a", "indicator--f746eeea-332b-47a6-a6fe-3a09933502ff", "indicator--a754d094-771c-40a8-ad09-3d4c6a8de281", "indicator--5f085cfc-6705-406a-a85b-bf70fc3e4c9f", "indicator--c7afc9fa-df06-4646-bd78-ee99dc47940d", "indicator--831d6152-4cba-4974-b31a-f2a72e0602a3", "indicator--eec2b1aa-0c61-43da-b23f-be35f8b4f719", "indicator--55f52f92-ad43-4c8e-b31e-2402e86ab44a", "indicator--d4117e0d-1e88-4ce5-8437-e71efdbb5895", "indicator--4ef837c7-4544-4727-ae9f-e5cba059c8cd", "indicator--625da8a9-99dc-45df-8ebf-5c00ebb2d3a2", "indicator--adfd1baa-9a54-46ef-9a7e-97e1ad2509ab", "indicator--03dd96b2-3a2a-4962-9ffc-14161f9ea2ca", "indicator--8b76955b-fe97-4dfc-b13f-f9c822d963a7", "indicator--e8f1a12b-026b-49a4-8923-984572377598", "indicator--db338a4a-2607-4e75-8de2-ff99057831ce", "indicator--8b4489b2-9388-418c-b991-34c3bfaa556f", "indicator--3d6d9e55-7ea0-4a65-a1fc-d5ff3c7a980b", "indicator--c8efaef6-8a72-41d1-b410-01f65946cafe", "indicator--ef324ad4-ea58-431a-b7a9-b9a2475d6947", "indicator--6ac28158-c328-44ee-a031-08bde7cf7520", "indicator--a8bc8304-8c43-4d15-8fe9-c205004a37ec", "indicator--6dbab0f6-2815-45ae-934a-311643bd63d2", "indicator--7925e855-4e0b-4ff9-8a3e-8d69593bf057", "indicator--6cfa7cb4-9259-44f9-8974-9ba0e0fcec9d", "indicator--4b0d6dab-9230-483e-860c-0d8c94001c15", "indicator--38c7af1e-3598-4c29-906c-346551f66d95", "indicator--5bb17125-356a-4ba2-af87-3bd367d1e6ef", "indicator--8acaf31c-00b4-4acb-aa3e-b47d46263e95", "indicator--49530ad6-4411-49e0-9eeb-d53e9d1372d7", "indicator--78231395-2f0c-4640-aec7-a869e99e1dff", "indicator--5f7eefa5-0a58-477c-b564-f68bbb12abf5", "indicator--a028ae36-14e7-475e-80be-918a43300a1f", "indicator--1b75b500-fe7b-47f0-a920-14af52e70dd5", "indicator--9ac7c0a6-0c98-4464-8fee-a207bf3c0f36", "indicator--ccbb1767-af0a-44c9-a88c-d8c65904442b", "indicator--5af4c8b0-025f-4c96-9375-d00102bea18e", "indicator--c90c1105-9380-4c70-97cf-33498acd31ab", "indicator--bfc1f784-3d87-425b-9d4f-5896635d1ec5", "indicator--7e9b79e9-6be3-4db8-9a33-a686a84726c4", "indicator--e344dd22-e122-4be8-a80b-324344b52f6f", "indicator--bf328398-7ce8-4005-9e58-93bed51542d7", "indicator--04dd33f2-3a8c-4d3e-b48b-0da319512898", "indicator--447f03ae-3fa0-4dbc-ab05-cf0cceec41b1", "indicator--afac88ef-def5-4cc8-a252-e42d236c24ad", "indicator--1f41f97b-95e5-4b96-a2dd-18b46b8ef149", "indicator--b7e1a306-8fe9-4c67-aecb-5ff59b146fd7", "indicator--8c863924-980d-491d-9df9-0d8fde549b8b", "indicator--a506d113-5302-4aec-b881-34ead76155cc", "indicator--44a47d8e-49f7-4d14-a2ed-33158b13d18e", "indicator--5b155a84-24ea-49b4-bbbc-871db26e5e22", "indicator--573c516a-5829-46ab-9857-1df88441f945", "indicator--005a3210-66bb-42e5-93e6-da692974c7a7", "indicator--28aed573-151d-4b8a-bcfc-52bd7cd5aa47", "indicator--ad880ff8-f8f9-4e75-9683-944e71f4485a", "indicator--0f571245-6e33-4108-8733-97a9cc6f7c8a", "indicator--04645f13-73ea-476d-926e-c6f50ec86252", "indicator--b3a8f6eb-c6d1-402b-9197-3ac3b49ffdc3", "indicator--1229ebb8-835d-4dc0-b3b2-d78ad761f4dc", "indicator--9f4970d6-94f7-4019-839a-909ae9592382", "indicator--2dad7687-f8d3-4504-a8de-9ef7877b5dd5", "indicator--d0e4607d-c9a6-4366-8c30-a84697ca57b0", "indicator--501e60db-abcd-4594-afe9-c76dadbb96d9", "indicator--196c696e-b6af-44bc-bc22-f6bf7b290816", "indicator--557ee73e-c1a9-4747-8c21-74918bcaf4db", "indicator--41d6c3e8-9ad7-4e7c-a1c4-e3f0ff0612a7", "indicator--d6ceb650-b829-4daf-9ae2-753921b103d8", "indicator--6598d5ec-090a-4935-94d1-3f00b7191687", "indicator--6223c47d-6e83-4594-84ab-390d28cd6665", "indicator--f13db158-c71f-4a90-b03a-b15813d3f8be", "indicator--fa45324b-61ac-48c6-801f-92e6d93ced5b", "indicator--5e4616b0-e166-4602-84d4-3f7ea3c06865", "indicator--23361811-3c66-4b51-b63a-7a083323ca55", "indicator--207467d7-1754-49b1-9133-bcc04f2ad2cb", "indicator--c092e7fa-f0f7-43df-b679-b17c1ee0e7fb", "indicator--5c49d4a7-9522-4e81-a7e5-42def64768c2", "indicator--7a1d7cc2-42c0-4c8e-9f7b-5ce081f56bb0", "indicator--ebd0d525-c4c8-431f-b0d5-8876c3e077b6", "indicator--cdd6fe47-6a9e-407b-ab47-c0f1de1d4deb", "indicator--7b47aee5-6c38-4b46-9f7c-3d7ff841e59e", "indicator--afbf77db-afff-4bae-b5ec-277dc59d14af", "indicator--8e822fa4-3201-41cf-8af0-421ffc6acf18", "indicator--0917ea27-2c6d-423d-8dcd-4c4223bcea99", "indicator--f1160372-4ac7-4596-aa97-3d957a4c63bb", "indicator--1666b711-28ed-4230-87ad-291aa19b0c33", "indicator--d19890e6-03d9-43c3-802f-65bc3aad433c", "indicator--1c8949eb-b08e-4a50-ab9c-57e635784aec", "indicator--8b528747-1134-4a38-87e1-bb3df90c631b", "indicator--1c33044f-c417-451b-b7b7-882141913b96", "indicator--394210a3-8850-462f-a61e-e0f9f1603c1f", "indicator--5dd55175-91f9-431d-8ba9-4bcd804cd8c1", "indicator--42ca21d7-d74d-4e4b-bf41-993c4fa5cca2", "indicator--8c4ed957-d63f-46c6-b19f-e64198c0b64e", "indicator--ba7771fe-32a2-46f3-b54a-422206bf37d0", "indicator--8f61e4ed-0d20-4bdf-b0db-81c3194c7f9f", "indicator--88ae19dc-9010-44ab-bc52-6b856434e63c", "indicator--ad257c58-ab02-4388-be28-aac922cf4765", "indicator--6f1e00e3-951e-415d-8211-037aa47735d1", "indicator--ddd369ce-1eb7-4da0-aad7-504d43892fb0", "indicator--4b52cf05-e69b-4103-aec9-e9b1f0566724", "indicator--2c76ecfb-cb33-4bd3-a521-df8a51454c68", "indicator--c166d645-f2de-4a78-ae48-51f198947af5", "indicator--74287ddb-f513-4291-a946-9afb8c5451c9", "indicator--9d3775a4-bcdc-452f-b91c-9b8175860fe3", "indicator--dec9b7f5-9868-4d57-8751-62a49173a32d", "indicator--97f124ab-d895-4fbb-aba5-394160610a09", "indicator--88993cc5-c305-4621-8251-18d765c5965a", "indicator--eb0711d2-1dac-42d5-98d9-0071d97eec83", "indicator--eefa61b6-8acf-44aa-bdcc-e6f37a531aac", "indicator--de8cca53-3f05-4da0-915c-9c04a7c027be", "indicator--0155633a-4499-429f-b2b8-b524ecbdb016", "indicator--f91ef8f4-b4cb-482d-ad76-f06d26cac843", "indicator--0887c527-b727-43dd-b7ce-e1042fec527a", "indicator--b5e05708-bea2-4686-865b-d5d4b2799690", "indicator--1eb9a2d1-ebd3-45a0-8d64-f9cd655e8bb6", "indicator--1a4578d8-e4cb-4b3e-87ed-cb37060a0afc", "indicator--e1d8641c-6286-421f-b62c-a5e4c07744bc", "indicator--68c9bb89-f7b8-42bd-9700-91c4d54edac7", "indicator--96e50b96-68c5-4101-b6a6-b6e96d5b2093", "indicator--9eeb5799-481a-4847-a4a8-6bf2370ff625", "indicator--4cf43fcb-2836-4437-a236-145186a63e27", "indicator--9f090c66-6733-4ba5-a1dd-e9388045667b", "indicator--ede68320-4dcc-48ee-8247-34ac2dc28f6b", "indicator--ae793411-4b08-4a1a-b4d3-e6e956c7a8e3", "indicator--eca3a74c-5dfe-4ac3-b119-e6e21ee0f5b0", "indicator--91ca4cb2-864d-4563-8d22-9650f03f6ca9", "indicator--0ad8ac4c-5f86-49f4-b0cd-9360906259d3", "indicator--d602333a-cfc9-470a-9565-2e18a28283fb", "indicator--65ee5e23-f4d0-48d7-9fc6-10276de8c748", "indicator--fc4681ad-b76c-4692-965c-bb06bd238b90", "indicator--e500e209-320b-449f-bbd3-681047bd3de2", "indicator--d3d5260b-22b9-4056-acce-546464d79217", "indicator--ecbdd549-ba28-4329-9143-c5d90dcad79e", "indicator--ac6815ca-835c-4946-a7f2-b57453400b2f", "indicator--7eb401e1-083a-4772-9ede-0c6de4048360", "indicator--75f67a0d-f7b2-42e6-b319-fd009830d917", "indicator--1ffbc0a4-20b9-4bc4-be44-68b07188faed", "indicator--14507243-d630-4e05-8533-464507e6b49a", "indicator--b12155f7-848c-42f9-b896-dcb0b70bb897", "indicator--d0704221-dcca-4138-88c5-cc348d93d883", "indicator--d8f03f8c-d4ec-43e6-a820-5b0e11511d81", "indicator--affe73df-65e6-4440-ad0f-88daa79dacaa", "indicator--9dec01d9-88fc-4ebf-ba53-9ba5d6d2053f", "indicator--e21bce5b-6a02-4510-bcc5-4e6667b09848", "indicator--49c46d2e-a8af-4aa4-afe8-e03a42040b98", "indicator--cb1c4b00-a740-4b65-ab17-e4479861ec6f", "indicator--37a13f3e-228b-48ec-bda3-3fd86fcd609d", "indicator--eb700a8e-bc8b-474e-90b3-4ba053137d8d", "indicator--c68ab57d-08e9-4146-b0ab-4d187afb4ccf", "indicator--1c47cafa-4721-4ac7-9133-576694db7144", "indicator--ea1fa632-4494-47b6-b4b8-8cd1bb3fe67f", "indicator--d6d86eb4-5ff7-412f-bff9-70b1f98cd48e", "indicator--c6bc8ff7-8f57-4367-80d2-77ac1dfdd3d6", "indicator--62424719-6884-4aff-8beb-26088e001f1e", "indicator--35d512ac-1129-4d42-b550-2c4b7c72ccea", "indicator--e4f8b7eb-7ef2-455b-bd31-9c26da5216ba", "indicator--5e964151-61d6-4b99-bc57-a36b31782192", "indicator--3b0df5e4-91e8-43bc-80be-31d60add49e9", "indicator--4d827748-5fd0-4429-b488-979ff731265e", "indicator--0dee6a13-f539-4c65-b282-81cd2f2ec01d", "indicator--f5182fe7-22fb-4f1d-b6a1-fba3d9ab67d8", "indicator--a9358aef-b2ff-4373-84ea-cc4e695408c9", "indicator--b202a4e7-7fce-4791-8e69-388c3b58c245", "indicator--2e5ab560-de43-4db6-a8e7-4ac5dbc112fe", "indicator--f55e2dc7-dc6e-447b-907a-82d88461d15f", "indicator--745f82ff-bb6d-441e-88d5-aba76c733eba", "indicator--7b6f0824-5f6f-460e-a8d8-568b80f41f19", "indicator--65175248-9359-4233-8dc3-1812f5e4eaa4", "indicator--48e415fe-3a1b-4025-9a66-4f006ba4d3ab", "indicator--02b918d2-3fc5-4b17-b070-ca1065813ac4", "indicator--3f5e60a5-7791-4cfe-9f95-b21b8455d14f", "indicator--c70e78a5-87b4-4930-860a-4eb8ee2c3588", "indicator--72f73b1f-2c83-4aef-b931-ebecf581a0cc", "indicator--d3fcba96-5ca6-4778-a5d4-f6cb83841614", "indicator--2e136919-b54a-4011-ae46-4483543c0042", "indicator--8a5bb069-4458-43e3-b176-a085993b3b7c", "indicator--b13b80cb-0fe4-4af1-bff6-8869dfd7e11d", "indicator--c2eb80ab-12d6-4b6f-ab77-0c82e75d0158", "indicator--198ed53a-b9e1-4ae1-a61d-61e106bbc7d9", "indicator--83161e2d-93fa-43be-b48b-9d8aa9757a90", "indicator--d2e6b2ad-d64e-4a12-b705-47c9d6bb4a23", "indicator--f2b8a8a1-be79-4c6d-95f3-3d983dc9b1f9", "indicator--4f5f3a0c-0ccf-43ab-baa9-b2a24b5fb869", "indicator--2ef2c693-434c-405b-9e87-6a0f91fc97f2", "indicator--2423cf84-9824-4523-8504-0b85745168ac", "indicator--e37d8d8d-3959-4c1a-9759-c94ff91e4bce", "indicator--66deb95f-5c0f-46cc-a7e6-14d6b86877dd", "indicator--bbfa76ed-5858-4cf0-9b02-2d58236a230c", "indicator--182a4e50-f97e-4c14-996a-0dbef5bbd89c", "indicator--7df326d6-925d-442d-85d1-44694bd1243c", "indicator--757c6f9e-332f-415c-b361-6b6bf5ae4915", "indicator--c84f4675-cc99-4d82-ad5f-8d49e1eb335b", "indicator--a59a7f74-d635-4c53-b176-1c2ce62a039d", "indicator--10542245-a714-47b2-8c25-bf0ad9fd9811", "indicator--6701732f-0fc8-4bb2-b60f-2eec79a6215f", "indicator--35fb42fd-6955-429c-b2ff-5b882c7736cf", "indicator--3317f070-1966-4f67-a773-41b5b5ffb6d0", "indicator--772fcc8f-efd4-4125-9444-bf1fe0081913", "indicator--59be05a6-4db4-48ec-b2a4-03bcda9a45ae", "indicator--34d574af-0adb-4ff6-add1-f67f2ddca974", "indicator--a7da3221-8dba-4e6f-8e75-a54a18b72c86", "indicator--180716fa-8eb3-4497-a0f0-a148f1b36cd5", "indicator--934f73a8-946e-45da-849e-8272080cf983", "indicator--a693d982-1b38-43d5-8e97-f1107ca6cc74", "indicator--2289ac6a-97c2-4c4c-b95c-a839d105e17c", "indicator--6c7b74c7-71fb-44b3-bf5e-15d4370c293f", "indicator--f7503fce-d71c-4594-9d8c-fb47aaae6e24", "indicator--01b91f5d-58a8-417b-8fab-9c5631fcdf7f", "indicator--1d274481-588c-4ea8-b713-1c75d23eda11", "indicator--b38dc1c4-385c-4691-88a4-2a35513a4210", "indicator--e2e96220-b435-4b6d-adf9-bb58baba3a78", "indicator--7dcc36a3-2be0-4947-8d4f-236083cc2841", "indicator--3aa0cb93-5345-48c7-8178-fa9793c76b15", "indicator--89a7ce7c-279b-4136-bc1a-ae2df9175aa4", "indicator--c8815332-c663-441a-a0bc-05a84fe4c857", "indicator--dd4a1025-9af8-467e-843d-ebf39ff64f87", "indicator--e81eb3c8-1bee-428e-b7c3-5bd613a92c7f", "indicator--ad244a03-2d8f-40c6-bec7-703eadf949b6", "indicator--d96bad9b-52fd-4860-a4f4-b4f53b335859", "indicator--c4d9121d-f8e1-43c6-927b-415ea6393ce6", "indicator--26ec6967-58da-43a7-b113-c99b9576bdea", "indicator--e94767f4-0f1f-46cf-8128-7d5ca0d652d5", "indicator--7dd93449-a1f7-401e-b25b-8b9ced8e2b2c", "indicator--aa194e67-81b2-480c-bf7f-1b523389e5ea", "indicator--10ab6e8d-9924-475c-ba23-da79fd7c673e", "indicator--58dc2f70-9729-4945-9b20-be9dc6df8abf", "indicator--fc3cb8d3-0aa6-4ca6-b347-ec27534c42c6", "indicator--b4c69c3b-da3a-47d4-94e3-c1bdc19c5170", "indicator--f766db96-6501-4ee9-a12b-130217a35818", "indicator--7c079b36-cd06-4ea3-8c88-c00660784505", "indicator--c418c075-200e-40ea-b272-1d47d6eb5b4a", "indicator--5ea05c4f-83d2-450e-ac0b-fa4c37bebeb5", "indicator--3e925e5d-9251-4b14-bda4-10d0c7174768", "indicator--37901ec5-de2b-4bf6-9b13-a843fd90dad2", "indicator--4f241609-326d-48c3-8bcd-eedab9bad354", "indicator--2653e6d0-2940-4028-82c4-471995ea2b3d", "indicator--af173af4-68ef-400c-a198-8ad7163ad665", "indicator--3fb1fe49-2619-4d61-8b7b-ca99d9b298dd", "indicator--aebd712b-bec6-4d5a-b319-3ced4699ca79", "indicator--f543d9b1-575f-4e24-8b8e-45579d1c6c32", "indicator--1ad95b3c-689c-479b-a19f-576ad683d008", "indicator--4e558ce4-2677-4bcf-b822-fbf03e401d20", "indicator--8e5c1861-ae7f-4fd7-82ce-ce5b1270efd2", "indicator--39ad543b-5a2c-4b00-81fa-bc69f440cd9f", "indicator--485caa5c-f74e-4046-b3d8-98201db7b7fc", "indicator--9a1d964a-971c-45a1-808f-9d7051239273", "indicator--10f11859-d191-446e-8095-c32e8cb93bd9", "indicator--0b8ad7ca-cc98-4c0a-9b85-2aee91a6ea2d", "indicator--ca2d000c-df04-485c-8af7-aa132fe17e08", "indicator--becd46c8-3b55-499b-9a3a-f371ac1cae8c", "indicator--49d2c3d1-a618-4c78-8e94-108725b69974", "indicator--858adc76-c637-4623-8438-debf2754c57d", "indicator--39327f17-438e-49e2-b772-26fb246f9674", "indicator--e28907fe-b3e4-475e-a2b4-38f2ca40db91", "indicator--3b057c90-064f-4b40-80de-de9fd35f2cfc", "indicator--0c3c6232-03ed-4bf6-867e-1a6a83ddba16", "indicator--d097f1ee-ee56-4cc2-8dfb-dfbe18b58034", "indicator--1768daa0-089d-40b3-b260-6f2c67cd55b6", "indicator--76114e5e-7730-471d-851a-17ac1319920e", "indicator--6297ed08-d169-412c-bb7a-ae92a29925d8", "indicator--327b548e-c434-4c8c-a89b-0a824e370852", "indicator--c7cc0b05-9563-483c-ae83-89704c4857e2", "indicator--fbb317c0-f096-4815-a383-389105efba06", "indicator--bdea250c-0653-45c6-aaad-b6bf885b9bb1", "indicator--79e21cfe-bbcd-4124-a5f6-b6a911d1a801", "indicator--0869b3fb-5fcd-403e-ad91-6b6f57c581cc", "indicator--c5acce34-9f62-46e2-ad45-c55d759dfada", "indicator--d0f88af9-d2eb-482f-a6ad-10f76b88142c", "indicator--688da567-d008-4c27-99e1-7607cd7d9623", "indicator--248a57d1-6057-4799-824c-c09e9a1dec3e", "indicator--2255034b-b531-4f59-86c5-1f121e7873ac", "indicator--155d41b6-c845-44d4-abe4-555d8ef5e404", "indicator--bb262a40-306a-4de3-bfd5-8f37eaa4b33a", "indicator--86b71002-1ec9-4b54-9f7a-32e51205fd4b", "indicator--2a7b1c4f-f543-4148-976b-912c383a18d7", "indicator--373e1d47-df46-42e3-ad89-94b96d5d04dd", "indicator--affd3c89-4011-4dc4-9257-4d33c0311752", "indicator--5576c7a6-7672-414c-b187-c543a22778f3", "indicator--9434fb3d-97c0-4af7-a83c-87a7ee0b2a1a", "indicator--20d31197-0215-4920-8d23-74034c8bdd8d", "indicator--92b9b288-1204-40e8-9c45-29ce1b4d03d9", "indicator--62b04035-19bf-4c45-97ef-187709715a28", "indicator--2fcc170a-585e-4e6e-a5e3-7cc529ccf7be", "indicator--6070794d-87d4-4cde-8964-c527727f86a3", "indicator--d3ff855a-5d04-4f69-8ffc-68e0e7ac5590", "indicator--3659ecfa-aa81-4741-a05a-5f4c30efc08a", "indicator--b042b3bf-bfb4-436f-83aa-bb4dd20a23e9", "indicator--2f62aa3f-516c-4415-9f83-64c457059400", "indicator--749ce339-a267-4af9-84b5-488a8c9f9c30", "indicator--15293bf5-654c-4c10-b803-bd559c480ee1", "indicator--d855ad8b-110f-4e94-aebf-802e3821e013", "indicator--68720d95-acc2-40c1-9b9e-077bb08afbc6", "indicator--825dd342-0a80-4a2e-91e7-cdec94708807", "indicator--5d5b20bc-4b34-4475-bbd6-288b55688732", "indicator--7853851f-557f-4a89-ad57-b37d48d541bb", "indicator--14892b4c-399d-49e2-bfcb-3b6bfefffb18", "indicator--06fda412-7321-4813-9d58-5fefa65a2772", "indicator--7f511884-0bf7-4c56-bb5e-b3406f118da6", "indicator--60189a19-740f-4eb8-ac0c-ef3e3f9a16c8", "indicator--683c3e0b-bb5c-4368-a414-62809332fec3", "indicator--dd9676b8-ba66-4b41-a4bc-e2a12329d310", "indicator--f592dbd1-6f7b-42b0-b9d3-df8386d69c48", "indicator--cbfca324-b0b5-4bd1-adb0-b5b46fdaaffd", "indicator--1806a79a-8327-43ed-b028-382197aeec8b", "indicator--8d6e6052-8880-4474-b1a0-3b60e6d20506", "indicator--36479a86-350f-4f7f-8628-f7a6dbfdfa73", "indicator--0ed8607b-da14-4d5d-9178-738ed6703bac", "indicator--0a9464cc-eb51-49b1-8c76-95784cc1043f", "indicator--0f9e7ac8-4109-4296-82e1-1d4e0780cd2f", "indicator--03ab4f83-2a21-4164-a560-a55ef410a516", "indicator--d5ff832d-9ba8-4253-8ffe-f6e42ac856bb", "indicator--3cf5f274-032e-4632-b5e2-400fada91042", "indicator--3d74bdbc-2274-457c-8b10-2865448c8595", "indicator--82c54275-3878-4386-9734-1fe2e6f0f2be", "indicator--5e8f9cca-8da5-4763-ad9f-29d66ebc364d", "indicator--e508a313-2e36-40a3-8b4e-158117a63d7d", "indicator--efc4a75f-3175-46aa-88d1-0d073a3621df", "indicator--5e264bec-114c-48ba-bf67-a85cafb141d7", "indicator--3851280f-25bd-4f52-aa80-514a290a85c7", "indicator--a020d90b-68dc-4199-8103-a752a5dcd3d0", "indicator--11aaa47f-a2f6-4664-8c8a-fccab9ff9bee", "indicator--19879a1d-630e-4edb-8f9a-d614efcb581a", "indicator--810c3981-9846-4340-ac93-ae0badfcbc5d", "indicator--46eec7ee-2292-4b0a-8190-680f820be90e", "indicator--c3dc2bfe-23e1-453a-8f9f-aa68180ec443", "indicator--d817e2f4-02ae-446e-90d3-90afef54ec41", "indicator--3a3f67f8-8db3-4998-8c34-1ab2e10a166b", "indicator--04e04381-9f27-4dfc-975d-96c9abcc06ce", "indicator--19733b58-0059-45dd-b5b1-9c3304d2d9bf", "indicator--e898fca7-fd5e-42a3-bfc9-0ba462a4ffea", "indicator--4cec0f1d-680a-40c7-be4a-fc08541eac41", "indicator--baefedad-4ac5-470d-93e0-7ffb651cf9df", "indicator--e5c93647-68ce-42b1-bcf6-3265cf43d0fc", "indicator--14db72aa-728f-4004-b4cf-fd8617e48ed6", "indicator--d9e2a32f-225f-48db-b106-8fa24de3f33c", "indicator--262647f1-a62f-4abd-8822-f2ec330be101", "indicator--f147a2f4-fac2-49b2-8ace-e76d1d348533", "indicator--c51504cf-8eed-42e8-90c6-93757579ff78", "indicator--bbf0b73f-789c-4687-99aa-48506dab00e3", "indicator--600bf181-176a-4a3a-81b8-39d50ab2d9f5", "indicator--33877446-bc5c-456e-af52-c40352c5d498", "indicator--89978c8c-0208-42f9-867b-48856a6cc171", "indicator--dc426d81-606d-45af-a077-1df75a012c5a", "indicator--5b92d503-2ddc-4df8-bf6a-21f7fda0246c", "indicator--cfb07579-3c92-435c-8ea4-0409fd0d3774", "indicator--d0643dbf-b838-46e5-b546-3473d2e4ac04", "indicator--ffcd01e6-0211-447c-9b1a-8a052c416309", "indicator--94fd1c82-3e23-4910-aafc-08015454a141", "indicator--753fc39c-eafd-4cb0-9e0f-350ef82f121e", "indicator--a16b71cb-e371-4501-b3fe-f7d15c61415e", "indicator--2c31c5c4-7495-4d53-b27b-b8ff0c49fd11", "indicator--7e534ef5-226a-44bb-b67e-0823838ba758", "indicator--b5ec26dc-0d00-426f-ae1b-65dd071af215", "indicator--6ec98767-6581-4ca9-acc1-9399f4c81991", "indicator--c5bc6716-9efc-4d69-8ee1-98fbb677109d", "indicator--64495f0f-41c8-4413-a1c8-97112d9a6b35", "indicator--12a3d553-0863-4c7b-9208-400615cbbdf2", "indicator--3b8fcdac-e61b-4a20-bfcf-4cf13f966c20", "indicator--4a86f502-3fcb-4711-a4fe-4203fff31a78", "indicator--c0b95853-069a-4fde-b66d-26181ad2f74a", "indicator--43cf493e-f193-4b8a-8b34-0b3a85209daa", "indicator--058be1fc-c167-4772-8ef9-f1ea88c53099", "indicator--3ca9858a-f2f2-4b55-9c06-e91cd3d73bd6", "indicator--a545f573-7121-4ce9-8a1c-4084c79f48c9", "indicator--9f170e7e-3c82-4e84-a8b2-04d85af59784", "indicator--9c85d82c-d4fe-4dfd-b742-4ae188554207", "indicator--bff53e0d-6f85-449b-80e1-fc3cbeceea13", "indicator--50b628e3-d858-4169-8eae-4f24bd2c384f", "indicator--d936fe36-3a69-47a4-bf99-32a8ae722512", "indicator--a2a59eb2-a8c2-4781-8af1-f8d0f68056da", "indicator--17922026-fe23-4656-8cb0-18c33827d543", "indicator--e02f69cb-9d96-4cf8-a8e5-b9fe3b0bd326", "indicator--cd9a7b12-735c-4366-bf14-c0212ba62079", "indicator--ca2b1156-5160-447b-9727-ac10c4330285", "indicator--e079ef21-acb7-4146-9d07-c75f9dc3295d", "indicator--3ae30303-2c01-444c-a64f-6f35c99f5adc", "indicator--991c4e74-836a-4088-8b31-a158f937ea78", "indicator--f9bce562-a889-4d0b-b814-9b37381f5bd3", "indicator--566e31bc-f572-432a-97e0-c9e5d942eaed", "indicator--7dda93e6-1f80-4569-9e89-c07e6ed14fe9", "indicator--d21696d0-b78b-414c-9052-19850513008c", "indicator--371f1651-62dc-4dfa-98b3-f62312700e10", "indicator--d492f041-5386-43af-816e-7de1997e0e72", "indicator--a60372b5-5464-4ce6-89ea-ddc648243e13", "indicator--f51f44f8-5114-40be-8748-88d0c148a607", "indicator--717b3bf2-805f-4cbf-b3ab-53eda0ebcde0", "indicator--96a014cf-9b7c-4331-8268-ca57035e2518", "indicator--d4437c0e-7aa4-45d1-b4f1-f8b028c2d5e7", "indicator--22982ecc-46aa-4b0f-88ab-ad7991267ec0", "indicator--378ceebc-f86f-4043-bd39-461670b0a2a7", "indicator--edfbd72a-0639-469e-879b-4ee5fd2c00b2", "indicator--1bad6364-7c7b-4916-8812-0849d14df329", "indicator--8b93dc38-a1fd-451a-a4f7-43964cdb72b0", "indicator--dbdc3d93-e6f9-4184-aa8b-94a1ea110667", "indicator--d9a7bb41-5e7e-43a0-9387-c626364bf5ed", "indicator--1b159047-81f5-4c3d-8404-090f0ae083a1", "indicator--2135f0b5-6e3a-4026-b4a4-61c474fbf687", "indicator--878a2f85-2940-4ec8-b269-28242ebb2723", "indicator--e00de1aa-4544-40d0-8024-52dc35d3a1e9", "indicator--b1ea7b66-ccf8-46c5-8fad-34b0e9d67476", "indicator--62eb718a-0ef0-4955-b78d-69f05ac40802", "indicator--52235236-cf4f-4295-9837-b2cb32887bcd", "indicator--e193acee-8269-49c2-b17e-37eb308a64b8", "indicator--3af38c0d-1f7b-4ce4-955d-ec7383757470", "indicator--e324116f-bc50-4ce9-bae4-f948d4793673", "indicator--039af007-42b6-46bc-a990-bc568fc477bc", "indicator--1ee10948-bd3c-48d6-a76e-97c1423dc9a6", "indicator--9a93e404-02cf-4c21-86f2-eba4a5e48970", "indicator--e646958c-a884-483b-8089-43e4b3422f5f", "indicator--8aecabb5-f374-4937-acc0-392e6d631110", "indicator--58e3c11e-a296-4d07-8e3d-40f4c5803806", "indicator--131c6cf8-5991-44ad-b0c7-314b42620a46", "indicator--60d5f7e9-46dd-434b-9403-d7c27c1216c1", "indicator--e9c020da-5ff5-497d-89b1-2f0c40afdbe1", "indicator--a17f6879-19be-4abd-bdcd-46a58adbeb47", "indicator--f03e23f2-75ef-4afe-8dee-bde8f88491b1", "indicator--7ca72a71-c162-45ef-b1b8-8e6e46e1e109", "indicator--272d47f7-fd87-49eb-a4e6-d6aaa0874ae4", "indicator--5453a252-012f-499f-ab6f-09e49ecc714e", "indicator--56f86abb-8b2e-4ee5-bfbb-938a56453991", "indicator--02b3a7cc-f4c2-44b6-b5a6-67b392a93a43", "indicator--b237d1d2-b609-4619-91c8-0e6f554dd510", "indicator--d4366c64-cdc5-40de-90bb-cfd08a5bd2f7", "indicator--666822e3-9472-4a0c-afbd-e49de316b1c4", "indicator--e444223b-f63f-43a4-acd6-c7f8315aa40c", "indicator--784cca3f-23bd-4a36-a1bb-f76838f8dd54", "indicator--9ed881de-4088-489e-83be-57cca21dec91", "indicator--ee1cc4a8-36e3-41fa-870f-6d705a1aca74", "indicator--f4874009-deb7-4053-97e8-0f8a4379d50d", "indicator--ec58cd10-a785-48d6-8903-7d79a8b3d93a", "indicator--05728b50-b710-4717-8be8-770765ac45b6", "indicator--1f55d092-a0a0-46ec-8cfc-f6cd8ada4b3a", "indicator--005be49f-acd3-4176-84cd-4040065887a4", "indicator--bd6a49b6-555a-47c9-a9f6-46df2af8016e", "indicator--56e0ecbd-7825-4a80-85fd-f4d14d226572", "indicator--bd9d85d1-b0ac-4c62-b14e-44573f7d06ac", "indicator--9597d032-c1bd-462f-b51e-1d60bdc6f9ed", "indicator--6d5113b7-fe08-49c8-a488-6b9ff6b483a7", "indicator--95ffeec0-1771-4075-975c-374673221504", "indicator--2cee0856-3d2c-4409-a309-e0e99f6cb860", "indicator--04b6ef49-283d-4302-88c8-ad454abdc56c", "indicator--70dd02be-81e8-4f9f-8a06-26280924de46", "indicator--95647ed9-2a1a-413e-87e0-55677c6a3c22", "indicator--d448432e-f3c5-435a-a822-840ae4c6373c", "indicator--22c9a88a-a943-41ae-9585-36a3cccac2fc", "indicator--a9fff8d9-3992-4748-a560-cba92ccd145d", "indicator--3e1c86b2-2fb8-4514-b0c9-1422934fcb29", "indicator--1df7abec-0dfa-41eb-9beb-d3fd1056995c", "indicator--eeea346a-9b9e-4a30-9688-8d2429f77cdc", "indicator--d5c0702b-ca10-4b99-bb55-0944610cf0f6", "indicator--af8c09af-d638-40dc-8176-33028cca0437", "indicator--5fb7bcb0-5efb-492f-a60e-ae23d4fe8a17", "indicator--6f6d893e-de88-4fc8-b3d8-026bce4b37d0", "indicator--3a356c9d-9070-4673-bee7-62c19842940a", "indicator--fa4f4d56-50dd-428d-8992-e11e386cb1b7", "indicator--76ff5c50-83a3-467c-8f4c-e6777ed7bada", "indicator--c0470db5-2ba4-4f5f-a61c-e454ffd13bf0", "indicator--d31e689c-e427-428c-93ce-d90f060929fb", "indicator--23faf27e-9c6f-4b6a-b126-7afa54ab1bec", "indicator--31138f26-8a72-4d62-ae1c-d53a5d422cc9", "indicator--df9f6fc5-beef-40b4-8f9f-bf1cebd52dc3", "indicator--e2604e89-d398-4ce3-a2a9-5a3059fe78c6", "indicator--53a945aa-b368-4883-82aa-d73ec03ab886", "indicator--9b353e7b-9a2b-4ce8-b144-33705f3c809c", "indicator--54fda761-1e02-4afc-bc3e-fb2eea1944dc", "indicator--1cd55e21-d986-4056-b4de-218545fbc52f", "indicator--684cf920-ffa7-4b9b-9b75-53c4963cccdc", "indicator--0cecb064-224e-47c9-96a7-678f967b65d3", "indicator--075507d4-f1d5-4824-93b5-c005b4540982", "indicator--973d5884-ba63-4f8e-957b-a997038776b1", "indicator--bf6fe119-8a85-4b7d-b5dc-85f8b49b75d7", "indicator--16dea5ff-d808-4ba5-87f6-3289a1c020b4", "indicator--0e90fd6e-cf72-4d05-ac62-61c8ebb70bf6", "indicator--0ef2ca5a-850c-4cb8-8898-7e56a6516d97", "indicator--cad4edea-ce40-4184-8d6e-7784e09d123b", "indicator--2a555757-b095-4f48-acfb-3b4ae0c692a8", "indicator--5c780ed7-5553-4e58-9a64-09dc88c3c7f4", "indicator--31b7ad8a-0e72-4f3d-8622-089f083b85ad", "indicator--64aac2f1-fe5d-4e50-96eb-c265895d5933", "indicator--3807074e-aebc-49fd-bb9d-2476b8016c1f", "indicator--090a68b4-d4a8-4f00-aed5-6933c44f5885", "indicator--9f967fd9-4156-4573-99df-56ee65c84f90", "indicator--4aeb5eaa-73bb-4a45-baa9-6d051c9a3f45", "indicator--297934d6-2372-452d-a669-a0c19ef051e9", "indicator--1b6d76a8-90c5-4d03-927d-501964dfde9a", "indicator--d02b1845-2828-4f88-afed-d54c0c68ab60", "indicator--b0107d58-4f97-42c9-93ff-82b6d0631376", "indicator--c4c16588-5955-412b-9f6b-96cdede79424", "indicator--8f9b2b10-e3f6-4955-a61b-55b5db54431d", "indicator--9728c999-434a-4c89-be60-01b5eea18e25", "indicator--628aaf98-91d6-4b54-a700-18839cf42604", "indicator--7530b28f-3642-4df6-a068-1e958ba67cb8", "indicator--b4f557bf-9a1f-4d09-9a47-2e0ec41d3938", "indicator--9a7fe14c-f16b-4a58-8fcc-280f682fa45e", "indicator--f3a9d039-0dca-4fcd-a2fe-349784260fe1", "indicator--03db7083-8367-4083-88d6-cdd6fe12962f", "indicator--565b3f87-345d-4802-b280-63585f57b596", "indicator--c40955b5-7067-42d8-8ade-17cf5b95455c", "indicator--842556ce-096d-4c8d-93ec-47a166f90a23", "indicator--fe02bd7a-c564-497c-968c-5f5c49bedabe", "indicator--aa3be2e4-d960-4b78-8abe-55c5bba67240", "indicator--bc0c143d-1d87-47bd-bae4-b210dc329cb3", "indicator--65954eb9-d084-43a0-a621-773e9346a1a6", "indicator--49ead395-7c06-4738-9ebb-ad9f999f5e89", "indicator--ac3e2b99-fc20-4529-a7a1-8a456ab1ee60", "indicator--83fb70ce-e93c-4358-a985-e9603e0d1919", "indicator--8f432a8f-3fc3-4c99-aea3-d86c8c44d12d", "indicator--ca5f09ac-6ebb-45ff-95c9-f0799eb02fb6", "indicator--0811ea8a-23e5-47f0-8386-d7b227ea0080", "indicator--91a2fb8c-e758-4750-9624-d75a88679d02", "indicator--28214b0e-2115-4a70-9edc-afc7dbfb1bdd", "indicator--95390c2c-e529-42c7-b725-b82e8f9e2159", "indicator--13b80746-cce4-4028-a707-070ec75aa75c", "indicator--203f46e9-4db7-435d-bd9e-281027fd8e9b", "indicator--4eca3a9f-126b-422b-8256-9fd3e480b4f5", "indicator--c8d1a315-a3a6-42ca-8060-0eab079136e7", "indicator--966ef94b-632e-41ea-bacc-2f16bdbc08b7", "indicator--336fd195-3c9d-4c1b-8dc0-4d5a4e8383c6", "indicator--7505a08f-6987-472e-b51d-955c2015fc2e", "indicator--50b98660-0637-4075-bec9-56552a9176ed", "indicator--ed022af0-bf57-4694-97ee-23b924786d0e", "indicator--cecb2c4c-a087-4af3-9437-f5755d1f40cd", "indicator--270df56f-b2a5-4f92-8c06-a5d3d5c84ba8", "indicator--49f2ad74-21f6-46bc-a208-0d0d5f4b7e13", "indicator--5802a36f-ea16-4bd9-9513-8073a07963b9", "indicator--16d49b95-74be-44ac-97d6-3ea55434249f", "indicator--0e0c614f-f2e4-4831-a5e0-3e102de6c4eb", "indicator--cb6713ed-cc1c-4ae5-b574-49fcd40484d0", "indicator--bcc51370-25f7-4c04-88ed-46b77f0c60d5", "indicator--78951da6-8081-4ab5-961d-f74af4b03249", "indicator--d4ce8d3e-6918-4ca3-9f71-709e93dfa3a0", "indicator--f0855b98-1c6e-4aa0-842c-bc13bace3605", "indicator--60381b85-0850-4ba4-9a8e-6c23393d2b07", "indicator--865caad9-f916-4001-a8c3-8c22f9e8d5bb", "indicator--9af8ad23-73e5-4053-ba5d-4ceca64790a0", "indicator--bbae4956-79b8-4e76-829e-c3c56ea99ec7", "indicator--1591bb49-679e-487d-917e-14befca6b93f", "indicator--c216a292-2d3f-46d1-979a-fbfbeb109c12", "indicator--78bdcf4c-1a4b-46b3-871c-91b45393d0ba", "indicator--e218a93a-7864-4867-bd6c-9f52d9e167c0", "indicator--55674a8e-0d5a-4a42-af72-d50f8adcb254", "indicator--ba245cc1-0097-4873-a94c-70d662c96ae4", "indicator--0f712051-8e24-440f-b1da-2ebae3fcd1a3", "indicator--465b0971-6178-4d48-a3bc-52ffb2bae52b", "indicator--96ddfe07-9955-4389-8572-a130845c539f", "indicator--8c8302c2-7df3-4a5f-a924-a1688c9108ed", "indicator--48dad19a-7c67-4466-b94a-13e72ed1732d", "indicator--a0c71e0d-4678-4ccb-8f17-5250e86f65db", "indicator--a52b39d6-6d47-43be-b5ae-58c2aaa5ada6", "indicator--48d1b91d-75b0-40df-9d5c-8cca1adcf980", "indicator--18d7b0fb-627c-42b9-b3e3-8815bd3be4c8", "indicator--d49a1cb4-6629-4891-aff4-a04d4c8d8c79", "indicator--073e76c0-fb1b-4ba3-a334-fd929b536d28", "indicator--daf7b59b-da9e-4fae-a071-1a11234d9cb9", "indicator--acda72c1-74a1-4cec-a82e-ecdccdb40690", "indicator--433a7c96-f6df-4fec-bfd6-aebd9035804e", "indicator--ac0af905-6c22-4b83-a8a7-6488731e96a6", "indicator--fe0a998c-e916-44c3-bcca-1a33f9b80cbc", "indicator--da03dfa1-f441-476f-9f42-6ce28f0bccea", "indicator--48d729fe-7676-4e39-87cf-afc02e4c9800", "indicator--9a51240b-54d8-49db-8be4-861a71644d6a", "indicator--cbf3a771-598e-4cb4-ada0-442ece98ac67", "indicator--a8beb08f-da9e-49d6-956d-78cf63488be7", "indicator--bafc15fe-4fd5-4a9c-959f-0151d8d8cf25", "indicator--d0f1e865-d159-4200-85fe-a1d59ea8aae3", "indicator--cc29a62c-9694-4f69-9235-39a62ae63508", "indicator--8158bd3f-9f4e-478d-b2aa-b0cb3d5def9a", "indicator--92ec55e8-7873-42fa-9d4a-50725987f932", "indicator--2c61353d-5569-4601-804b-77e6170448fc", "indicator--b2df11f1-4020-4eec-a11c-86bce2b5856f", "indicator--c39dba96-87dc-4620-9d91-083685e5fc50", "indicator--33abb5d9-5f8b-4c44-8ea8-f4504e7323df", "indicator--11be9a8d-b2b6-4716-b0c3-fa972bfc7f6b", "indicator--14f4a4d8-07d5-4c1c-9039-57faf37af87c", "indicator--3f5b4143-a8f7-4e4c-8025-3dfed0da7540", "indicator--aec1a6c4-3908-4c63-a6b2-0fecb921dd41", "indicator--9cebd9b2-e09a-4f8c-8ad0-15e510d1db1e", "indicator--c937448d-5362-472c-8813-98e832fb6c9a", "indicator--60276a30-15fa-4058-9205-2f0af88772d6", "indicator--bac4ad7e-e91c-4a85-8ab7-c1044a36409d", "indicator--9f36c880-be43-4e35-86f3-0dc55b968cba", "indicator--602d89e8-05e3-4a25-b2de-172ca6e35b59", "indicator--310f8885-a60a-40ab-a0f4-2f4dbc0842d7", "indicator--9c13452d-f88c-4a67-9bf2-514610cbe2b4", "indicator--44b15e41-e54a-40c1-a48f-5955f9bf79ca", "indicator--7f419a3c-40ce-4d89-aac1-7afa456ab0e1", "indicator--32376ddd-ba71-4485-b51d-62425530fce5", "indicator--e5c8ae8f-06d8-4123-ae6f-298f9dc09a1e", "indicator--ab804ed3-26c7-48b9-bfe0-6a8886c94a51", "indicator--2b00c20c-c849-4968-a001-b9877bc765f9", "indicator--6c41a0fe-e9c8-44be-8874-a059d4dc4c30", "indicator--7bfd3b2e-4720-4cfc-9c9d-d5a5e63b767e", "indicator--c9ce3d8f-1394-46b2-b073-fd650738f1dc", "indicator--ea26a140-c70e-47f2-af20-f4f0e0bdeee1", "indicator--c42012f8-6b8c-4c25-b844-4be2ca89308f", "indicator--8be8c0bd-c875-40c0-8b49-40f0e0595759", "indicator--a9d45cb1-ded3-44b8-935b-7a4b65609205", "indicator--4d570a9f-46a2-4e6f-8208-d89131a6ee52", "indicator--93d44200-99d5-41ec-a455-8bff07f1b1f6", "indicator--cdc7cc82-53ea-4740-9a6d-0001a50b8e62", "indicator--d392f830-6824-49b0-b97d-a06f7716858d", "indicator--4c7d4b65-4cd2-4849-9562-e1bafa295eb4", "indicator--2ad328e9-1913-48fb-ad22-48d1a7d8c0d8", "indicator--b7e963b2-b6f6-4c8b-b691-ed5f275a4074", "indicator--992ab357-7283-4c75-bcf3-3d753d903fe6", "indicator--77785ecf-723a-4147-a295-7211b225f170", "indicator--91f7a711-a0f8-4e0b-8ae1-680d42e06b22", "indicator--f6109645-364b-48b1-aa9a-96c688f478de", "indicator--4261bfcf-9e05-4525-ae1a-599560dbbc80", "indicator--c99f0c76-4018-413c-938e-8d617464bc21", "indicator--72127c87-8112-4cc4-ba18-179e9638a9a0", "indicator--899b039a-5bf0-4906-a99c-ebf77d0819bb", "indicator--60ba9158-97c7-4c90-9cf5-59b6472f2fd8", "indicator--9e20a56b-4159-4602-92b5-eec35b103119", "indicator--11c05fdd-d3a4-40df-9648-8aa7a2432d87", "indicator--dbb836a6-f9ff-48f5-8f35-99e0f0cf939d", "indicator--d91fa75e-d24d-45f1-a911-7ed7093a82ff", "indicator--d8195802-9525-46d8-a1a2-566e2c5c9de2", "indicator--781d24c8-4093-4547-a49f-9cf584659f54", "indicator--58fdca6a-412a-4d15-96ef-3793622fd609", "indicator--503b0f59-2ce3-404e-898b-a17053be48e1", "indicator--1b2f0c78-1efd-473f-9bdc-4c8fea537448", "indicator--a97c5459-26f9-4aaa-98b0-944a20a15ed0", "indicator--fa9477ee-a1fc-480c-b036-ca267056b015", "indicator--70e45fa2-e8d8-466d-9642-218a36b60f92", "indicator--8c0b988d-dab4-482c-a24e-5e99f40b9f33", "indicator--e0042925-2398-40fa-8fcc-b51f17d5e352", "indicator--f8206be5-0a9c-437e-839d-f8dc6b3ccec7", "indicator--668a75b2-a3a6-464f-9936-2733ce07d5bf", "indicator--c5c2a06d-6348-489b-b969-ddca2e5b1de4", "indicator--203833a4-ee50-4782-93fc-94979ff991d1", "indicator--1b070373-75cf-484c-a83a-93fda122fe01", "indicator--d42f849c-dc18-47ec-8c90-b9c77ecbf5a4", "indicator--5c9a45fb-ff1e-46ce-8a86-f1ff52080600", "indicator--82a5e8a2-c03b-4fc6-9171-65cd1ad6bf8e", "indicator--79ab7f11-6495-46d2-bf96-5050454d0eb6", "indicator--2f058e60-a351-4dbf-b90a-dd2ed93f1fbe", "indicator--9d48d60f-4d15-459d-a2fd-76ee08776c2b", "indicator--0310607d-2d6b-4075-a213-4c8e9acdd933", "indicator--c1e27cef-1730-42f8-8a48-298b14411ee0", "indicator--b7fb8ae6-de4d-4cd6-bd24-a680821b93b2", "indicator--4e320194-1500-4827-abf2-5d575fc88f95", "indicator--27c4c4a0-2b4e-4586-b745-af450d25e5cf", "indicator--7526f9b4-26f9-4b20-8394-46d5ca0bb4dc", "indicator--2b44b895-8e66-4ffb-a082-6cbdcdbfface", "indicator--a6c6404d-001e-4bfd-b53e-0dd3c6198cca", "indicator--406cd23e-a1a4-4515-9965-7346ae604919", "indicator--3a0d5a27-45b9-4cb5-9f22-5e5911be5b4d", "indicator--e067a87f-33ee-49e7-aefe-c57d9e5e6e2d", "indicator--d9b148b6-822e-454c-9b11-ed17ad5df4ac", "indicator--4ace582c-9d48-449e-a1a6-861ee7627c4a", "indicator--cbb3be96-1023-4178-892f-414ec0b8e642", "indicator--dbe57210-f767-4951-a643-ec2d903bd180", "indicator--6ae4186f-fd7d-415d-abcc-ad1732d54266", "indicator--c6ea7fda-4666-4044-9649-d09c2890ae1a", "indicator--66f232f6-e677-4955-b15b-86b320bbf4a4", "indicator--76789708-db1c-40ab-b00c-b973c2241080", "indicator--b07cd7a6-9bbb-4008-a247-5a56103de063", "indicator--54371f55-e4fa-450c-b426-fa76f8468992", "indicator--81035351-b7b4-416d-a61d-f191c5073b13", "indicator--cf477dd0-b031-4d21-a83f-5189bedf9aec", "indicator--43241ac6-d81f-4c72-8a0f-338d0f0f03fe", "indicator--be51b666-5097-45a3-af7f-15599a221ce2", "indicator--b9768a90-2184-4d7a-9f2d-25a25d01d45b", "indicator--2f1fd1b5-3b22-49d4-b43b-0fbd946650a7", "indicator--690aff5d-6c80-47c9-bc09-b15a8b756250", "indicator--cf4fb895-a363-4b1e-963f-f77c550f007a", "indicator--b529e950-f3c5-415d-9547-cb6f77f8b9f0", "indicator--d3df376c-f0f0-41f7-b8df-b8690297995a", "indicator--7a824f42-b1f1-44fe-95f1-79790dc65826", "indicator--9ea27547-b099-4745-b32e-b01d94aa6bde", "indicator--2c582bfb-71d5-440c-ab57-d951abea9a12", "indicator--95f9e2d8-6d01-4d09-a8ba-f9d011cc2ffe", "indicator--c07cc8bc-ab37-411c-b33b-ed90e886880f", "indicator--f8903883-54a0-4e44-836b-78b9d80b721d", "indicator--0db4e3ab-d017-4638-ba79-63cdde31c048", "indicator--34d0f942-d2f1-4191-a77a-a0f5831b74c7", "indicator--d5ac5405-96df-45c8-a6c1-5ca4aa0bade7", "indicator--246a9cc4-3540-493c-a1f5-9b2c7c4dcf40", "indicator--631f70dd-8693-4ecc-8806-03d8554a639e", "indicator--67e1723c-2dd8-4013-a145-cc404f32738f", "indicator--d12d5ab5-764a-4a70-9521-2ab569d8abb5", "indicator--616dd756-5b3f-4b77-aa1d-115f07b5a37f", "indicator--9b8ada85-c576-45f9-9a05-bccba55db822", "indicator--d30f148f-8de4-4405-ac8c-aea52d7eb9be", "indicator--ddc64960-2a56-4de9-9d0e-29f712a4e020", "indicator--8967601d-56f2-4db2-ab6e-7dc9abf1476b", "indicator--f1496b26-d357-4ae3-873c-edf50c9fa2dd", "indicator--ef5feff4-d574-4fc3-b1be-7d0885935215", "indicator--c760148f-2506-4ee2-8741-d9eedbdea45c", "indicator--d1842786-9ae0-46b7-90a1-4e32788b6e01", "indicator--ee5abe96-bc1a-42ff-97f2-ac6391d8c437", "indicator--7629a600-70f7-4de8-8da5-81a341de3c7f", "indicator--2fbb7747-29af-4e16-8e69-69e5517e8ca5", "indicator--9000621d-ecfc-4406-9975-6e7f362cd939", "indicator--ff4c446d-b12d-4154-893a-c4fb9b93ce43", "indicator--a0818c47-1994-43de-a399-3e85dbf401ca", "indicator--5fe9f1ea-a226-454f-ae24-8c9931acc61b", "indicator--71eb8994-ff27-42a1-b49e-c3902e1e4ee0", "indicator--91b90b7e-3c49-4f83-b999-418736d66c08", "indicator--949b8654-9f28-483d-8664-a5d503df5a73", "indicator--f594f111-2ce3-4262-95cd-170ec6b1153c", "indicator--97942037-c754-4396-9934-857340adb1a5", "indicator--dfe4c0b5-bd3a-465b-8993-c7445906b022", "indicator--ac2f95ef-cc58-49cf-859f-43f55d9de875", "indicator--32a31deb-98a7-4f3f-bd77-e8484f6ece3a", "indicator--a88db081-c3ab-421f-a5a6-68d0faeab7cc", "indicator--a69ebef7-c7bb-4cdd-b107-14cb19dec69d", "indicator--47db01a6-2c85-4716-b0d3-d8b81e222bcc", "indicator--9bd7295a-d2e9-411e-9971-98f1258e3071", "indicator--0b82ca14-b13e-4871-b9df-65a66c75ec14", "indicator--8d30e4dc-8557-4ac5-a878-2612caab4980", "indicator--11c11163-a3c5-4033-844c-c098c6a48a54", "indicator--e72e0c6d-83ef-4d5c-8357-c202055b7f8a", "indicator--2b4bb81e-9334-426b-9d35-c7add16a5ee4", "indicator--2fdb7bcb-be9f-46e7-930f-5f17b38e521b", "indicator--c5aeeaa5-5ba3-4fd6-87ba-255485ea3aeb", "indicator--2d04f842-cf75-45ee-9f64-f63007983835", "indicator--128c808e-d6be-4759-ba0e-f89a1e0bdf6f", "indicator--aadfca56-17e1-4368-ad38-4f17f1aec9af", "indicator--3a0f9561-63a4-471b-8f4f-8e4557c3aa15", "indicator--642786a3-9266-49dc-a30b-360e8a38f641", "indicator--83562fcd-d3bc-422c-9310-bdbeb4525adf", "indicator--55a12ee0-26eb-49c5-899d-fd9854cd2023", "indicator--2684871e-4135-4ce2-b849-111abadc7e58", "indicator--ea385331-d956-429a-a85b-4af363b29312", "indicator--206886a8-7dd8-45f1-b4c7-0e43e133c5f7", "indicator--eb628b4c-f31c-4db1-8979-b470d2b852b7", "indicator--f3f4908b-e541-4539-aac4-2fdf64e96da2", "indicator--8ac3031d-d5d0-46f8-aae8-4c9950031f92", "indicator--f4793b1b-0b63-4267-a5bf-0a142a4c25e9", "indicator--30672d45-2efc-4e0e-841b-b68b23500390", "indicator--a73eaf58-32f3-4c6b-8764-5c9fa2716800", "indicator--ef0739aa-fcb5-4f2a-8166-40d26b9560eb", "indicator--7ae71c6f-886f-46ad-ae0d-e7ad9cefd683", "indicator--3e8146ac-da17-4f30-adbf-73b52e77ec0c", "indicator--1498e3e9-5c69-459b-89a4-045f1da179fa", "indicator--ad8b4e37-7dc4-4ddb-b774-6edc0a30f1d7", "indicator--c4f9041a-7e20-4436-b8d4-3287b7c66fef", "indicator--06dcb46a-892e-4765-ae36-966326bf5989", "indicator--7173e21d-ce0e-478b-95e3-ed78b29d9ea6", "indicator--e640cf43-f1ea-4b4d-9c73-401f7f91e0c9", "indicator--db92d5ab-1739-4e4f-8114-0afe2db68d91", "indicator--19419559-beac-402c-9254-151b51e24eb4", "indicator--225b2a5e-e056-45ee-b207-e436295530d7", "indicator--d74b33cb-64cd-4631-998a-e0a51c672bfc", "indicator--57977bda-cd2a-4773-8e60-85cfed781d43", "indicator--7188aec4-cbdd-47d6-bed8-a055853f0bfc", "indicator--bf5c5fef-c302-417c-aeea-aa1470f5403e", "indicator--3fe18279-ff48-4191-b87a-45c317aa8b28", "indicator--683a1ca6-7d62-4f8e-bc09-746c81eba68e", "indicator--215e2c67-aae1-455c-8d49-a40bee99bf65", "indicator--149c24ac-42f9-4efc-9a29-ec279f8c2dba", "indicator--667fa01c-9525-4bfa-a24e-1dc1fac16f53", "indicator--1f8d8bc5-a914-4308-bb25-93eb4f2e31d6", "indicator--e2b3a515-bd5d-4ad2-a698-18816dabbbed", "indicator--4a5f6d51-dece-444d-b398-ce0044eb9fbb", "indicator--702c5106-5679-489a-bd62-0f1de6761f0e", "indicator--91e7c406-ff54-4045-9420-a3fadbeea8a9", "indicator--79ea255f-4bd9-49e2-9e46-4e8f4b389479", "indicator--86d073ca-1f99-48c8-b269-742b987f9a50", "indicator--11b02390-cea2-4c9e-9ad3-e546dfe8a9a2", "indicator--2043933b-1d99-4a80-9cb2-bfb9d9581d98", "indicator--0868d726-9b05-45bb-8ab7-af8d5f9c9472", "indicator--3fddcc3b-3dcd-4019-9151-039d977925fc", "indicator--91340dd9-c77c-4876-a05c-bfbcbe09b1a4", "indicator--0978038e-9cc7-41e1-8774-8c1c0b9d87ab", "indicator--6a1413c0-d5c9-46ec-bace-22d5c34ef5ee", "indicator--c3be11a9-96ad-49ed-b77e-caa568b5a5aa", "indicator--a2a6c9bc-490e-4c90-83ae-fcab0374637f", "indicator--dd2761d6-1718-4d2e-af48-10b9fc23cf80", "indicator--f2cec5fb-67b1-48e9-b63b-75d027299041", "indicator--afe67cbf-b546-4316-a9a8-b048f53d233f", "indicator--52ace60e-136a-449c-9dec-bf67c5cefb04", "indicator--7797f7bc-7f0b-4823-8e30-2c2efd2c7a88", "indicator--b83ecfcf-7de4-4a05-b87c-ebf12f0dff8b", "indicator--9e64c495-540a-4a07-a3ba-00ce455f5b47", "indicator--faf0c662-a410-4afc-a2b7-7ac7356d75ab", "indicator--898e5aeb-7c55-497a-b558-d4e15d9aec24", "indicator--428e09b3-18c0-4071-a48e-f8f6126904d9", "indicator--ceacda3c-92ee-4e54-9e74-fb36ddc1cbfb", "indicator--5e990086-9c62-4bc3-b8b0-7e0f635c3113", "indicator--4e69eb89-63f1-47fd-947c-6f5001e4e178", "indicator--6b66871a-6bc0-4b0d-85be-adfa8a733577", "indicator--ee6ab39e-a685-4028-bc2f-8eec19867631", "indicator--475a5e76-4c6e-46f6-9c1e-d4ca41d707ea", "indicator--0051c7ec-302d-42e3-a6ad-d23b6b231d60", "indicator--f3de8481-8e2b-49d6-aa7a-bef81ead427c", "indicator--0d28b0ad-9fa4-4c47-b1f9-a901400e1db8", "indicator--ed934ad4-0014-40ff-99bd-a80bd50dbaab", "indicator--7b2d59a4-7a07-4288-a373-0e65376e98fe", "indicator--dcce81d7-9f9a-4399-b26e-9a8957d335df", "indicator--f91ec5ef-4e90-42bd-9db6-4e1ee356dd3d", "indicator--a1624aca-f1b1-45a6-a630-ee0d51506939", "indicator--752d8615-290b-438d-b61e-4227f82e7e03", "indicator--f3fe5b0b-bdc8-463b-bf6a-98317f6feeea", "indicator--924da32a-0f3c-4dfd-abc0-ba4e42bb9c5b", "indicator--749c81d0-1e50-4ad9-9624-e4438d366ae9", "indicator--32afb05a-a7f3-44e8-a157-6f7476361746", "indicator--90e3cb34-d5e4-4a44-9ae3-8143809e96aa", "indicator--0b1910ff-f3ae-476b-80ec-d0406ac16967", "indicator--98690dd3-b6ac-464b-86f1-5a220545bcaa", "indicator--3bba8e65-8079-4431-a071-0cab14cfcb8c", "indicator--89280e6d-22d1-4d2d-8907-691d9ec42cdf", "indicator--f10bd44c-40e0-424f-827e-c70927ff9876", "indicator--14b18bdc-049f-4485-a422-d16c6bc9a796", "indicator--215df697-37f6-4503-92f3-efac0bff222b", "indicator--e620df40-1854-4e8a-816b-a90addd55c4b", "indicator--5dec70d9-dc9c-40f4-a3e4-ccb0f02a306b", "indicator--4b4760dc-44de-4ad0-86a4-d1687fcb2255", "indicator--5e96e750-d6c1-469f-b744-15415bd3e69a", "indicator--5ef01c9e-7f02-4b52-adaa-180fea3659f8", "indicator--ec950682-ed01-492e-a377-9656080eda92", "indicator--0a58a1c4-ed3c-4b7d-a460-abc3ffd499c6", "indicator--b707a5ba-4366-49ef-a9e1-de630be26164", "indicator--51cf806b-97b7-443f-bb90-6bee6e494a60", "indicator--09f99ba5-b133-46fd-8314-9df6c846bb36", "indicator--455c2eff-4b44-4ae5-b891-0cf7e056af54", "indicator--e8fc274e-32da-43ac-9151-185f6404275c", "indicator--440ec9f5-afc0-4d74-8e9a-25be3b782685", "indicator--bbb884dd-3b00-4eb6-8e7e-4ec5f8c1139e", "indicator--9b1f1db5-b50d-418c-98c5-0de61dcc81f0", "indicator--a2beb04e-7d1a-4533-8229-e8c09eb854ec", "indicator--e6881425-eb6e-4645-8aa1-43fd3038927e", "indicator--2f5f05b0-61e0-4398-bd94-c8f460997e84", "indicator--0781aea8-1f55-47cb-a5da-a615995a6eaf", "indicator--659883a8-c9a4-42d2-a647-3019c4498033", "indicator--2500bf87-8aa0-43a3-8a43-9e355eab5a9d", "indicator--0f117d21-4919-4d96-9ff0-d3ed0631e412", "indicator--e161b63b-1f62-4900-b687-bcbe86e1aae7", "indicator--40300e99-e71d-45cb-bf2e-ba8b0c280500", "indicator--ba15186b-2645-44cb-9e73-bb755a558d33", "indicator--6b77bf0a-240b-4b3c-a932-0b47885a11cb", "indicator--c557c493-21c7-4941-b58c-d69cc11da019", "indicator--c9e4803c-e804-40fe-89f6-22e67a7999f6", "indicator--96bb8572-bbcc-4246-a587-4788b74e402b", "indicator--3cae564a-bc0a-4b1c-8cfb-e4af2d1dec44", "indicator--c1612fe5-b3d3-4bcf-8de4-0310039b9338", "indicator--1db5f910-157b-44e2-a819-179912dd2534", "indicator--3c3ae8c5-4105-4e40-b7d8-66027c651de2", "indicator--3e8faee0-3c95-43b9-9bc5-af40fc7c8c58", "indicator--13b4fb10-69f1-4278-b04e-1c02f9580cd5", "indicator--342908d5-b886-4981-99d4-b5d11ad8f94e", "indicator--0799ee34-7505-4d1b-a097-919c85e458ad", "indicator--ee776b59-e10e-40d4-821d-da0517b8832e", "indicator--7f6eaa44-2722-4784-b3bf-d52df029b8a6", "indicator--e7ccba58-8c8f-46b1-aa88-307754b57225", "indicator--35c0c722-145c-4c95-a14f-526f502cefd4", "indicator--b2dff67e-2ae0-41fb-82ff-692c0787ec2c", "indicator--49523f47-95ae-4781-ac93-cb7746fa8274", "indicator--241b3954-35ab-444d-bdd1-fbb51970cdca", "indicator--7a3f5590-7f53-4aae-a46f-1bc9d844410e", "indicator--00e67503-6662-4377-b3bf-2b7ed142de94", "indicator--60094638-b577-4eaf-9fe9-28b126602fa2", "indicator--779b4523-3ebf-49f9-b32c-74e73019fa6e", "indicator--c0d95460-3563-4772-9c86-42315cc54f8f", "indicator--65f06149-4485-435e-bdb6-2e06fee786ca", "indicator--0fda08df-8396-4a90-abc0-b001aa5e1951", "indicator--f1ebfd34-380b-4234-9e7f-e9afca5b2c20", "indicator--d21f59cf-8630-4c36-add0-b0e8e1ade74c", "indicator--91bf897d-170d-427b-80b0-763ea5f32f55", "indicator--7fc47d0f-ce6c-4477-9a01-390a0316f533", "indicator--df7413fd-9022-4763-b9f0-bcd3b915f7d4", "indicator--c1ce2bfb-d148-4be5-acd5-5054a815d156", "indicator--2d0d8e2a-89b3-410c-b436-df8b31f0aa9b", "indicator--f6c411e4-8260-45bf-a112-49ef9f282cca", "indicator--de409b43-fa4c-4cb7-a047-c83270de6c7f", "indicator--9b8d01fd-560b-4d14-ab55-09b75c366cb9", "indicator--de1d53a1-019f-47f9-983b-0629b1f2a11d", "indicator--9c43d046-9ddc-4e60-8ed9-959e1293f88b", "indicator--ccd3212d-e1c9-49a3-8f9b-35275fb2875f", "indicator--c6cc0769-0744-4724-8158-b1420d6c479c", "indicator--c6bba349-8ff0-4828-95b7-7669a1892c36", "indicator--9a33b9a6-b558-4100-bc80-92f1fc2ab12b", "indicator--87e2b4b1-cba2-4ed4-ad2c-77fd6509eee4", "indicator--d11d87e9-13d8-4965-91b9-b64ca5f04d00", "indicator--7576a4db-3f26-45ce-9432-49d83880a23f", "indicator--2afe844f-cafe-4020-9974-0cd5355f8c2e", "indicator--f536cb54-738b-4814-82fd-5f44b87932a4", "indicator--b2ba4305-ed3e-4b2d-9c30-0aba578ce622", "indicator--9dfdd805-494b-4c55-99f1-f37774581553", "indicator--661910c1-1cba-4b51-aaa4-8b0e10387ebd", "indicator--075c6449-6f77-427f-a92e-fb0351f4e397", "indicator--187f5828-fa70-4e98-ad4c-3fee3d8e6f3f", "indicator--fed1cc66-1377-4bea-ac2b-5f62566e818e", "indicator--cf065a64-cbc4-439f-a618-999d68e73877", "indicator--73cc05e9-fd2d-4177-8eeb-3cdc836cb996", "indicator--925bcee7-f610-41fb-a57d-d7262d148e3a", "indicator--733bf799-9139-4911-b73a-9fa586c3e8ab", "indicator--d6b71f4e-9e0a-4022-b7d1-af1f9f131597", "indicator--ea4cb4a5-23e0-472d-b9de-5d7d411b4eda", "indicator--5d8f00a6-cfb7-461e-9137-efe40b115960", "indicator--0f9683e0-d7c9-4c0c-894a-5a1adb6a863e", "indicator--bb38e4a1-f948-42da-9e04-bbd15c399fcb", "indicator--86ff611b-1d91-4190-80a1-8c0c7616afdf", "indicator--e1d2106e-aec1-4b6c-9434-33195fc8a8d5", "indicator--0c44e9c8-4a5c-4354-a43f-9e573c272632", "indicator--c1f35e06-9ea0-48c1-8546-a3428ee27024", "indicator--1491741f-2c16-4e47-991c-6993a9541c11", "indicator--7fef23dd-7dbe-46d7-8b0e-04dae24f71a3", "indicator--341762a6-cc2c-4e59-b401-b647e0adb219", "indicator--0745c958-6769-4ecc-a163-f9991d8764cc", "indicator--bb48cdae-0343-4e17-b87e-cc87f2a5b280", "indicator--49b16c6f-4086-436d-ab75-c5c0c12de628", "indicator--e59fc152-6b3c-46e1-9a4f-3d4e22cab3ad", "indicator--fbf54b30-96b3-4e12-8a26-8917efad45a3", "indicator--ba3b10a9-a884-4e38-aa92-0dd0134eabed", "indicator--d446e652-8d49-473a-9fea-c05108320692", "indicator--2b0f0491-21cb-416c-ae82-b8584f47a8b2", "indicator--680e9fbe-3c4b-408c-bd9c-e792da343ff2", "indicator--8b2a6a2e-6bdb-4d25-afef-a9d68fb77766", "indicator--1babb4b5-79a2-49d8-aa3c-eeca2f3f85ce", "indicator--23bec19b-eb55-4a8a-ab56-4de51bf4aee3", "indicator--f143d554-e984-40eb-9ecd-54a348e3b33a", "indicator--08b08e16-296e-4f6b-8d3f-9d6013cb9782", "indicator--0478dd6b-d995-41be-8dd7-84eef6bda95b", "indicator--206fd50f-3bf6-4bfc-a0f4-5407e8e55b95", "indicator--6843a983-ae32-41b9-916b-45162421fad1", "indicator--f6b5f2c0-1c47-44d1-935f-2f92c792e5e5", "indicator--ab5ff1e8-6fe2-4049-be55-b783ba857e95", "indicator--fd25e7ce-83d4-4e74-bc24-b675b478ba46", "indicator--44af3d16-90bd-4406-94b1-1d46bfbd3a75", "indicator--a4e556e1-7a9e-4fe6-b02b-8114508e0bdf", "indicator--de05116d-ce25-4c9b-b6ef-1dfd96b99302", "indicator--0ba7ad78-61a4-4c4e-b2fd-f7e687f7aa6a", "indicator--8dd2a7fe-c728-43f8-9d79-92f8222dfdfd", "indicator--d87cea7b-661a-4598-ae10-87946835a9c8", "indicator--117a5bbf-52d5-4365-b8f6-292df3de357b", "indicator--5b3a8087-2c71-42f2-8faa-ec31205ebcaa", "indicator--b79996a7-e541-42b0-a131-112e0975827d", "indicator--10e93e24-baa2-4517-aca0-048d06ff539c", "indicator--7e932468-0cde-4373-b591-850978200c90", "indicator--16e61295-ee99-42d0-97c1-d86aca2345f2", "indicator--e8ad77ef-0438-4be9-84ef-aa5512a33812", "indicator--57a7668b-18b5-40c4-84ab-d10aeaca0ce9", "indicator--76f6d197-cf64-416e-840e-e9bd28b0644c", "indicator--a2f21d16-e704-4d3a-88de-6ae782c8d05a", "indicator--237e02d9-53f6-4418-8547-5f5b5370ba23", "indicator--4b70dcc7-f4bb-4ab5-98b2-2aacc55ca88b", "indicator--c884709c-7fc4-43ca-9692-105f14e06f35", "indicator--0d0777ba-3566-4b57-92cc-18fbfdc4d4d0", "indicator--6088563f-ee86-4529-bdc3-48af5087f876", "indicator--e303c87f-8a59-4e9a-8031-1ad9950b1263", "indicator--78b7e734-d318-4936-a68c-408d7e1210ad", "indicator--eb1fe457-6905-4a87-93fe-d60435fb3cee", "indicator--a50b3b0b-1116-4d2d-b00b-88d823940ce3", "indicator--a275c228-9ae8-4a29-a0e3-f2e45c8a5cd2", "indicator--a60714ae-201f-4edd-adba-8a9d8c94e8ec", "indicator--f42f6e69-8ab4-43c7-9f15-107344e4ed4f", "indicator--fcb3171b-b8fe-4e51-ac4f-935a8d4de010", "indicator--0bd856d5-b0ad-4283-9501-82cb0f21f035", "indicator--72b11601-b897-415f-bfdb-8d08975ef0f9", "indicator--23000f27-9e6e-4a58-a070-37e7d1ca9724", "indicator--425cbeba-0b12-44a9-9b5a-993f29cad0f6", "indicator--688ff738-afc5-44b4-b1f7-868486143ff9", "indicator--f81bc9ae-c7d3-4e53-9971-bcef04400195", "indicator--fa42c603-b82a-4ea9-ab21-759b80be7f5b", "indicator--cd423276-6d2d-43ba-9c96-d4d06b9ea3d4", "indicator--2e478a31-b07b-409f-bc8b-859ff53013e6", "indicator--1b5993ee-fc24-49d5-a1a8-7378b760ec55", "indicator--c711f94e-e160-41f1-8762-4667b7ec674a", "indicator--c10d79c2-055b-4119-8414-cb8fe2d7540e", "indicator--949d4902-de11-4084-bfd6-f3f50a6f01a2", "indicator--7993ad2e-20c9-4a5f-8759-91f6cf31f003", "indicator--2440aa74-a88d-4d03-b22a-921e245e6218", "indicator--ba2a04df-4222-47d3-b93b-06e0096d218c", "indicator--5953e57c-28df-4f22-9ce9-2bf623436f65", "indicator--169dc043-8b43-4559-9b9d-e291c8f766fc", "indicator--65e0f9c2-6a71-4907-acbd-362cc1d33bf9", "indicator--7cf80a42-3a52-4efc-bf0e-4088d5168772", "indicator--a0e2f1b9-3ab4-4505-b11a-c75f6dfa9eae", "indicator--0f55530b-cc2f-410a-b9cb-b33fef98ea81", "indicator--0cab0bec-db43-4737-8502-6d8bd4edb38a", "indicator--2a2ef45b-7690-44ab-a5ec-45b313e1e54b", "indicator--af4dee84-12e5-4194-92a8-9492869e0f7e", "indicator--7342a537-a1f4-4a43-8217-64d2fb332822", "indicator--abfd1373-c5f3-44aa-9902-7b79c10baccd", "indicator--6dd2b8f2-9a57-4ecb-995d-c6d62f268f0c", "indicator--2579c35b-f4be-41e5-ab93-f1f7d5cc5678", "indicator--d65b7667-7690-430c-8a24-986802890bf1", "indicator--a3c8982c-b016-4b0c-a9ff-151e269488a7", "indicator--3362123f-1b7e-4153-806a-8349bce63524", "indicator--991b44e2-8df3-45bb-8c0c-20be54e3ca29", "indicator--5a175cd2-3559-46a7-b05b-90e8cbc1851d", "indicator--51e811da-f7c7-45c8-bc99-860d5370a70a", "indicator--421e2e29-c090-4012-825a-7985500ee7b8", "indicator--243dce9d-9ecc-4ba4-9928-00c538abd0f7", "indicator--c00c1108-6f73-474b-b7d6-a4e3c623cddf", "indicator--3464eab2-26b8-4074-9c47-8808c5c08242", "indicator--1be7773e-d24e-440b-bdab-e5c0717a9274", "indicator--b52ec24c-349b-49c1-9cec-0b82dcd70793", "indicator--7341e3d7-c5df-4608-84d4-a37e2efc16c7", "indicator--46204a4d-0cb5-4240-8918-265be57cf6f9", "indicator--27a4ca50-e9cb-4861-a76f-64788b9873dd", "indicator--e5bf3a60-216f-4b60-a3e5-a132c81722da", "indicator--bbaff1c2-fa65-4dc8-8ef1-b86d599fd09e", "indicator--8276ba8f-84b5-4ef0-a371-85cab2d61f33", "indicator--21362a4c-f573-45ce-b67a-cd8103b1b9b6", "indicator--d6be400b-6e1c-4d28-8492-ceb5c286d99c", "indicator--920fba3d-a52c-4fb0-ada5-ec3b02cdbf99", "indicator--6381caf1-ccfa-46a2-a3f1-75cb6710af0f", "indicator--78883309-b78b-4ac3-87a1-40ad2d6c5b7b", "indicator--c2749881-929a-4feb-96cf-e30f31ce1940", "indicator--7380b0ad-910e-4df4-8d83-35ccacd39046", "indicator--d630ba61-d058-47a6-92eb-0156c5d7ef91", "indicator--f5775818-e78a-4342-bcc5-acc06d862c97", "indicator--15946c98-fc73-47bb-95ae-3d515ffab319", "indicator--51978cc5-a519-418a-aed7-dcc6c7713c0d", "indicator--cf005621-eea8-4a26-a72f-5af5b9e1048c", "indicator--82d9345a-3a90-4fc3-babd-c471dcdeb37a", "indicator--7a114ff3-0d18-4cff-9bd0-07158a7b7590", "indicator--9c3783ab-7e47-47bc-85c3-72e19ec4c9c4", "indicator--8c2176e9-1c87-4bb2-9eed-055b04de1db7", "indicator--1608b302-6169-4824-a74f-eb691628a3e3", "indicator--f4a27064-8385-47e7-bbaa-7a951e42b751", "indicator--7291951f-ec56-47f4-85fb-ce7bd9248713", "indicator--30d1f121-f994-40ac-aa5e-a16a56405db1", "indicator--4cce0920-d92d-4c18-a1af-94a4d1b502f3", "indicator--b59089eb-74c1-4fdd-aa73-483c04d557ff", "indicator--aaa2cf6d-10c0-4fa9-932d-5a85f96a0ab5", "indicator--c99abd14-56c0-4d67-b159-6b9b129528f1", "indicator--64f68652-a6cb-4890-a7b6-7de77041a2be", "indicator--6fb24b1e-2f0d-473b-8c60-fd4efa637951", "indicator--cce0e1f3-1987-4218-a5d3-35e6cd5a839f", "indicator--9dcf39f1-2d23-4742-942a-79048116786e", "indicator--56159176-10e7-41dd-9da9-3f592be32411", "indicator--e7591117-86ce-4b86-9980-7c0300c16bbd", "indicator--4b4741f5-a86c-4b17-a72d-70a0f1b62e07", "indicator--226b5ae5-ad2e-47f8-9a30-499352a59ce8", "indicator--ccfcd5f1-f956-42bb-b674-1eb506ebad24", "indicator--0804eaa9-ffb4-4035-a764-d4a57e542063", "indicator--07c3f6c0-f7ad-4b8c-ac4d-6d5387d2bea1", "indicator--2360d05b-0179-4010-9890-3217bb2230d7", "indicator--9657c13b-7c2a-428d-98b2-4d89bec138d9", "indicator--5ab44809-f5d6-49d8-9bd5-04f246baf53f", "indicator--e4e818d5-4b26-4c44-b878-c327f304a43d", "indicator--250dba80-9b5b-43e3-827e-cd5c5e5a68b1", "indicator--d6657c02-98b1-48b5-bdb0-79c8c5178f96", "indicator--8e9c430d-0992-4f5d-8a27-ccc22d04181a", "indicator--a7a94a2c-5d4d-4c99-b6b3-3e116a4d44a9", "indicator--5877e072-59f4-40c5-8432-68823fb43358", "indicator--a39bb2cb-7074-442e-8025-db7c94330500", "indicator--bc4a918c-9391-4c73-9ae3-59d0e83ab464", "indicator--7b6c4ac6-f352-4252-b4e2-44f2f2e7293a", "indicator--a0f23f92-6eb1-4e5f-9865-3bda8edac932", "indicator--39dbfe63-3f96-41ff-9a04-213ad8667350", "indicator--7cc8f48e-e983-4c4e-b28d-608451af8211", "indicator--f3bbf38b-da5a-4871-a287-a972cfa63cda", "indicator--61c4ea1b-0ca2-413b-ae07-db157135d8cb", "indicator--3be09f17-2ecc-4533-96a0-ca977cee88b0", "indicator--447223f6-8863-4407-907c-3b180a61f4cf", "indicator--ef535462-c25c-4a40-9db9-ac1877b3a6c4", "indicator--f3cfe0c4-b767-469d-bf20-f7e803912d17", "indicator--dc9cb6e6-697b-4d7c-b872-0af72db60184", "indicator--56658e04-c557-40e3-9200-4afb34e91c84", "indicator--24df364e-484f-46b8-b2a0-3a0236887348", "indicator--95fec48c-ec10-4b80-b5e7-9210e28a1a4b", "indicator--f50122ba-f4e0-450d-ac2f-f798fe6366f9", "indicator--75068aa6-fd14-45ff-b23b-ac9c43ca76a3", "indicator--f63891bc-b07b-42d7-aca4-e196e404bad9", "indicator--aa48c679-9418-4d97-8d2d-80f4928abe38", "indicator--679a1026-80f6-4f2e-8bfc-54857f52d44c", "indicator--f4ce1a2c-be21-4525-91ae-687031e41dbb", "indicator--5f624c89-5829-46fb-b6c1-5b6d3e426742", "indicator--d8f871ce-befb-4df3-877c-dd74815e1e46", "indicator--12eb750e-7cb0-4f91-80a2-926739cc58e8", "indicator--923f00c5-f171-4d2b-90eb-570c1f1d7cff", "indicator--d9ff62c4-410e-412c-9ae8-ba9a1c036de5", "indicator--7c5647e9-a3bb-439b-b1dd-f0c029cef9a2", "indicator--6aa7957f-37a9-48f0-bc9e-242675286e6c", "indicator--dd14fdae-e7ec-49b4-aa17-a8d2ffdf1160", "indicator--3f7977c6-a2a5-4f41-a059-c5be09d538fe", "indicator--b5da27cd-307d-4800-b9f5-d2670f88c700", "indicator--3f96e3dc-bb2e-43bb-9089-e758d67873d2", "indicator--844e04cd-528c-43bc-8e5b-f230db786908", "indicator--11248893-56e1-4140-8251-d4b7cbc18b83", "indicator--db132fd1-12a4-4156-9acb-70807066df8c", "indicator--f2d07446-def9-4492-92cb-72c3044f944c", "indicator--d96c88eb-2804-4287-b8ed-e82d5e419ca2", "indicator--3afee9d1-3f57-4554-afcb-8aa04a149956", "indicator--60eec486-8b29-4b0f-b226-1d2363022bd4", "indicator--8fe80002-c32b-428d-baac-a4f6da334a85", "indicator--3e70d3f0-c68a-48b5-861c-a20200a91b9b", "indicator--4abd7ee4-7c6a-47ee-9b3e-7039ad57a16b", "indicator--da71efb8-9593-403b-9cc2-fbe40f6a5192", "indicator--3bf6d34d-5d59-425e-94a3-3f28b6cc11fc", "indicator--dd0d2163-a5d2-4266-afa6-357860a3c5bd", "indicator--d9471c5e-095f-44b1-92f8-63ce5f2510ef", "indicator--1b9ffbbc-7eeb-47d8-a238-9a4784a19b51", "indicator--56cdbe66-af2e-4a5b-944f-75f9fcb6caf3", "indicator--c1f1f796-150b-4019-a93d-6a55826191d8", "indicator--54a4ccb2-9882-440d-a38b-475e84baa746", "indicator--6dd0e6af-08f9-44ad-b03d-b3348ea8c10d", "indicator--18c3a9da-86a3-4d91-bb9f-1fdfb6cb5155", "indicator--e9df5358-9833-4941-b0cc-aec92943ed71", "indicator--614c905a-6823-4738-9e74-952fbca4eaae", "indicator--ebd30fbb-fb6c-4f34-82b1-c093ad22101c", "indicator--0fbd6ad5-89b7-47af-ad4c-8d453b1e05a8", "indicator--e6922ee8-8021-4849-8fff-3c1cfe5f4a53", "indicator--8b156822-1bd9-48e1-806e-6851eb62a017", "indicator--b0488c49-d22d-474f-a792-c64ef5920887", "indicator--ae4c005e-2f4b-4b17-9376-d0f75f682b3f", "indicator--06f45192-9660-4ec1-a015-9c30d560addf", "indicator--cc42c35d-6535-42d4-a4c4-692c0319d21f", "indicator--a56bc13e-f418-43c7-bafd-daa25a9027cc", "indicator--6638c387-e708-422d-9ace-4490daf839fd", "indicator--8dfe17de-ad8b-4d34-b3f2-542cf6892561", "indicator--a935b50b-2653-4647-8e89-4b5901ab8e58", "indicator--7fa0581f-e042-4724-8a30-923b641f412f", "indicator--512760e6-d56e-4a3c-9cfb-0a2d0ff46608", "indicator--fc7b4ff9-25c1-47ef-a47c-ea1bdd7f2382", "indicator--3c7633a8-e8ab-4b76-b43a-0aa143a39603", "indicator--e54fde9c-7feb-4be9-94ff-135d64450b4e", "indicator--73bbf8c7-21ea-4224-a8d4-91a5a5b4b310", "indicator--ebf83d1d-22b2-408b-883f-1e5b9ee643af", "indicator--bcb7e99e-0329-48e7-ab17-ccdd49e781fe", "indicator--3ad999ee-e1b9-424e-a4e1-90ffef844f55", "indicator--2e00e9db-5d53-4fb5-a97d-5ee67e82ef49", "indicator--8169d6f6-620d-4c14-93d7-34567a3000d5", "indicator--e2993911-efa8-4b75-9096-93881def7979", "indicator--b1dd0db7-eb82-459d-9f17-b02029a3c390", "indicator--17188a54-3846-4dfa-8630-40130ec3ca43", "indicator--5581059d-0205-4cf2-89e7-f65782ffd748", "indicator--59792b9d-1a4b-49d6-bed5-eb30206d538f", "indicator--6e613ca0-170e-4328-9e52-07cf7fac97cd", "indicator--6d330cf1-b958-4f4a-9fdc-ac2f0c8d43d7", "indicator--cb2d109c-285c-401f-8ad2-23cdd59d1dce", "indicator--25d815ed-f980-471b-83f8-186a953488e4", "indicator--a61f1e1a-c47e-420c-9bfb-ac50f4b04ff6", "indicator--e12c0327-59e9-4cb6-861d-7f0d43d1fbe8", "indicator--a8f3aeab-b352-4de6-95f7-f2ff432258c4", "indicator--9ee06537-d8f1-44ed-b487-1dc3ab7a8465", "indicator--67255786-f7ef-4734-ada4-9d9f517d507d", "indicator--1298d259-eac6-4c83-b0d2-b6809afc0d53", "indicator--16fbe207-52c2-402b-91ce-fb3c68c57be7", "indicator--e0a4dd48-6100-40fb-bd7c-da2d25ebcecc", "indicator--2c9adc70-95ea-4fe8-a827-57c17f16a880", "indicator--bd55a1b8-afff-44f9-bd1d-9d4123bb102f", "indicator--8ca34209-05be-4f72-a588-31e18b0fa6bf", "indicator--ea4df71e-31f3-45b5-8146-e88975ef0d0e", "indicator--045d7d6f-4b1d-4d33-8078-01c6b81be8b1", "indicator--8524dbdc-acae-4276-86c8-fa7c00ba4f31", "indicator--8d509174-73ab-4be7-8d16-2df76dc38ce4", "indicator--cab678ba-7aa9-4ba2-9b3c-f21e6428e46a", "indicator--52caf118-3434-4ab2-8c5c-79dcc3d2cee5", "indicator--b948d396-9e32-48d9-a155-bfa5022f8601", "indicator--24d67939-f583-4fbb-8afd-43b857d1b28d", "indicator--53fdef51-ac0a-48cb-8cfb-6add2367ed94", "indicator--b3a08b0e-eef3-49f3-a8b0-6a03e837bcf0", "indicator--39e8c18a-b6e0-4c86-89e2-5c19cb43f907", "indicator--1ae2f1b8-1cfd-4c83-9656-6dfa5977bee4", "indicator--285d7507-d95c-4997-a00b-c1d51c50e966", "indicator--1148e49c-3adc-43f6-8bcc-e68e1deb9c5d", "indicator--b0bc660d-55c2-4281-8bd0-a6b48b7a96bc", "indicator--151b1b62-91aa-4ca1-9495-1da96835c643", "indicator--ff7d9ee5-5ab5-4b07-8c96-d55390fd83ef", "indicator--8ed80431-d2cf-420f-bfa2-62976182e842", "indicator--64a601f9-c93f-4a17-83b5-92b61a4e14cb", "indicator--7c1999b0-3288-41b4-a0b2-8d8c7338e80f", "indicator--c73f933f-02c4-4102-81f6-cfd255794b46", "indicator--333139b8-9a95-4ca8-8f91-417896c50a84", "indicator--871c6611-b2c9-4bac-8c51-99d2fbb979b5", "indicator--096c8bec-22ee-46a8-86e7-4db5edac2d27", "indicator--9a9ec345-88f3-4140-baf9-0b8d4b77387e", "indicator--6c57281c-d94b-4043-94e5-28b1e836c29a", "indicator--e780a3ad-6a8e-49af-88af-371fd07f2a93", "indicator--5d66a909-f780-49ae-ad08-26239cb9f669", "indicator--4f3b031d-8cef-4dbb-a33d-53316ba8342b", "indicator--f50d8186-4bfa-45e6-896d-34bf85b9bdb0", "indicator--c98ddf16-d01d-43dc-8550-d5f92a81f264", "indicator--820f3c47-293d-4967-9ee4-c0732ff0342f", "indicator--4791b9dc-cc24-4bb1-bb39-ff31d55ab00c", "indicator--af534dbf-9be7-443e-b76a-5d618dbcde7c", "indicator--8d52a40a-ac4a-40d5-bf11-a6456cd227f0", "indicator--9f77c6b9-74f5-4eee-ae3c-46dde02ce421", "indicator--ca2b71e4-3dc4-4b56-9659-79ea19a80360", "indicator--3eaffd4e-0e72-413c-9e4f-1e128a3a6066", "indicator--dbf7fb55-345f-4a3a-a04f-90285356cfbf", "indicator--85f1944d-7e01-4bb9-be9c-28e1d10faee9", "indicator--669d2190-dacb-479f-a4c6-9b7325d06d3a", "indicator--f982a35b-cca1-4be0-900c-cc7cd9c4f6bd", "indicator--c5cf97c4-8851-4e53-8e95-8f3f36c0f6d8", "indicator--c96c17d1-2b81-40ed-94bf-cdef79660570", "indicator--da084ce3-eae1-4615-bd57-ca120a5a32d7", "indicator--da433d48-8335-453b-89fc-ec6a3a022223", "indicator--4614fd66-4e8c-45bf-8134-819f4203633e", "indicator--b30737f3-218a-4adf-9fec-1dbe5b932a4f", "indicator--67c3112c-8e9a-48e3-8416-b6d2d95172ac", "indicator--cbe3b928-395d-4e46-80ca-4964c59ceed3", "indicator--fe65b9a4-233c-4cc5-8c5c-cdb1fdbfbab6", "indicator--ab447307-c470-4d13-b6fc-c4fa2c333f16", "indicator--19421721-db77-406e-b8f3-d4f8209ed824", "indicator--617d46aa-1298-45e3-8d00-9ddc50ee2106", "indicator--0ec21465-9793-4cec-a663-b04a68efa58f", "indicator--663041ce-d76d-4511-8387-e71ee97b5d80", "indicator--8255b0e1-6732-4b76-95b0-12bc690c94ee", "indicator--88428958-394c-4755-b60d-eb16f58504d9", "indicator--24bdca99-6838-4114-b7a2-b1ea28589fc0", "indicator--1d0c04e6-988d-490e-811d-ce998dd4f7f2", "indicator--f6d47fcb-47cb-41d0-bd06-1dc52b06a79d", "indicator--62156cf7-f224-479f-b466-ad3cfa93dbee", "indicator--0a7287eb-5902-4544-bceb-d6757e0e9189", "indicator--135f2f3d-9a2e-42cc-bf08-54df97cfaf73", "indicator--801184c0-4ea7-4951-a98c-87e7df263863", "indicator--160ccd7a-1282-4133-a9b6-7144830c3d88", "indicator--9b98d368-3509-459f-bb26-ebfc8ab562c8", "indicator--a478ce17-5067-4631-bbbc-86cc0d15a421", "indicator--d3002244-7f4e-4e7b-a677-41a03f60e7e3", "indicator--09ec9065-3317-437d-b4df-cb53e711f7dc", "indicator--d7654fec-7b55-43e4-9f43-c7d939d39713", "indicator--18f10936-bfcf-4fd8-b56a-55ee3de0137a", "indicator--0fd0fca3-854f-488e-a351-30170ed206a3", "indicator--76b9467d-738c-4973-bce3-0eacc8cbc189", "indicator--f83556e8-16d3-482f-be42-043d3853fd35", "indicator--0f975d58-c0a5-4b71-96e3-27a276abc53b", "indicator--405021bb-087b-4700-9dc0-92e085aa78b9", "indicator--b7203f3b-7b52-41e6-bb23-3765aaf0e23a", "indicator--9e1f6a93-1e27-4e4c-8a79-e2058a44c105", "indicator--b687d10c-765c-4a39-93bd-4cde8588b0de", "indicator--003594d8-ed4e-4afe-bf51-1fe64ec6ce6a", "indicator--8c340ab9-b1ce-4680-a54a-91391042a832", "indicator--ec4375b4-df9b-4807-8dfb-4db55408d235", "indicator--751a4d4b-7c40-4e15-9fb3-6a5ca6bd9692", "indicator--115ac065-b404-47cb-ab66-5037ad7d9a78", "indicator--e3d65a09-9edc-4b28-a06e-cca71bc1d113", "indicator--fa066b59-6ebe-4905-b06c-6c1e68fdf524", "indicator--6d8cf292-9ba8-48d6-9cc6-22bbdad129a0", "indicator--15c20151-be2b-4499-a586-8b7b15ae1c0f", "indicator--3b536eeb-8d5b-4f25-b28a-0bbda22320c9", "indicator--1a71922d-f32f-4fd1-bb29-67a071fc9103", "indicator--e617fad6-2f63-4434-b27a-385d41e4ff5f", "indicator--6f7c18cc-2023-4b4a-8957-a3adc84733fd", "indicator--797fe5ce-a499-4eac-abbf-1a136ceb3fbe", "indicator--f8d7dd49-af5d-42d8-ab57-22ea111b92c6", "indicator--603134be-c1c6-41b8-99d5-7ce07ce8122b", "indicator--4b8c60ef-4776-49ed-b3b1-61e6a7ec27ba", "indicator--e2a82d91-331f-4463-afe1-8f76b15c6ab8", "indicator--65612b1c-10e0-4e1e-82b7-883289e68d71", "indicator--3946beab-6222-4d4d-ab4d-8faa84142734", "indicator--edb29dcb-be9d-4de2-a3ee-743ceec1d1a7", "indicator--9510b222-23b0-40c5-ab40-d839dbafb1d3", "indicator--74d87bb6-dd76-4b64-b67d-acf6daae86a3", "indicator--ce89a79d-b1e0-4851-b317-a8028ad16984", "indicator--8b66ad60-2cd9-4582-bb54-7c469642324d", "indicator--96326bfc-a0fc-470a-8f0b-f961c0735221", "indicator--b46403f8-20dd-485c-be1c-8b1cd4f4b2bc", "indicator--c95ba7a2-b7cb-4a8c-a6c6-3d7933ea12ed", "indicator--e8bd92e5-38a0-4924-aebc-d713e4e5715a", "indicator--32dc8e5f-9145-4e1a-a6d2-fefb72e693d5", "indicator--ee8ade81-0e0d-4c94-bd13-a3186fd306a3", "indicator--49daa4ea-1571-4ed4-b2b7-7cc28c8bdb0d", "indicator--9a6c20c6-2fa7-4932-b240-fb7bc5e69b40", "indicator--3c3e1f87-ac91-4c85-879d-4107b4d4edd2", "indicator--838baa4a-73a1-400c-afd2-0db485ee6ca5", "indicator--e04d2f86-39f2-445d-8b2f-8be25ea11c9f", "indicator--c3e463cf-ed6a-464e-b881-ab3510c7f095", "indicator--b125bdff-e1b8-44e1-8507-09e23659b783", "indicator--d5a4201b-84b8-4550-8674-3329ab4f33d3", "indicator--9be9092a-06df-460b-9436-534dca636ed5", "indicator--0705afc5-6b59-4698-9695-d1d0d53c1ad6", "indicator--ee8b2d8e-a0a9-44a4-9a49-5246da281ba7", "indicator--5781bdbb-3549-4c73-9be8-7bab6349f4b9", "indicator--dcbceca7-74af-44e2-be9c-ec5b6053d9e5", "indicator--a73719e2-9d56-4753-88d0-fd37e74e90dd", "indicator--2c0976ff-a2ba-4520-b2e7-51d81f4fb055", "indicator--fa23007e-3527-4372-8c4d-b357ddb170ed", "indicator--76e281bd-60ed-453a-8301-43424fb823cd", "indicator--0cba6be2-e24b-49a8-8e6d-8705bc2e945e", "indicator--a5096c09-08e3-451e-b18a-aa3872a1db5d", "indicator--f0bfd013-cd9f-4d7d-b980-912a9da23e59", "indicator--e406da93-6319-412c-9387-ee0f495e26e4", "indicator--703fe5c8-0d4c-40d7-88ad-b8482c9eb838", "indicator--a3ee6447-091d-4336-b082-2b573019b50f", "indicator--6978ba27-a1d4-471d-827b-a4f09defec4e", "indicator--5b855207-cc22-40e7-8e8c-802bf0cc6821", "indicator--e6e01e7b-591c-42cc-b805-baa7236335be", "indicator--73170cf0-930c-4bc2-8f58-885d35a7d8ff", "indicator--35e2048e-bf8b-4e3d-a211-a9ac6eba98d0", "indicator--6586ea85-7fa8-413e-90d3-15fa676d6ebd", "indicator--f1c16309-dd1a-4c3c-953a-457cda5d7113", "indicator--519db23f-f4aa-40c0-a6c0-1fba31f39bab", "indicator--d03e9c8d-594e-4bbe-80b8-ac6298a3f8c0", "indicator--fb430fd3-7dfd-4bc6-9f4b-b8fbd040409b", "indicator--36bace8c-eb57-44ef-9b77-4c7c9bf1d3cf", "indicator--25ea52aa-c167-4ff3-8fe8-0e1f2a4cb2bd", "indicator--e19e743c-ff20-4442-81ca-5017c7cea020", "indicator--f6349cd1-5b64-43ff-99a8-1cbda433a4b4", "indicator--2f8d8b72-d77c-4256-b7a1-0a6bc0b0b22a", "indicator--e1cb123a-4c0e-4c7f-8a5d-b4fa4b5b05fc", "indicator--0ccb3446-7880-4f70-a9ec-25338177e60b", "indicator--f5ab8ea3-800a-4015-86f9-496db42347ab", "indicator--a93fb4bd-25de-4ac2-9a3b-3d89779cffbc", "indicator--ac5d619f-ff86-49a5-acde-7e1bb922bc89", "indicator--6cd7a4ee-4337-43b1-8f38-2173d6bf157f", "indicator--5b213b37-9408-4936-88d4-dbccc3583ff1", "indicator--9514e99f-ce4d-40be-bec9-b5be2468c73e", "indicator--8649342f-cda1-41fd-ae47-c0914b2bc467", "indicator--9dfe8b52-f222-4a47-b10e-6d5c63ed0e77", "indicator--e8d99162-a735-44e4-b603-61e0a3e7d792", "indicator--5ed039a2-67cf-4a38-9cbd-0d9c03ed592a", "indicator--f9c1ffa7-a9b8-4665-834d-620485f3fb8a", "indicator--ebf957ac-cbd2-429c-8b13-c72e71f66b4b", "indicator--5ee4487e-649c-4cc3-bdd3-20b0239752eb", "indicator--208e598b-b24c-4676-9056-4a59105e77ef", "indicator--c958afa9-fce0-4815-925e-3174fb54b8a1", "indicator--cdc5658c-a582-4a2e-a38c-a53eb0b400db", "indicator--9c76fc33-e5fb-4223-b840-143737e4061f", "indicator--d04c9089-370b-404f-b869-0bab8b49181a", "indicator--87887ca4-d41e-4cd3-a3f9-b460526e1656", "indicator--2662102a-f109-45dc-a6d3-eeb472c1e469", "indicator--75076cf3-33d1-4264-9223-73c7169fdd0e", "indicator--407bd31d-09df-449f-b513-6a78b927b0d0", "indicator--19d31223-97b6-4b96-99ee-f613eb69605b", "indicator--527ca16d-760a-4299-9695-967008577065", "indicator--094fbfdd-ffae-483b-b4e2-4b1c7c2fa515", "indicator--e8252244-e8f0-4b3a-9587-defbc25df2ac", "indicator--ea94c509-74ba-45a3-8de9-5890111137d3", "indicator--4556823f-75d8-4114-a29a-c241d80a7ddc", "indicator--075203d1-7134-4c77-b56c-3f02665531ea", "indicator--5d62139f-7b4f-4501-9d87-04b67d14efc0", "indicator--2b354e5a-0993-4290-84f3-4685b5c1c83b", "indicator--fdfff651-493b-495d-a552-6159e16c037b", "indicator--8308ac9c-ca9e-4a83-9156-343f076f4d03", "indicator--75644f65-6e37-48e3-b8ba-aeb0fabb3094", "indicator--9de02f3d-5a2e-451c-a53f-7dbf7fb1cd0c", "indicator--18b55f26-c701-4fea-8a4c-2d7e3f2a49dd", "indicator--ce1b47b9-d2cb-45e3-b21f-8b06f3300a86", "indicator--1a821b69-b3f7-41a4-a12d-1231c8792853", "indicator--8193b265-9103-4aba-8687-efbd24e717e6", "indicator--86ea0910-5686-4df5-bc48-60d07956e7b1", "indicator--ecd12d34-b9f3-4bc2-a869-82196d928045", "indicator--a9b71ce5-0758-48ce-b3a3-a431f9a09399", "indicator--b8911e65-919f-48d8-8207-867764e741e7", "indicator--189a1cfa-2bae-4483-b391-12e2a7cef901", "indicator--47f3976a-2910-46b8-bbbb-90c4e9662647", "indicator--1d75ded2-90fe-42f2-a25d-12fa4fb04b35", "indicator--4223ed06-6ccc-46c2-add0-f020ebfb6c43", "indicator--74befa29-fb34-4321-9565-2be63bef4931", "indicator--7b095779-fcd7-4f86-bc99-78e898a18d2b", "indicator--188aa14b-066f-4735-b764-134c0b6c6227", "indicator--3f69e7b0-7b7a-4b4e-af55-a5896cde7638", "indicator--35457438-b3ad-4428-ad71-3a404feb921e", "indicator--ca428f6d-3a93-4455-8596-2b724a6bfa7a", "indicator--181a405b-9966-46b9-82cf-f0e491bf10a0", "indicator--b7906486-50d7-4fa9-8470-644116abdcce", "indicator--4edc5ce8-eceb-4175-9082-fba8d0ae3895", "indicator--592e2634-1efc-49b0-9b66-4c7bcdb9c150", "indicator--d42430d4-d4d2-42a2-98d7-cd51311a1fd4", "indicator--bec45cd4-bfeb-4fdc-a87a-e161d6ffa723", "indicator--7d4420f5-ecc3-4b49-8691-b3596de742b4", "indicator--4bc6f474-d716-4505-81b0-881d3a20def0", "indicator--cedbbc54-469f-4b9c-aaad-00be0c2068d4", "indicator--1c7fb14a-43cc-4ad1-bb57-a3c4d4f0a929", "indicator--083a8240-8a0a-4484-928e-4ee40fc63b07", "indicator--df880ce8-5eb1-4624-92b6-361e5782959b", "indicator--1c24435e-b61f-4e27-b0f2-6037f85b78be", "indicator--63c548e4-c47c-415d-9ee3-b803fd4a6ba0", "indicator--dd902e72-6428-4eee-add3-f46749151d38", "indicator--9ae998f9-c934-4a17-b192-cfc3bc3f8fad", "indicator--35a48c39-2918-49c1-baea-1cd2a32295da", "indicator--c5eeb706-68f4-4bce-a7b2-515d393de02a", "indicator--3e45d94a-8b5c-43bb-a398-68ed2d9b0cb6", "indicator--007e68c2-0f69-4d77-9dfa-9f74530005bc", "indicator--dd319aa7-3622-410f-81ca-e3d48084de31", "indicator--2dadcbd9-b654-41db-9f2b-1b05c8d67c46", "indicator--5f723636-40e3-4871-a4b0-c8bcbf07708a", "indicator--789c5253-909e-4a0f-aea9-501ee42fc193", "indicator--c811ff61-7e72-4a9f-a2c2-d28714f45b6e", "indicator--218bddbb-3369-4f7f-8fb7-675ca2b77c12", "indicator--b7b08735-8207-4e9a-98e8-27334471de1d", "indicator--29317850-af6a-4541-8806-04e947f8ec1e", "indicator--e0b527a9-c2ce-4e1d-a63d-98d97abae820", "indicator--8529bb6a-9da7-4b61-9cc7-6fcb4747ab10", "indicator--ace134ba-eb6e-49c0-871f-980633a76a74", "indicator--bdc5cf17-1b36-44d3-aa06-0d0e66afceb1", "indicator--3d3e3c9f-cf82-40e3-9583-2bf7693f972c", "indicator--1ee8fd10-e87e-4002-9855-e4abe1a7226a", "indicator--8be6e484-2adb-4822-abb0-1416ec311fe0", "indicator--f1bd2745-ad93-4bc7-a0c6-9a3b3f609ed7", "indicator--ea8ad2ca-85b3-45a8-b45b-d35fede4d561", "indicator--e8f9a064-b0ec-4bc6-84ed-2910f47108db", "indicator--d680e40b-8751-4226-8e32-905a413c6840", "indicator--15f8de97-d54d-4e2f-885b-4c23aa2d2acf", "indicator--49dc69b7-707b-4514-9b5c-cfdcbb5ae08d", "indicator--1f63628c-2308-4e7a-897c-d7aa922d6988", "indicator--e191630b-6510-4add-bf30-667fe25f4e6c", "indicator--bcdf9edc-446f-46b6-8be4-526b3687785b", "indicator--49039d08-1bd9-405e-ab9c-bff621ea773e", "indicator--1f9de64d-0ad9-4964-8cc0-0b40f51b451e", "indicator--b840b384-bb2b-491e-9a3e-fdc217dc719a", "indicator--c5719a5f-6da0-48fc-86f0-2dd0d0a8ef4f", "indicator--3e84717e-4a46-4436-811c-d37320108f21", "indicator--b98189b4-0fa6-4dac-8cc1-d7032228a731", "indicator--ed3b83b2-9b6a-4fdb-8423-18cd8def0302", "indicator--6ec993ca-597a-455b-941e-7ed35226ade4", "indicator--705b3d1c-1494-4290-adf3-a1590c80ff73", "indicator--e5aeeab4-bb77-433a-875e-dcf9f299bdfa", "indicator--914bce26-a925-4d3d-ae94-8fb24a9ef3ba", "indicator--fc3f74a4-7f30-435e-a599-746fe435e3d3", "indicator--cd671687-7c22-4b7b-8b44-ec7cd024872b", "indicator--9a68ff38-1b55-49eb-bdb3-62c17882c20f", "indicator--e01cfc25-eb28-4a2f-9534-d671e562282f", "indicator--74a06bf8-361b-4e84-ab12-9c07f5c8690e", "indicator--4efd4a96-6a6c-4997-8b66-f2d17044ccae", "indicator--57ae076a-8828-4cbb-a811-ef7237781f35", "indicator--4255b1e9-c94c-4a8f-931b-f65b4b219c6a", "indicator--d0b167cb-1907-4fe6-a61b-a82cde95046b", "indicator--c7b1a643-d978-477a-9e38-37e779d40ac3", "indicator--13c89045-6acd-4611-940f-58164d8b2b2a", "indicator--b12e7a92-4192-4472-835a-819e83c95f95", "indicator--c3d59e76-c3ad-4f71-b76f-eb98857b2168", "indicator--c96b8add-65ae-4c13-9f02-7136aabf3e1e", "indicator--05f18e7e-e9ce-4438-9269-3a8e52edf9f0", "indicator--af795c3d-9e85-4c68-b05e-6cdeeee17d33", "indicator--420be1d1-f439-4027-bba6-1f2fcb0f8842", "indicator--14fedc4f-7c29-4586-bf18-fe162eb9657b", "indicator--ee513d15-c2a9-43ca-a868-b2c7c7ec34fd", "indicator--af8b3ffa-29fe-4c41-97a5-51eeebb9be60", "indicator--ed0c7cf4-af60-4e22-a5cb-70ede5f00e3d", "indicator--0e402e3b-e336-4d1a-b5f7-ef09f3ef45c4", "indicator--4971279a-51e3-4ba1-8475-68cc62451888", "indicator--4cbc2f63-6691-4222-83ec-23026651460e", "indicator--c35749b0-19b2-4bff-a5f7-821c1e3cde8e", "indicator--6cb6bce0-bbf5-41a1-a9e3-b85c2bafb046", "indicator--9347050f-56ff-464f-8bdb-d666f62fa5c6", "indicator--e9b00ad4-0bb5-4d83-bf73-dd6c604de460", "indicator--fe063751-3a43-41b9-b631-f123dfdca1b7", "indicator--b8703b12-da4f-49a7-9513-d4d430482b0b", "indicator--cd771193-52a1-4374-a4fd-a84e70494522", "indicator--c506d5ee-53cb-4eac-bc60-d46a74f43dcc", "indicator--dbbe8022-e3f4-43a9-afd6-45c1649ac31f", "indicator--01c90cbe-0963-4671-a637-8392818fc2c1", "indicator--eafa3009-385a-43ee-90eb-baf8d19bcd8b", "indicator--1600d1fd-dcad-4571-ae51-a4f307907ab7", "indicator--a1a2f2ad-0127-4b1d-9f2f-5f6335b77f74", "indicator--5fd10445-aea6-4918-9b35-eb4cfadd67e3", "indicator--74b83046-52dd-45fd-a291-07ebb64b2cdb", "indicator--ef9b6fb0-6cf0-4af9-a5ea-aacb624270ea", "indicator--738009f8-cc7b-4a70-b712-146b7c4211c1", "indicator--7401c376-12a0-4a47-a3b7-2b5db27e64e5", "indicator--5fbb06ad-845e-45f0-9a09-c1236c9775e3", "indicator--5253af1f-b130-4d9f-a52c-cb8f357adfb8", "indicator--1eb2176f-a912-463d-9a1b-5dbb8329daac", "indicator--891fbe75-0c45-4b0f-b31f-7f7b661b487d", "indicator--2ecde77a-118a-419f-9063-99be785cf214", "indicator--1eaf4c64-99ac-4f6a-bae4-643b1364c51a", "indicator--d9e38c38-121a-4257-a0bb-321832c52040", "indicator--73998237-626d-4c6c-b287-c1d1ff9154bf", "indicator--206537b6-54b5-4ee1-b100-5f30b60fd446", "indicator--245ee9c4-4651-48a9-ba48-30f568109dae", "indicator--140bede1-f4f5-4211-b29b-c405ca214d08", "indicator--275521fa-9256-4c1e-be04-8c3d528e6494", "indicator--5a129ca9-79ee-45c7-841b-8b863633858d", "indicator--87afbf5e-2e82-4f9d-ab95-c0beea90cedf", "indicator--0cddcfa1-fd86-4992-bbad-f85db98f18da", "indicator--77db69fd-9ac8-472f-819e-457c5821693e", "indicator--ef2d4dfc-7633-4a13-b0fd-68fee8e3675e", "indicator--b5a533e1-d0f9-4381-824b-2ab44abc6934", "indicator--e638774e-92a6-45c7-9bb9-1f40e0a28f00", "indicator--03319455-116d-4333-8a78-fe45922bd158", "indicator--50d7737d-8953-470e-8308-9df962e2408a", "indicator--5e104ae0-c890-4856-b2cc-f03b0c56e44d", "indicator--93be6697-1533-41fd-96f3-2969971ba869", "indicator--4105e402-1573-4429-9089-1e5038495a3f", "indicator--dbfd42ea-b5f4-41c5-aa56-ac597f7e4e1d", "indicator--bdc1683f-3f08-4b88-b703-237090739011", "indicator--22ef98fa-8b78-48a9-8832-b4d3ad2ff038", "indicator--ccef1707-6c18-49ce-a592-0e7301ecb3ce", "indicator--476228b4-dd21-471a-8ddc-a67c5ad1871d", "indicator--e20c6d42-717f-4be2-addc-659d63dc6270", "indicator--779623cd-0a78-4637-a442-97b9292df59f", "indicator--c86e73c9-9312-43cb-a3c8-80a73100db55", "indicator--4892ed7c-d078-4386-9a62-7717145e4dd2", "indicator--569a32c5-a5c7-4bd8-98fe-a93c6a0ac8af", "indicator--1860d793-863d-489f-aa8b-431755201bbb", "indicator--a06436f7-be6c-4641-965c-8b75f7baa4a6", "indicator--0c6fb789-eb5a-4c5f-b696-c4eb94999bea", "indicator--8d0fb35b-8b2d-421a-a97d-b9201b16944c", "indicator--23815256-cbcf-4b3c-880a-9092614a4bcd", "indicator--5e742dc1-85f4-409e-8306-2e397b4a04a6", "indicator--29c9dc3c-a34c-4856-a23e-169183b03a99", "indicator--c5635bb1-f2e4-4791-aea8-d6376de2732b", "indicator--48fbdbb8-441d-4823-82fb-8928a258c3d8", "indicator--34c3de75-a3e0-4151-8ad2-8d202d828ff6", "indicator--03bc3746-4804-4b1e-9acb-ffe6f130faeb", "indicator--910fb000-4bf8-4894-937f-79512f126b47", "indicator--f122b236-141a-4288-af62-579f0b1509d2", "indicator--19c9a53d-d27b-4fb4-bf25-369b505b3445", "indicator--4489adac-49fc-4f95-b09e-7da84d728b6c", "indicator--0cce31f0-acb2-4e95-8c8e-6e84d8737796", "indicator--c3f17a68-a602-4e0f-8c69-51636491a4c9", "indicator--42280be2-85e3-4494-ab22-9bfcea4d34f3", "indicator--609278b6-9859-43ec-8042-7b163e30bc5c", "indicator--67500da1-4fcf-4279-9ad9-bf7163fbcd9d", "indicator--afc01848-6439-4ad5-90f2-568d3cff937f", "indicator--ec8f31f1-381c-4edc-a145-2edf8807c592", "indicator--0261fca8-4e3a-452c-a4a5-9c4f6157cdad", "indicator--a56ac409-8638-4691-adf3-04ed66372876", "indicator--0c6135e7-84d3-44c1-a0db-51b54bf9070f", "indicator--4a86115b-eef2-4904-b3d0-ebf8118d07da", "indicator--cba2314f-e838-4e83-aab4-fe4720d4a326", "indicator--61021c1c-3832-4dab-9d5f-c348879bf26c", "indicator--bc0f0369-726d-46ea-8272-407284696e72", "indicator--98cbfdd3-42eb-46ce-ae11-2e0978d00489", "indicator--bfc2f78e-360b-4a2a-9157-0b0971a106f9", "indicator--d0b158a2-d747-4e0f-920e-123428b77a18", "indicator--dc5c7264-b248-4f9d-a1e5-1a15c8a8a3c7", "indicator--2b45d29c-0283-4070-8df0-0dd3f856b932", "indicator--cd99c87d-e256-41cc-905e-2e0c40f242a3", "indicator--f10aa8ed-09c6-4654-bcbc-254ccc16d245", "indicator--b332bcf1-7cbf-4f0f-b9e6-dddeea8dd022", "indicator--5d582329-5bf7-4f0e-b960-881e9cbfaa7e", "indicator--e84d2ff0-fb53-4e7c-a1c5-19ac5f705b7f", "indicator--4808c407-5aae-44c9-9969-2fc934b6ca95", "indicator--0aa12b27-8402-4e2a-8f94-1a4de1d1669f", "indicator--aa4b6c67-2ce0-4d19-9d88-0ddbc07e7c06", "indicator--5505a370-7776-402e-911a-eef2198665cd", "indicator--e9eec675-fd7d-4de5-918a-7419788dec81", "indicator--134283fa-f648-4a72-8a5b-7a78f1085104", "indicator--a2a3ff1a-7a38-4cf1-84f9-cc6a1d6d8933", "indicator--f57a91fc-21a9-44d8-83e3-d466e5988bb7", "indicator--8e49b7dc-a231-41cc-a5ce-4cff0efa2812", "indicator--c036b147-7ab4-4b0e-b821-2da6ff06c4b9", "indicator--251af526-7bc7-4bb2-b195-81623d1cff83", "indicator--3e40665e-ce2a-4837-9747-a7f5ad6f904d", "indicator--131af435-f3bc-4177-9384-664c16c53884", "indicator--02908717-0c9b-41d6-9424-393b839d03c6", "indicator--c688895c-ecd0-407c-81a1-ad8b6d33baa3", "indicator--c30ffd5f-49c1-410e-ad53-fd39d74d3143", "indicator--05556d9c-0537-49d1-b4fa-29c37a8ec67d", "indicator--a7367a91-71fc-4b40-9a04-79655cd0371b", "indicator--fa1f37bd-2fa8-4b47-8353-c7f414a72585", "indicator--d36cb6e1-5e09-4614-b853-3bf79897d7e2", "indicator--bff28baa-7f01-4d56-b1fa-0a200e18b0b0", "indicator--a85e189f-5d78-4dbd-a7c9-77883cf768ab", "indicator--d2c7043c-3ed3-4333-b91c-3677b1ee4601", "indicator--ac2a69ff-b1fc-45cb-b696-49a9bf97c265", "indicator--5f2876dc-6094-4132-8de2-4e0ed1b3eef7", "indicator--c85710ed-a36e-48fd-b62e-a128d99a5474", "indicator--1172acfe-bd5e-4f3b-adaf-d18af22971b7", "indicator--7931c807-981d-4ded-9b1e-e05f89181209", "indicator--1c89b03c-3933-48f7-a2a2-e997bdf66818", "indicator--6185776d-0fe3-4c67-bcc6-c5bc2140eae6", "indicator--a4201115-4c26-4aa5-82f8-8aa182d87d12", "indicator--88dfab79-8554-4c3e-82a8-1497e8bc4bd8", "indicator--c0f8b954-5147-4f7a-af84-367ccc1fd066", "indicator--3bef9d15-7a23-482c-a977-e4b9af985615", "indicator--534542fd-2471-49bd-b80d-15f704c95c88", "indicator--47cfe8d5-2984-4bde-8abb-6518eaf9e1e6", "indicator--16f0bb51-ccea-484f-9309-5d30f6062ba9", "indicator--1375367c-d07e-490d-87ec-d26ce28d85c7", "indicator--45c66679-4ea7-426d-8dca-30ec7865f524", "indicator--98d240ad-ad02-4ba9-8e89-5a0330d7c0ec", "indicator--9b9b3b4e-e1e0-440f-bc71-63cd32a95b63", "indicator--03ed0be4-bc05-43e0-9ae2-3a6adb511603", "indicator--d04d6847-f440-4c90-b87e-7dd817a35a96", "indicator--8fe78302-76ba-4ece-9e47-51a3eab338ad", "indicator--c3fa01c5-5db2-4330-abce-ad638bdc5018", "indicator--57379dad-a88b-49c1-918a-6b0094176c6b", "indicator--86c78edb-c48e-4f40-ae80-3029588eabbb", "indicator--e8af8c66-f36d-4812-a732-e84e98c68921", "indicator--de252560-0891-4884-86f9-6cb74a41a33c", "indicator--1df4e34c-c576-48b1-8040-a1d0b269fba7", "indicator--d3dc980d-0cdb-49be-8a19-2ef97eadbd9e", "indicator--c4500deb-7fbf-4ee1-95b9-e6d6eefd4505", "indicator--e8751300-5d77-4570-86bf-f5f269805e9e", "indicator--c9b12f8c-1728-4c9b-a615-e3862464d963", "indicator--54f3bdc9-3b17-4a18-9abd-84f7e4dcd3e7", "indicator--6c9ff96e-7394-49d7-9082-2d1f1318120b", "indicator--d445280d-5547-449b-8def-c46196a21690", "indicator--532d4072-a2db-40e4-a4a5-495e44a4cbb3", "indicator--eec769ed-91c6-4968-b6d3-97dcbdd1b13a", "indicator--8e92fd26-5ec2-4613-b1a8-1bac4e0d2f4b", "indicator--ba5bc91e-8d59-48ce-9884-a57812ee445b", "indicator--b7a29214-eb8b-4bf0-9df5-09889027e35f", "indicator--0a0cd33f-e518-4fe8-a6ea-c1d01e5678f2", "indicator--5be770a6-c077-44c5-a27f-e7e408a43534", "indicator--fe004e99-be8e-4e2d-99e3-6c0b7d45ee90", "indicator--390497a1-9df8-4665-94fb-a6d71fdbb2ac", "indicator--455b59d6-5308-41b9-a0a2-d99eaeacae7e", "indicator--6914fd5d-82d3-4db3-850a-f2152a95f82f", "indicator--68744bd0-b2eb-46da-96f6-2187b1d89c20", "indicator--35f5d48d-6efa-47cd-952b-b5b186ab43b3", "indicator--96259e43-214f-4e7e-aaeb-020cb9fb7fc6", "indicator--d0f97a55-e926-48f1-8d9c-a1fcd2856d8a", "indicator--34cc50ef-7e39-4088-87c3-2b6cf2e0f98d", "indicator--e850be30-314d-4cf3-a0e9-4c83d17cee8d", "indicator--ac6a4f09-6818-4b39-a9b9-7920b05b4daf", "indicator--ea3c53db-84a6-4ec9-913d-d8bb5b8ab543", "indicator--67be5cc4-1631-4b17-87d2-04dc97e3c0a7", "indicator--46414d0a-365e-42dd-9082-7e34bc24aec9", "indicator--c33d0b57-472c-44bb-9792-37b71fab6951", "indicator--d831f42e-3719-49d4-b604-f77d9fa350dc", "indicator--24293d40-d3c9-4300-bec8-88b4f7d07491", "indicator--839f3e2d-05dd-4c02-a842-2cdcb26e156a", "indicator--c6a3304a-b68a-4aec-8e02-84914886ff79", "indicator--01c76876-6ffd-42de-9f7e-1c3d3040c8c8", "indicator--423ef730-b19f-4764-ba90-304346ca9506", "indicator--b56f4cad-a489-4a97-b986-8cf0b7d3bbaf", "indicator--09abb23f-ba10-4f03-99cd-c8906649f455", "indicator--de91149b-b182-4f2b-889b-d549da6445aa", "indicator--7f87680f-7e80-4c63-bf18-3e8e3d18585d", "indicator--552fc732-1e97-40fe-aabc-120284153deb", "indicator--2c6e8205-2a3b-427f-951f-20cbf7981281", "indicator--2b7ea426-dac1-4809-8ba3-fbc35597f892", "indicator--f3f592d8-14ba-4ea1-bd90-92fcd2804deb", "indicator--59525915-8de3-4121-9220-c3373a5d45ee", "indicator--6d73729e-ddd1-4931-b7d7-94639b056219", "indicator--fea71043-765b-4f42-974c-42f0c4379cc2", "indicator--74f63f2b-b0a6-4ef9-af06-07d9256548fb", "indicator--9e8ff4cf-a4ed-402f-bfa4-53fff7e5d3e8", "indicator--f3074da5-f6ca-4717-bc36-2e231d59622d", "indicator--fbbe16ab-302e-4211-b477-e215b303adaf", "indicator--28bbaffa-b226-4508-a26b-59317a63ad3f", "indicator--70b4d981-53a4-4516-bc17-303cfdf1796a", "indicator--13a9abfc-b731-4773-8f6d-52bc305f5a87", "indicator--d9695747-c944-486c-9a6b-d8d6400192e2", "indicator--6493a2b9-ef89-4725-b755-423a6c291beb", "indicator--550e1ab3-7d95-4664-a784-702c2f34b5bf", "indicator--6597a6dd-d7a2-42e7-b959-28f9bae2749a", "indicator--af2ce600-e560-41a2-ad11-fd047da9f1ac", "indicator--4f5739df-17ba-4d7f-82ad-e28dc8338b76", "indicator--fc8e2079-e932-4ce6-81f3-6e5c99b91b28", "indicator--3372429f-3923-411a-9be3-a2c38d21636b", "indicator--7e61d604-9670-4c8e-bae0-0ce842036b7e", "indicator--2973a093-86a7-455a-bc9b-a769cf763b77", "indicator--82c51b21-569a-491f-8ace-5526b33f9a6b", "indicator--aeb70c7b-191e-4b59-b18f-007ea8295107", "indicator--463cae9a-cecc-4ec3-8de1-dcf7a8a1f3dd", "indicator--0fa14a47-0b1d-416f-b018-5b34a3631521", "indicator--22cc6700-e333-4845-91fc-ca99f3f69fa8", "indicator--52e84023-d4ff-42c9-9d5a-488edfa0ab72", "indicator--c2bebd8f-12fd-4973-846e-a9e3125b2f00", "indicator--e585d86a-ee24-417f-8361-602632f4d79a", "indicator--22791a3e-7e86-4ef7-b6a8-c3191ec23117", "indicator--78b4dfb2-2dfe-4f16-bd33-64e3a992023f", "indicator--02403ad8-b176-410a-83c7-a1b907de960d", "indicator--0d8ecb41-5a08-42d0-a3f5-36126fdbd7e9", "indicator--99db3c49-2035-4e77-a421-699eeeaea1e2", "indicator--52808bf8-e224-49bb-92e5-ecf77e7316d0", "indicator--9c45ff92-7581-4642-8f37-b0ec866d7cb3", "indicator--e6ea2f19-5bf4-460f-9714-8eede788b13e", "indicator--b4efe132-4263-4b21-95b3-0886ab3f61f9", "indicator--a4ed1560-f3a7-4f68-ad58-83c407ef78d5", "indicator--ea28ca61-684b-459f-b50b-a486aa869ecd", "indicator--ed964130-4a22-4745-ad47-b33989101f22", "indicator--ec2b7fe2-368d-4e13-8022-ccf2e6cf05ee", "indicator--e72f0a76-134a-4f3f-99ca-20a352b9593c", "indicator--467eb92b-970e-4ff1-ac0c-f8dc6ac7d87a", "indicator--cef2bb50-ee96-4ac6-a6b6-0c80cdba4ea0", "indicator--db25ccfa-94c8-4b9f-917c-024956e10157", "indicator--a8d1714a-d676-43fc-bbbb-c2b7a1631230", "indicator--63bdea47-f01e-4ac9-9fe8-c10b903c9353", "indicator--b337ee56-7f3f-4abd-a392-99dd562ef0b5", "indicator--9a7a0faf-05f8-49e4-bf64-c33f334f3ddd", "indicator--2806d59e-cf68-4abb-a983-64aac913b431", "indicator--b7726e74-e02f-4cb4-bb90-dac6355782ee", "indicator--2454aa02-e143-4d6c-97da-17b178a46883", "indicator--8b83ac89-8d68-4f1d-8218-97d3f7b6fa70", "indicator--831777fd-d209-4879-b368-28d2607978b0", "indicator--bc71921b-06b5-43f7-bb1a-b62567cd4a13", "indicator--60da9032-aea5-4d44-93d0-1f860f47dab7", "indicator--05ed37e6-3536-4c64-8906-bef338813c22", "indicator--9f588eb8-a186-4cc9-9153-80995784cd82", "indicator--e0327eef-4660-4d94-8130-b9e3e2efe959", "indicator--2e13f145-816b-4f31-994e-6fad48331d69", "indicator--f1073e62-57d3-41e0-aed3-2ca4fb54be48", "indicator--1af905d4-78ae-4b34-a88d-7281e1adfa45", "indicator--20f8b99d-98a9-48ae-af9b-b41b005ce845", "indicator--98fb2f59-c5b0-480f-bae1-91c59130ea5d", "indicator--a3d124a3-eb52-415b-841a-5db5d0182d03", "indicator--df203bf7-b5b2-4876-a664-3dcffb857351", "indicator--a77b4579-87c8-4abb-a5f4-56e206abe273", "indicator--f58dd107-07e4-479e-b3f3-1c6afb7f3c6b", "indicator--ccad8a0d-79fc-4c32-97c1-00a799a0db0c", "indicator--dce59b38-ec91-4275-9f3e-9dd874c05f98", "indicator--996194bc-d719-4402-a7e8-7d82f88f0ab1", "indicator--42e38e1b-9337-4820-b97b-e02f50133d59", "indicator--96465a9a-7e26-4e62-a37a-5a5f4aeb06f7", "indicator--d6f8ac5a-9726-4b6b-8378-404032e189ae", "indicator--a95cf2b9-e8b7-4fe0-8f65-d9472376f344", "indicator--3d0018bf-764c-4709-b1d9-1a9b28314b46", "indicator--58784a7e-54a6-4842-a83a-a970983b77ff", "indicator--59a16236-f59f-48dd-aac0-15f1a27ae03d", "indicator--8a498e0d-945c-4362-b6b9-c4c45e5f7b12", "indicator--99fb9137-c833-4fa2-9295-583f27b750ca", "indicator--bc0f332c-18e3-41d6-aa23-eab0e794508a", "indicator--a6b04622-eded-43f6-9c61-a41c0bebe114", "indicator--332518f7-9344-4ad5-b46f-fb68ef5513c9", "indicator--617595fa-99cd-4bd1-9076-7c001c9d5950", "indicator--9af4eb0a-d618-4e25-95d9-19e42873cc0f", "indicator--438d3c83-4299-433a-92d8-02938a65d6b5", "indicator--9bd7a1a5-e1d3-45cd-a404-192e079b3922", "indicator--506a797e-1e6f-4e1f-951f-7ce4cf38f4da", "indicator--6ab9a649-0d89-4104-a8c0-a4176e039467", "indicator--01cb8244-a517-4ad3-bfc0-7143744087a3", "indicator--e2080a30-ab89-4ca9-b1dc-92c93f354c76", "indicator--b8a9776c-4d17-4344-8ae6-a8fc37c94ef9", "indicator--62c63608-21bf-42a4-8c08-fac4af1ef0da", "indicator--842c0606-272a-4b91-91e4-6bc8588bf5b5", "indicator--92a2d8d4-e342-4d16-9b7f-452c35dc7f3e", "indicator--354dd0e9-7f4e-47d2-8430-e939acece80a", "indicator--7b7d68ee-f99a-4bef-94ea-c0b8fb1dc36c", "indicator--31948045-02fd-461f-a6e9-8fe5abd00e23", "indicator--c97fe489-5f7b-4602-b64e-e3aabd972389", "indicator--d21ef560-439b-40f2-a39b-025ed6ea5467", "indicator--ba9ba096-45ac-4510-84ea-88951f2baf19", "indicator--b4038371-f5f9-485a-b849-25d5c9a7e45e", "indicator--2f8a95cc-dba8-49b2-bf49-b0d4abde7b5f", "indicator--6baa94d8-8334-46b2-878a-beffdcf9ceed", "indicator--e3d195b4-19e2-40df-aa23-74cb8503f02e", "indicator--72a1de9b-540a-49f2-a9e4-3cd81e505c8e", "indicator--155fc406-b600-4598-967c-c9d66583cf6f", "indicator--15259327-7025-4b60-8017-6abca967f549", "indicator--de0fff43-a766-4679-94a5-7fcb2d516bf4", "indicator--c49242c7-41bb-47ff-ae6e-5e6cb7ea4371", "indicator--fd49f82d-2501-4c49-8457-510bc0a7b524", "indicator--8f80eef7-e192-454c-9f7a-cf9b8f4a86ad", "indicator--2bc40971-3bbb-42a9-bff0-4862c9dba8e0", "indicator--082120cc-d190-4eee-88cf-29f457e8f702", "indicator--373f86c8-d5cf-4030-8318-5ff98f6a5d03", "indicator--2bdb81dc-f4e7-4fe5-a8d5-6443a9e754a3", "indicator--ccce645c-b53f-41f5-bdb1-d5d006fe58c2", "indicator--5a549f2e-8956-45ec-8eec-a63b3545e6a9", "indicator--0c139981-3b4d-4221-aed5-c7852e0388b8", "indicator--ec963f82-d21b-4ab1-84a2-da52e3e30689", "indicator--9f21ea2c-b9de-4b91-9f03-b87380db0d40", "indicator--9e45b653-da57-40a8-a74a-aac5d460486b", "indicator--d53b7ccc-0429-4123-badb-470fa5d08937", "indicator--9645f20d-f8b1-44de-87ec-5285da2894d8", "indicator--abe0de74-62c2-4972-aad7-ad2e6aea3ef5", "indicator--e95a6ee9-bed1-4112-b6fb-366dad183781", "indicator--64dfc274-5cea-4f14-b744-d637e344391b", "indicator--8c917034-3b74-45df-8428-e53061688ddf", "indicator--751907c4-0708-43b9-8a53-3a9e9f2f5f65", "indicator--45520a86-dcfa-4ceb-98f3-0cac06d3d371", "indicator--fd20c3ba-94c0-4408-94e5-77a64060bd72", "indicator--9defc6ed-4b97-4f7e-a50e-deefefd2c31d", "indicator--69165807-06ed-46a3-9b0c-6b1acc522638", "indicator--e70b22cb-8825-4abc-ac0d-5613299df951", "indicator--f08ebccf-483f-405e-9de8-54cbfc14f194", "indicator--acf52854-8ba5-4c76-bdca-4d32b2d0219b", "indicator--c8979210-44c0-4678-b4e2-f8c133f24a71", "indicator--176b472e-6cbf-4172-a532-9c66d5b39981", "indicator--b7efa836-804d-40c1-86d9-5683540101db", "indicator--9b96d49f-a487-49b6-a357-0ced4d30d850", "indicator--434d35cd-3f6f-4f1f-9c28-d1114ef49bf5", "indicator--35d8d31b-549c-4902-b50c-a8148bb1ec8a", "indicator--d4a966dd-95be-4c2d-bebb-3a45c09dc99e", "indicator--d5242ded-4a36-4457-920b-4d4d51853f6b", "indicator--431a49b3-f589-428a-84b8-ae4e8258fadd", "indicator--55ad4ad8-e792-4559-90c8-cf7c13eb374d", "indicator--52f6085c-df0f-47c6-b08d-b1dd2f56dce7", "indicator--d8774fde-bb1c-4944-ad70-bd0db5f892b9", "indicator--98e2420a-36bb-4964-82c2-2097922e6347", "indicator--e1547804-3a5b-4a8b-810f-d722b8e512e7", "indicator--b5407a12-4dab-4c5e-937f-a6e24d418698", "indicator--14590167-8bab-4052-b8cc-3813f9a2a572", "indicator--f2b4bdba-c954-4c6f-adb2-8a8033d62713", "indicator--a3caf389-3972-4bb9-a7cc-1b7a1d3f9d64", "indicator--b2607a50-b78f-4c03-8237-ff3011bdd09f", "indicator--8c302218-3eb6-4e25-8b0b-f5378f946833", "indicator--8c1aad63-f6f5-4710-aeeb-dfade681a0b3", "indicator--ab53fbf2-8813-41cd-8568-0d10a7127abe", "indicator--b33cb985-f127-4deb-a122-3cd5eef51a17", "indicator--16e96e35-8601-47a6-bed8-3b6a4c5e2162", "indicator--f4bb277d-89c8-4382-9bab-88e2b369fefd", "indicator--9ad4357f-9612-4595-9279-a4c9f815ef71", "indicator--c77db753-6240-422e-be7c-b8613d709127", "indicator--4cd399c9-d9c4-496e-bc56-9227a52d1483", "indicator--0c9c4b3c-0b6d-4800-bf60-c0b5bc4441c5", "indicator--a3ea03c0-5a3e-4a3e-bc22-247ef187b974", "indicator--f3b192f7-c970-438e-b63d-652d49708656", "indicator--3b41ecfc-aa9d-4955-8a80-749950e04171", "indicator--33b589e1-9c69-453c-bd0c-f6b0ae637d7b", "indicator--2eefcbfd-d54f-4eaa-97df-6cc154315677", "indicator--c313e83e-4dad-4c2c-999d-d10ed95c3bb7", "indicator--b1ac2f87-fb15-40a8-8bd7-6b2524a90e60", "indicator--fae053a3-d62c-46cd-b942-f877b8c7d319", "indicator--f6539df9-d2cd-4221-b7f7-0d4f2e22a3c1", "indicator--729ab423-cba5-4a5c-a759-cf1afd78682e", "indicator--109820e1-3d06-402d-9d8c-4ccaa9068216", "indicator--1db120b8-0573-42fb-b4ec-1dff5cc507ac", "indicator--3b4ffa13-ea62-413f-8a6a-3921440d9ff3", "indicator--f4e563e1-41ef-457d-8a31-16bb75025a5d", "indicator--7e62ffd3-be3e-45f8-99a9-d281a62a165c", "indicator--f5cd36b7-0ef6-4946-87d8-b4d4309efd25", "indicator--414cdafe-9ad1-4f92-9ee3-cde5766d595d", "indicator--05ab9651-00ab-44a9-995d-669620c7b695", "indicator--96db3ca4-e4ba-4f9e-b50b-7024190c2e65", "indicator--cc7d9da2-e9e4-4d58-9ad9-b43aefbe218e", "indicator--8d824a76-7489-4bb4-8ebd-905d8780220b", "indicator--43905199-1842-473e-9fae-e06e40971d08", "indicator--5b81ef35-1a24-4c71-817c-3ba77aeb3881", "indicator--7d504255-678a-460a-a9cd-8914c4d35f5d", "indicator--acc9b018-3fec-48f7-8f42-6adc990aaaaa", "indicator--a4cb8eb5-5f4c-4f3d-971f-19c472dfd88c", "indicator--1b4ce0e1-de1f-47dc-94c9-153793a06deb", "indicator--5515ede2-6313-41dc-88cf-8e61c751e672", "indicator--37933a44-39fd-440c-a3a7-f3b6e388ff16", "indicator--589541c6-3149-4344-9961-023435dee07f", "indicator--f6c9248f-1ae7-4b33-b19d-6b2f65a1cdd7", "indicator--cd21313b-8f62-49e2-8833-fdb0db710282", "indicator--ca7841a9-06e6-4fe6-9f3e-5aec9e5ae34d", "indicator--4b95b2ae-ab87-45a5-913d-a1ae7392b2a3", "indicator--7ca086bf-cb7e-4756-aedf-d53b7f360764", "indicator--e43494df-c509-41ed-93e1-5c1feedaa1b4", "indicator--7573aeaf-75d6-4f70-a493-bd7fd1385443", "indicator--674e8041-b1de-41f4-8070-36d76895c616", "indicator--03160142-11fe-4c61-a783-58b7dcfb6754", "indicator--00eaafb5-7a4b-44a2-9316-af24c5fa184b", "indicator--ed2cb4c2-aed8-416a-94ec-e46474a79d52", "indicator--963b7e08-a17a-44ef-a94b-93df2b180a52", "indicator--35f52add-66d4-4e03-8a1d-bed462dcbb46", "indicator--48b52bb9-d002-4514-b2fb-644a5cf86461", "indicator--8d9ab0e6-baa9-41b8-bd36-54c24c1b4f90", "indicator--1229433c-17ce-4cdc-9bb2-cf9fb9e6b2b8", "indicator--14725d27-219c-480f-9a65-106e2b0e0d03", "indicator--71d4d0b6-f6e1-4316-9327-6f1ee501db79", "indicator--884976c1-bd1f-4578-9b0b-f89f43428376", "indicator--2ba14978-9af2-465b-94a9-03125cc00773", "indicator--11d1b961-58ff-476d-90cb-e5ea3ec3d1d8", "indicator--0e075644-c6e6-427a-acea-af746077132b", "indicator--646dce86-ade1-4ff8-a663-ad62a93aed9f", "indicator--18fef139-bf6f-4265-81dd-a1eab77b5b6e", "indicator--1e68cbcd-f402-4579-b72a-da482af8bf02", "indicator--4eb5bc97-8ecd-43c8-8783-b0592e7a188b", "indicator--b303a070-bf21-4dfd-aef5-231ed48cb393", "indicator--be90007e-04fd-4ad5-9795-9475bbaa7950", "indicator--902d3632-778a-4fb7-a94f-9a86bad1f727", "indicator--41bc0c0f-edbe-4b00-bb34-502f16ea419d", "indicator--4e4058dc-a1bb-4453-b967-7650a4566a54", "indicator--da91c5db-e808-4251-8702-4c0dc334fdd6", "indicator--f3ead1dd-aca1-4e02-9916-cf3f8590fbdc", "indicator--a4d57f15-2da0-4164-8eb9-dff9670d39e3", "indicator--5eb58fa2-ebb5-4c1f-9d1b-e9e72c543542", "indicator--78b6f7fc-5b0f-43ff-8646-42850e917437", "indicator--fc17783d-1ed8-4e02-8fc6-5b5c10453557", "indicator--7fed373b-018b-45fb-add7-73a91316478e", "indicator--5b6577ea-d13c-4ea3-9a34-6783fa9db03a", "indicator--7558f9d3-aef6-426a-81c3-0bd973f8a144", "indicator--b0579e03-db5f-4b63-911e-b96a90daf7cb", "indicator--b87699b5-377c-48bc-94d2-ef5c98c00296", "indicator--c0bc3c8f-ee8d-4d0a-89d5-e45c98d9d587", "indicator--f0614d8a-ac3a-49a6-8934-b2b88d0cf9d0", "indicator--0c6906b3-596a-4640-8c17-313be14ce0c5", "indicator--61650d94-41a6-4d98-a5f7-9388b24700e9", "indicator--9d2fda08-b877-4873-9860-9fd3b7f28cf3", "indicator--c4ae5c5b-c9bb-4f23-b730-437be58d9d41", "indicator--f11409f2-66dc-447f-8ece-f81416c5268c", "indicator--e0c6b946-3292-4a93-b4bb-6786557322fa", "indicator--b5f90a7a-c720-431f-a8f6-fbd887edb657", "indicator--401a1cfb-7592-46c6-9b78-d06edbb0d215", "indicator--a3725b11-2ee3-4b98-906a-d2f9f7d5c358", "indicator--ab98f37c-275d-456f-a2b5-917a8550748e", "indicator--b5a507cf-2213-4932-8fb4-2660f748c9a9", "indicator--55481872-fad8-47e9-9791-9e75bae57c62", "indicator--e2f38dc1-ed2e-4b4c-9a05-0e805b9bd11c", "indicator--3ac3fc5a-9746-46ea-8560-2badfbd6c49d", "indicator--65ce9a64-ed37-4fbd-b27b-019bb3a3f856", "indicator--ef35cefa-ed71-453f-8d2b-f5e5d10ead13", "indicator--095f8d65-94c3-49aa-a716-e600840ed780", "indicator--adcb9e99-eced-4cd3-9552-0265d35f772a", "indicator--94010a11-27c2-47f7-9b7a-8cd7ad5d5d57", "indicator--881163bf-084f-47d4-9df5-6bb9c5017fbd", "indicator--96f8e205-b4af-48a6-a357-2ef92f0ba30c", "indicator--beb3b365-a963-4b65-9481-7b278e02700f", "indicator--00fc49ec-dfde-4651-8a40-8c2ce4d2f6f0", "indicator--068ad51c-fbb2-47f7-b269-cb6c761dfe59", "indicator--44ddedae-209a-43e2-af4f-4b475886a1f6", "indicator--8bf63e5d-c5dd-42b1-8922-7d4a4a14a2ce", "indicator--ed8b1b4c-e065-4121-8f19-6f858e13658f", "indicator--0b8d1698-6f37-410a-9334-7a8eef10586f", "indicator--8746ab65-e88b-4d9b-a89a-e7e1b66b42d1", "indicator--70412212-9b06-426a-ab7d-6064e968f88a", "indicator--ae7da8b1-89b4-4b82-89cf-a47adf38f6fb", "indicator--43c56dc3-6cc4-4e2b-8044-5790cbdd5dfa", "indicator--45969232-d58d-475f-9a52-304dd9d40563", "indicator--3b7cb6c4-258d-4f3c-bd0a-5c8467163fe6", "indicator--eb626cc8-df2f-43e5-bfd2-cc9233664ed7", "indicator--18799b15-92b3-4e2b-91eb-cff4cae8b6f0", "indicator--5d6164c0-6bd5-4ab1-9760-453e63b26ef5", "indicator--6499f080-c690-463e-9798-31d2db20a33e", "indicator--ccb0489a-0b07-47f5-aa62-8dfee10179c4", "indicator--9ba5d15d-fc7f-4420-8659-6e85f6bf4b4a", "indicator--a63ff807-10a6-4ecf-91af-984371ebb086", "indicator--15e6edbf-27d3-4479-a824-db8d75d3c8c7", "indicator--cd1cce4f-a51d-463b-aa9e-d0ad792e24f1", "indicator--49c73bac-5b61-410e-bdc1-ba7ab63f4d09", "indicator--791057a7-6527-4cc6-be21-5c0b130bb663", "indicator--f83b900e-81e5-49d3-bba3-32556881c4c6", "indicator--de4db865-117e-4967-b832-88a2b2058a12", "indicator--772e64c5-5898-4ec9-92ca-2a332da42b5d", "indicator--fb8a747a-d17f-44ce-a4ef-4d4bea3f79d9", "indicator--cb2956fa-2f5c-46ee-8321-c4db6cb67603", "indicator--598689fc-dbbb-45fb-8be2-4c8d51639664", "indicator--d1ed59b1-8109-4030-ba21-fbb738d43ea8", "indicator--d8578ddf-0d14-4aa4-bf88-1e08fbd10248", "indicator--4b888701-404c-40cd-8b04-d08d6990cefe", "indicator--24e8e7ee-a544-4266-852f-7cb53fb405b5", "indicator--ade5acaf-1bc1-44a1-8bf6-2d8b3445222d", "indicator--04c3fb53-fa59-4001-b3f8-360a04e4cc00", "indicator--4620bcd6-ecd6-4bee-b2d3-85fe1815a8e8", "indicator--57754d2b-2973-459f-aaf4-0410a167456c", "indicator--e2c08f4b-237e-4194-bedc-768e33a40b97", "indicator--84f4dc08-2af0-43ab-bbf4-21b0dd7cfa9d", "indicator--63ffc4bb-7039-435d-8cfc-94101e0bb739", "indicator--a2faa5d7-a216-40c4-9a35-fa4a531c7db6", "indicator--fe4ae6ce-1da0-4505-b32c-722502140edc", "indicator--fcaebcda-a822-4b6f-8168-c14b9fd46f32", "indicator--0cebe521-e89c-44df-8e93-8346e91068f5", "indicator--757d86ee-5c08-4dfb-9e12-7ac5245136ee", "indicator--cb5b5ed9-1824-46db-a416-ffc234f8892a", "indicator--c344b8e5-34df-442f-97a5-596858e7b034", "indicator--3f19b237-e13c-4deb-91d6-e7f8fa7dc395", "indicator--717be8a3-ab7d-46dd-af18-15f1861a7365", "indicator--1424faad-5685-4e03-a415-335b1eab2e63", "indicator--a5084ef7-9c0c-4fd5-be41-8b20660c8b12", "indicator--1f313dc3-948f-48b3-9f9d-f0c9cef7ed8f", "indicator--26e38a18-5ab0-43b2-b196-d920b50d2550", "indicator--3b70f4c8-6ae1-4bb0-9641-e2341af25cf1", "indicator--e02b5a96-3d57-4a7c-9c8a-4e70960d63e4", "indicator--09aa6787-e360-489e-9598-39fa8ccc6101", "indicator--506e1eb3-a578-4639-9e43-1bd9c810b036", "indicator--d4b00da4-722a-45ba-8358-05c49fec89c6", "indicator--65813b90-2889-47c2-8eb0-ff668da76699", "indicator--2eed1c2a-fe52-44ce-9bb6-444c251dead7", "indicator--1eef1149-a4f6-4f6b-84df-56f93d6b4dbf", "indicator--3d1d56c9-32e5-4986-90b3-84492b807fdd", "indicator--715bcb71-b462-4bc1-be4c-589061cbba4c", "indicator--53ea3c90-6169-43d9-81ad-70f7062869d7", "indicator--e7ee5e8c-eaa6-444f-9393-539bf2e2cb2a", "indicator--6267dd26-6626-4f5f-82cb-ad35bbd4a4d1", "indicator--3e34b06d-d05f-4b92-b598-94c01b8d0929", "indicator--9c1708ad-e23b-4b71-8692-52ddb5782dae", "indicator--6e6f5acf-45ca-41b4-8782-c2e2c811bfb0", "indicator--ce04792e-aaba-4697-88cd-a56d523a323b", "indicator--277b2237-3448-4234-8cde-c8e75e121ce2", "indicator--d59a76a9-8b07-4c72-a802-75b6c6ccff37", "indicator--36f9dee4-257e-4279-8a9e-1898818b0bb1", "indicator--8165bf15-9394-4856-afcd-193b28c56f4a", "indicator--67ef6b49-edd1-4acc-90a9-f18f21f426ea", "indicator--0b21d83d-b6fc-4b9c-9221-4f36f035c47a", "indicator--9d10a52c-e5e0-440a-aa2d-03646ebea569", "indicator--1f500b77-415f-4ba6-9086-7e4218f8f80c", "indicator--c81c231c-6055-4321-bd3d-4d8947116fec", "indicator--6d6df80d-c8a5-4c04-b7d0-1c718ae5671b", "indicator--92d4d6d5-1d21-49db-8e38-344236c50db6", "indicator--742fe598-9d29-49de-8226-afc7470a5ff3", "indicator--1756d024-10ba-4128-97a0-b7cda8ca1808", "indicator--cc031710-52c5-4a2d-81d2-ce99771d6028", "indicator--cfb0ed24-ab7f-4a84-8672-b50091821e0c", "indicator--e1a9d518-7f90-47ee-92e9-fddba6471810", "indicator--ed6b3809-54d9-44b6-839b-9552f3fd3b28", "indicator--f8f04f61-03fb-4fbd-8194-fdd23d96fc04", "indicator--ded4e8b4-acce-4b65-b3c4-7ed8e7917d8c", "indicator--4d830758-a30e-4b87-ace9-01fdf5376afb", "indicator--6823cc92-ca4c-4c7d-9fdd-f12628b64f2b", "indicator--92bc935e-5e41-42a5-8592-58ea13dc6508", "indicator--19d34dc6-3ab8-4cdc-8616-34387ae2ade4", "indicator--d0292337-c0ef-40b9-9a4e-6bc53e9e51a4", "indicator--fb409623-80db-463f-90e2-7daa7518c831", "indicator--d2df66a2-146e-4eb6-a1a2-863f9e39d70f", "indicator--13e00dce-c046-4c69-9561-c40e3069d097", "indicator--4e55eddf-efb9-4ddc-9f81-9878a0427854", "indicator--7302c531-42cf-4143-80d0-8ac470f1f138", "indicator--f30d13d7-69fa-4e27-bedf-88c964f84198", "indicator--f496bd2d-37a3-44a2-af45-7ab0b2f909f2", "indicator--a1f190c4-01b8-475c-b249-564ee9231e65", "indicator--dcbb954a-1573-4a5b-ad94-4cb5ecd53d7f", "indicator--48fe8fcb-7d1c-4fe5-b50a-e09d54c4164f", "indicator--4b3ddbad-804d-403c-b12e-23670438afa0", "indicator--f9497eb2-d243-4b77-a739-4f5f84d88f66", "indicator--45dff009-6626-4a7d-a0d8-ff4560d468a0", "indicator--0515a102-b7fa-4344-a6d4-fcb0ad46f4e2", "indicator--0ee31c98-38a8-4973-9162-83ad5dcd4020", "indicator--7b190432-f68b-4686-967f-6e2236e2b4c6", "indicator--6bee5531-4677-4b18-9acb-1562eb08693f", "indicator--30ae70cc-066c-4a08-a788-f85d498a0cd7", "indicator--cc15054a-7dbe-4ca2-bf2e-8126abbfaccd", "indicator--8c8ba344-7fda-458b-b5c9-fd733e6b1071", "indicator--487cba91-177b-4cde-bbd9-ed557ed35c34", "indicator--8f9211a1-0e00-4718-a7c9-0adda3544731", "indicator--6ba64d46-df86-4c99-9568-5b79fda87ba1", "indicator--0159c007-f945-4892-88f3-c7545a597bb2", "indicator--fc7067f5-2e7e-4444-91ee-567e379f3152", "indicator--5005345f-9e92-4778-a063-dc62b7498594", "indicator--720c6228-f9e2-4b59-8924-2a85f4b9a17a", "indicator--10e6f515-d5e7-40f8-8260-d6649c1ce0d5", "indicator--14f57383-7149-4dc9-a157-b2f400c29277", "indicator--22695db4-658f-45bc-94a6-4c5d5cb1f76f", "indicator--e626a393-a518-4857-a6f4-91cd4a624bef", "indicator--63e8628d-22a3-49a9-a2c2-a58af3f06049", "indicator--b90961b2-5e8c-4a37-82a4-5b4d26e38653", "indicator--1738e1a7-6a64-4ea3-b6f2-aaca67a0a307", "indicator--95b08de8-bf15-42b2-a580-8e2c99f2f3d1", "indicator--b6f2dd2c-9d68-4e8f-9c56-cd5ec0d42170", "indicator--79b169f1-35ec-4fb6-b60e-91d562370120", "indicator--157b8a7c-6ca3-48f8-99e1-7545ab3da47f", "indicator--37a59dd8-be4a-4686-a5f0-6eaa4ce7d58a", "indicator--07e9188c-5237-4868-bbde-e41434fe8a7a", "indicator--fc2474fd-0cc1-4f75-b1d2-3697d30b0352", "indicator--12b5d24e-a854-4ea3-b46e-36f8decb58f5", "indicator--1e9b3b74-2202-4af0-ad94-1378a279f40c", "indicator--4e9c094b-9737-48f7-8fde-e33b4005b93e", "indicator--96f657e7-d6ed-4371-a9d2-3f65e57a32d5", "indicator--cbe27c47-a31b-4747-809f-50740b53d349", "indicator--b64b32c0-dee3-4601-b893-f7b938966aeb", "indicator--03b5b312-ea7c-4aec-abd6-ff8aae2ef851", "indicator--c43c7b2c-0068-4642-a4b1-b9dc130a807f", "indicator--bba271e5-635d-46a1-8a7e-3a3fa99bbdaf", "indicator--fa06f82c-f4c3-4216-a94f-4a8fdcd46300", "indicator--dd9ebdee-c178-401f-bfed-598bbba15ae3", "indicator--0f741f65-dba7-41e3-9552-1b2dc0f56fa7", "indicator--fcf13228-972d-4a17-9a16-35bc0394a90b", "indicator--e8cb76bc-4755-4012-ab3f-0169fc72147b", "indicator--73ec298e-0030-4b5c-bd76-b0bfc265ef50", "indicator--2c2d7b72-54f0-4778-babc-0430357034c8", "indicator--6551d0a1-9881-4355-a9e1-9c5eb49470b0", "indicator--dfd3f910-c68c-44d9-8e75-a00ba90a6a8b", "indicator--2751e137-c0e5-42bd-a59d-c6c5b177f92d", "indicator--e8b421a9-6050-4364-84ac-2262e1d80e61", "indicator--2e62d11f-d846-4aad-98ab-65559426edc7", "indicator--bc5908c4-b972-4d8d-805e-06329afae3d6", "indicator--f2cc5ba2-ef1a-41b6-993d-2e03b798a6a2", "indicator--5b55528b-f119-4f4a-9917-ca62d65163c6", "indicator--fd276f49-98b1-4553-88ef-3c642b528fdc", "indicator--b342aee0-6e35-4d1b-8c24-30eb3d5870e0", "indicator--bd32efbe-f24e-4f20-a44f-e3ccc74a772f", "indicator--572f37a9-af9f-4d3c-9eaf-431926b4ba4a", "indicator--0ccb26cb-831b-4c14-afaf-46a1c281e268", "indicator--9ca23d6b-8a28-474d-a89b-6ca6b25eb7ed", "indicator--fc24e596-327c-42ca-9f2e-f24f5b589e74", "indicator--4d67e8a2-dcc5-45c7-a892-cc02edeede6f", "indicator--b37bf26a-12c2-41f5-ba27-79257b49eaaa", "indicator--0b11c2f2-adc5-4b6b-83b7-2017cbb19faf", "indicator--3a13067b-eacf-4630-ba75-adcbeaf21634", "indicator--111f3ad8-4df9-4c73-9d53-f950f6e172de", "indicator--c880807d-5f3b-482c-bf3a-d610acbcde23", "indicator--6bc09448-ca7d-4ed1-ad2a-dd77cdaf93bb", "indicator--5dffecb2-7e46-47f5-9957-e84541fbfd8d", "indicator--f36be6d8-aadd-41da-8f0e-1d90e6d52b65", "indicator--4d227f8f-12c9-44de-81c4-55772a1b357a", "indicator--938b5945-745c-4449-8aeb-0733c5e1f93b", "indicator--ce9c5aef-cf6d-40e0-a4f6-e56ff0cd0dc7", "indicator--c99494d2-daab-4bf9-98ee-dd316aa46a5e", "indicator--d0b28c69-161a-4f7e-81bd-952efbad6eff", "indicator--4c113fae-0f92-44ca-a694-ae4ceb335615", "indicator--55b8a224-0a88-433d-aba8-c30b7429aaa1", "indicator--a49153cb-03a7-45c8-85d3-3ede593c3d96", "indicator--28c6010e-2fb9-42d6-af96-91f61882a8fb", "indicator--6866af5c-52ec-406a-9497-fd41a41fc898", "indicator--3e2251ac-2d63-4764-bf0a-874357388c95", "indicator--820796aa-a8af-4208-96fc-e907d8c9658e", "indicator--8e43b575-ebbb-4da9-862b-025a980f6aa6", "indicator--ede908d1-013a-4c13-bb46-f0b1cf325ccc", "indicator--49bc6cfc-5c23-401e-bb28-e9d236c81486", "indicator--b8151d09-872d-4a07-b360-867e30141d56", "indicator--e046a96b-5cd4-4271-a380-6999070d8a9d", "indicator--112f79d3-7b28-4156-8f0c-807d3542e724", "indicator--1a372073-71f2-4c8d-8da6-174b9b87ac3d", "indicator--b37deb19-56aa-4eff-89b5-b73042beb005", "indicator--46b82dce-4dff-4140-871d-6cb35e31efe3", "indicator--44f424a7-ac6b-4f0c-b806-94b7d8514842", "indicator--869a9230-9787-4c80-9a1d-740590665a3a", "indicator--9d22656d-c9e9-4438-88b2-772641a6baa3", "indicator--53265aca-0f4e-4ea9-a569-9e6d3f002a76", "indicator--d717d388-36a2-41d3-84f7-32b3cf44a39c", "indicator--767d0fde-9ef8-45e5-87d2-2900b8eb6cd5", "indicator--c58073f7-ce0e-4949-81db-d83ce1380623", "indicator--b2456c66-f5ab-4851-bd42-5497d99fc377", "indicator--44c74e40-6ca1-4d5e-99d0-823814cb1d8b", "indicator--29b64223-28e3-4eaf-8ad1-6865e650e0ea", "indicator--5e256b88-5bef-47d9-ba18-a594b2330302", "indicator--126d21d8-1234-45e3-b3a8-4e6e7cb2d5f3", "indicator--d64796df-1d2a-4c9e-993f-93ca0240f11c", "indicator--09572c0e-3e23-4238-acfd-aef6b6a82d03", "indicator--4aad9d36-1b4a-4205-8d03-b26813887ed9", "indicator--4bf2ce50-2afb-479c-80e5-15aa7bf54029", "indicator--523e813f-02b5-4c86-b85a-d1dc5f8474ec", "indicator--bb5faa43-e28a-4411-a5c8-fa2ce27acaa2", "indicator--dbb9d464-a428-4bdb-9f68-7f0545aef670", "indicator--5f81ebee-6ac9-4653-8ec3-a74e4bd689ff", "indicator--9f393e4a-8894-4f57-871b-d9a0d99b4472", "indicator--cfe5d0d6-0281-49cb-9d7a-d17dfd5d0027", "indicator--34904917-9f61-4719-b9ba-b459b08c59e7", "indicator--79be91dc-5b0d-4cf6-bc94-2507f99ee300", "indicator--36cc8235-125a-4e7f-a888-67502d66906a", "indicator--264f05fe-14b0-438c-8fd0-53e2ef2ed7ab", "indicator--dd95cecd-2b09-4c5b-ac29-b1578b7f6876", "indicator--fab2aecd-9c5d-426e-b193-c2a2d77772b1", "indicator--e98874da-5e99-465e-b193-7cde51235be5", "indicator--9692b65c-44fb-4b58-9977-2bf636274cca", "indicator--e6a828a4-a09f-435b-866c-3e7c831073dc", "indicator--cacbd311-82a9-45d8-8749-226b878cfe85", "indicator--e61c7038-47ef-4cee-b98a-43c671034c12", "indicator--cdb43e9c-3229-4514-9e6e-f3249b80f03b", "indicator--e02cd1d4-6eed-4a16-a449-403aded9faf5", "indicator--d940528d-3ec4-407e-be45-82d5dfbeae11", "indicator--d5cb6db6-a3c5-4c6f-a3b1-e151def71d91", "indicator--d67ba22c-6fdc-4d81-932f-bb814b5aea56", "indicator--69aae55f-8784-4b48-8cf4-22ae77686215", "indicator--a8eedace-64a9-4d6a-ad52-8fb200d6e4bd", "indicator--e47bdbd9-1eb4-401c-8ad0-e798b95d8655", "indicator--9afabb12-110b-4bc7-8cbc-d9398f6e1db7", "indicator--ab3ed4e8-3eb3-4646-ba1a-2bf40c1599d7", "indicator--beb48c8b-1633-4fb4-a757-f3d1fe6e04a7", "indicator--a102bd4e-0ecf-454a-b5e6-4a604e23d196", "indicator--f68f2227-7a60-42ac-bd37-d52f80142759", "indicator--ea1b0136-53ba-49ef-8a40-45e85e9ac3d3", "indicator--5daeb90f-0bd4-486a-ba81-e185872ef221", "indicator--f7279a09-573c-4904-b970-768c3bb817b4", "indicator--3762b816-c6f8-448a-9a43-e877cb61bc3c", "indicator--dbdc49c7-03b4-409f-a781-9eb82f86ea5b", "indicator--e302bf1b-1451-4f02-a766-8cc1d18b57d3", "indicator--bb7187d4-0a6b-4d3b-9d3b-7b766016b4f1", "indicator--68e86d90-a686-4fab-b8c9-9c2708eee33b", "indicator--212dcd5b-3cd9-435a-a22a-445d25918113", "indicator--c647d897-4328-401d-97c8-9adae19aed9b", "indicator--a88a8303-b5ac-4531-8f86-c36d24e544e1", "indicator--7b409994-27f2-4039-9b09-00bf537206b6", "indicator--0e78c7eb-7d34-495f-a77f-0e2c2ee79fc8", "indicator--db77a98a-18a1-47b4-b7f9-c4cb81780319", "indicator--8be5b20d-8efd-4d14-ba31-24994c0c9a31", "indicator--6f54fed7-fdb7-4021-962f-7455dfb56cb6", "indicator--802c1b99-4e29-4702-bdb7-8431dfe467ed", "indicator--a5233a0c-592b-4733-a16d-9f8c11e3e8b6", "indicator--2f1f5eed-f68e-45ef-9b5e-cc74daf4b75d", "indicator--0f7c8a09-f12c-4f65-ac6f-31ba780b7bec", "indicator--d5507088-e308-4534-a0e5-46a8702b606c", "indicator--39001be3-8fe2-4a6f-a434-e9d2b84a493a", "indicator--692fd45c-b80f-4c3c-b1b8-8b8b54f4f661", "indicator--9e57d0f6-6b16-4433-b7d6-37e6fdb178b3", "indicator--b6b7aed5-2072-4033-a8a5-94105a3fd6b1", "indicator--0ca02061-5d26-4e7a-bf09-f977aef42ddc", "indicator--1e42ee10-e118-4706-81f9-8c839a795c70", "indicator--29416160-f261-41ed-b264-9ff488599395", "indicator--d8b01e3f-7574-41df-bb80-d6d8bb17e532", "indicator--548effdd-4a0e-426f-952a-b955545b4981", "indicator--0db5bea6-0dad-4706-a919-85a5863e148e", "indicator--2f7f8d1b-0cc3-444c-b9d0-1ee1d9a86f1a", "indicator--db917600-5c85-43c0-887e-45a9bef01459", "indicator--c77b2134-2b87-478d-8345-ea7c17473b27", "indicator--4622ce95-d514-46be-8368-3749b0e75cc3", "indicator--8425f9af-3bf8-46ff-acda-c22f5af6e00f", "indicator--d8b177e3-b5a6-4625-aff3-57187a04ef6d", "indicator--b5c8622a-f06d-4e86-84c1-efecc3988a87", "indicator--2a0d09b7-1ce4-4ec5-a41b-119165d52cc7", "indicator--0206a29b-fc31-4091-a12a-f10f2a4def20", "indicator--0cefc313-63e9-45e7-90a8-8d6ab4d0ce7c", "indicator--92e75b51-534c-4b9a-85c2-7e555cee4c42", "indicator--fbcfad7a-62d3-4d06-9463-e9c04c82fa83", "indicator--316fb874-bb2b-4160-a013-87eb469341de", "indicator--a61541b7-ac08-4c6d-8212-cae06572f506", "indicator--c7c608ce-1549-47aa-8c4e-a952d21747ac", "indicator--5daefc2f-790a-452c-ae6f-4634eeae486f", "indicator--ce895001-89fd-4d4a-9f8a-fd2c1f8fe51e", "indicator--3bb628ec-936c-4b3b-9201-87b222b9a8d4", "indicator--e526c69f-5e95-47f7-9e8e-d0bcbbc5d829", "indicator--4a96806a-639a-43b6-ab5b-a84f5a9ed453", "indicator--02f4fb85-5ea3-4e74-8756-2c310b8c3c22", "indicator--e80297c6-2805-4dd8-a5de-e37540ffbd95", "indicator--94b42b64-b2fb-41d9-a695-6803eda1af21", "indicator--45a7434b-fd11-4571-b815-a25f0ee74a47", "indicator--08f3d8fa-bf13-48a6-8c2a-c971f8fa8dbe", "indicator--5936d555-bbda-4304-ada3-e9e64071f0ae", "indicator--7e417d73-402f-473f-91c3-509484d9d0e4", "indicator--8904a04b-90bc-4ae4-a218-26fe19360a53", "indicator--2fe448e4-0ad3-4890-8b77-f6684271351d", "indicator--298f08da-a2fe-4443-9be3-7da971549315", "indicator--ef1149a0-fa28-45f1-aac3-2b2e8e1f3f1b", "indicator--44f78cd7-aec5-402e-83ca-5b4d9f89300f", "indicator--fd983f46-54a6-49d7-b14a-149de4c5541b", "indicator--5ecd9694-0e89-4611-a9a0-cab9fabc1c45", "indicator--fbec5eb6-5904-4828-b75c-95c43e134694", "indicator--7ee38e49-c666-4a87-81c4-b72199b0cef8", "indicator--9c36e447-be2f-4e15-900d-a5c25f991013", "indicator--6b49440f-6205-40f9-83a4-63ad852d2274", "indicator--0fad65ac-e2d7-4ba3-9bac-dcfd07e69bc4", "indicator--d93b4651-8136-4b83-acc1-ca068c6b6ed6", "indicator--64979c86-b423-4f1b-ba9e-ffc472f29d89", "indicator--f0a66aa3-7be1-485f-84d1-3db9593aaf90", "indicator--1f1f36ea-7688-4dad-b3dd-0fd33ed0d77b", "indicator--9e7498b1-0129-4d4f-9713-11ecaebb2f0f", "indicator--1776f6b9-80c9-4027-8759-ed410db4c71e", "indicator--597f6185-c925-4e2d-995b-3a8f39d6aa00", "indicator--44d682c7-a3c6-42f2-9726-c4b82dffe00e", "indicator--ce6153b5-7a64-40be-b636-f50284849c32", "indicator--2767140d-2e47-4d56-bfa7-32f7c2566ba9", "indicator--b58c617f-874c-47b2-ae5c-a986531e00f7", "indicator--9ed6d06f-c866-4b43-9f63-ed17ca51b720", "indicator--d319a398-07ac-474d-943d-15109ee93799", "indicator--9bdfb9fa-c717-497f-b9b0-d4d4985a2fb2", "indicator--62b74ab3-1cf7-4885-9fb5-ff1dca9d59b1", "indicator--807476af-4400-45d5-9c46-e47b6e68448d", "indicator--3c797388-7ce2-46e8-a1e9-48c725af875d", "indicator--beb952ae-b2c8-443e-a9f3-76cf1832c781", "indicator--023e21ab-b80a-408f-95a2-f5c9c1cc46ec", "indicator--86c41a25-f0e2-483a-9c03-96e846469fee", "indicator--dd1e614c-1393-45bd-bd30-0999f895c255", "indicator--4db4d5dd-3c8f-4cb1-9919-8c7d85ace93e", "indicator--f45fb8b9-b418-4054-907b-47593bc1e85d", "indicator--9c15ea25-7a56-4b58-8adc-bcce0c88d2a8", "indicator--1cff2a39-16c0-4627-989e-fb05548c3626", "indicator--b79f6259-558d-4c0e-80a7-c6a99fb47a8f", "indicator--36244d21-3711-441f-a481-5e68ba62d472", "indicator--d65a7209-9df7-4bd4-bc68-248df1543306", "indicator--b9548316-9de7-4ebd-91b0-0eb3ce5840aa", "indicator--d7f857b9-2046-44ff-9082-70c3866f02f1", "indicator--d37ee08f-e484-4962-bc43-38990fc8e640", "indicator--baaf5a72-18fc-4962-91df-008ed1b78045", "indicator--3d082adf-d1bb-46c5-af47-e7656a7f5182", "indicator--cce28be7-7a54-4539-95da-6cafab5802bf", "indicator--39546b4e-6796-401c-9b62-a184da42505f", "indicator--d79c287e-5016-4b5f-b18f-7d8916c528f7", "indicator--53a0c90f-b808-4acc-8b5e-280e1cbbbb5c", "indicator--ef7c23cf-f96d-4950-b208-4adc53d3f161", "indicator--4f09ab95-8878-4395-8fdc-21a96b8f8707", "indicator--3ae888f8-854d-4118-a41f-99a8cf1f7521", "indicator--6d77aeb4-29be-49ee-a81e-dca10b4ea9da", "indicator--143195df-e1f2-4731-a1c9-dfc0a956b370", "indicator--664b1518-dbfe-4e33-aa40-4f01819f5e83", "indicator--bc1f10fa-f1e4-402a-8172-04540fb66d00", "indicator--2d5ad10b-0969-473c-8e99-4a69eb275608", "indicator--19a23617-41d6-424a-b408-3509e114b361", "indicator--c81971d5-642b-43d9-b14d-7919a75491c3", "indicator--bb8439b6-1005-4828-9dc2-300fb81838e4", "indicator--d5e88fd7-1f58-4a9c-af6b-633157b62997", "indicator--9cd5140c-c22d-4655-b95d-cf2252fea0d2", "indicator--33e19bc1-e969-4663-a06a-eb767b94ce01", "indicator--011f35ce-3e31-4452-9b6d-19aa1c9b46e0", "indicator--0aa9fe00-6dc0-4935-8bae-4564f71bfe34", "indicator--a90763ce-0d99-4548-82d8-6d2316298d46", "indicator--faf87120-287d-4529-b77f-6906f8574dac", "indicator--445d3cfd-7a93-466e-8e25-cc25841545f3", "indicator--8afc3aae-8645-4e3c-883c-e80856ba63bf", "indicator--cf44f72f-9621-4c0b-9f70-52c30ff2c52e", "indicator--73b2ace8-e5bf-45eb-a092-9c7bc2178ce7", "indicator--4237efa2-3b6f-498d-9fcc-1baab004e546", "indicator--e2cf63cf-8ec9-4079-bcc0-7c067500bd30", "indicator--40a9364f-ea89-42dc-b1cc-686d89b68fab", "indicator--39460d5f-3af5-4de3-974f-e438e7bd35a9", "indicator--20b1d2bc-5fbd-4380-b189-8f1d87717e07", "indicator--75daf9fb-6c4d-4882-a6fa-86deabe329cf", "indicator--b16e9fc1-a4f1-4945-943b-87ee6f4163cf", "indicator--28d933ad-069a-487b-8c29-6782e7d574d3", "indicator--fd33f973-3999-4a2d-b9a3-e0e5f434a7e0", "indicator--59135e78-ffe6-41ef-8e98-d658f1b6530f", "indicator--042f1c92-5d80-4117-8535-dd1a04c2945b", "indicator--73975478-6c3a-4cd4-a858-2d4f85fbce9b", "indicator--adb80096-ea35-48ea-84ce-9da93a5aba0c", "indicator--33b96076-83c7-48c3-ba7c-90008207379c", "indicator--e031d10d-7cc5-4195-95fa-c21de9654c62", "indicator--d4f9a814-75a6-472f-aa6b-90b828fb31db", "indicator--209a6df8-cf26-483e-88f6-fdf13a954fcc", "indicator--40458fe7-8eb7-4813-abfd-f8439450902b", "indicator--ea4c427b-43a9-4312-aa33-192a8c6910cc", "indicator--a18c4ac7-fcf2-483b-b8c8-3adb6a283c72", "indicator--0aa39d29-bb89-49e0-8963-39c0631e5f32", "indicator--eb16973b-8fac-4044-94df-b8c5fe2adf8b", "indicator--f3eb8ab5-5b71-467c-ac89-e31eb3495f0d", "indicator--a4ab6986-042a-4a2c-8195-f893f64245c5", "indicator--47ff3a0a-eeb5-4b80-8d77-5e2380426f9c", "indicator--d1734708-aff3-4d26-ae1b-d53ae335c192", "indicator--81c6f367-be4d-45ec-92e4-c380d8fe5c79", "indicator--8539efe5-eb7b-48cc-8e65-c6f21f63c067", "indicator--06212f37-01e4-466a-9817-64ac2ddb689f", "indicator--2bf66537-b3ac-4fa1-977a-10bdc843ef46", "indicator--4e786c27-67cb-486d-9a05-2046bb56d26b", "indicator--8769e526-79be-41dd-8ee3-2da0c3f2e05a", "indicator--30586988-1bff-4d91-a428-181e4829da4d", "indicator--1d61252a-aa15-4061-b2ae-78a1ef2a41ef", "indicator--4c5c0565-6248-4b67-9f87-d900977e7ff0", "indicator--79c73dae-6b2d-40be-ae8b-1bf3f54e9445", "indicator--5374cb68-4ece-443f-ad82-f54a938d390b", "indicator--e2e1e5e0-0f21-4d48-b935-990c0e0ce99e", "indicator--b478914c-9fb3-4872-89b7-3231091c200d", "indicator--af10b819-6e45-49ed-8157-a8f558d44eb6", "indicator--7de6c18f-6461-413e-aa2a-6d41c54d4e45", "indicator--34c88e25-0c03-4b34-80a7-eca176f6204e", "indicator--70f13dd8-47df-4bae-8209-0afbc0ed0036", "indicator--f23468c8-4ef4-44c2-869e-fdf5043726ab", "indicator--072a9247-930c-4a15-8048-b4c0ece96cf1", "indicator--9d4e4270-73d1-4e73-a2cf-4b84c4774448", "indicator--0b52d957-5298-43f6-af9a-40c851ecc71d", "indicator--9c258d3b-7138-4f8f-bf92-434d35c2691a", "indicator--70083f42-f6ca-4601-8712-5b307db60869", "indicator--f773098d-c046-4515-839e-07b8d0715f66", "indicator--e6d9cb1f-2dbb-474f-818c-464531c11f7a", "indicator--ba1a7370-55f8-4848-bad5-77d3082cdacf", "indicator--24345c8f-20f9-40fe-9630-99c52587c5be", "indicator--c5f8e30e-dbae-4114-a49e-3dcf774bf367", "indicator--2e700432-aefa-4cb0-b217-ea328ee0c4a6", "indicator--cd14f777-8b64-4e66-9e6f-760bf1a6dc37", "indicator--31b367b5-dd13-403c-9bad-59ccc248b431", "indicator--df191f30-0bad-4526-b749-298404e34841", "indicator--ff6fe106-148f-4878-a4ca-53ea209ccc7e", "indicator--8b5ed30b-6852-40c6-b568-596c8941cccc", "indicator--92d152ec-7c50-4fdb-93ca-8addc990ca22", "indicator--16c819e6-5c6c-4f2f-8d37-48b843544ffa", "indicator--645cd694-b7b2-4058-b83b-443d092fdcbe", "indicator--a6945501-ba19-4acc-869c-8b198bdf4034", "indicator--a99a0e88-40ee-49ee-9af4-da3572c45724", "indicator--bd7dc846-9b77-4e59-9578-88079cb46b79", "indicator--43b69ce5-f7f0-4979-8a84-db9e898bd239", "indicator--31ad912a-3733-482d-9024-51cb0151f157", "indicator--30acc307-bfae-469b-89a3-a43ab21172b9", "indicator--8ad7002e-b7ee-4458-9e07-00e624b5318f", "indicator--839a8f19-8783-4b3a-a831-d7a91b10b0d2", "indicator--e413b7e1-7128-4773-aff2-2c04d0a75ce8", "indicator--52b7a755-3b13-4f57-961d-686d94417f09", "indicator--5e3aa383-312d-42b8-844a-e0699c741e5c", "indicator--877ebda4-757d-443d-bdbe-b6f1e79d3675", "indicator--c89b9493-9a5f-4b90-90ec-74cd4dc0ea43", "indicator--ed0cda6f-af2f-43ba-8620-8cf786321527", "indicator--2095eb4c-e01e-4564-b9ac-d25af4c2dd28", "indicator--837588bd-e58d-4935-9ae4-b13386a7c6f2", "indicator--e0afe712-f666-4237-9abe-85c50df71006", "indicator--2cb95044-5834-48cf-8766-ad8078e01349", "indicator--4143b278-f7a7-4a5b-ae73-84467ef8131b", "indicator--5745ad81-9ba6-4741-9d91-12597e61f6e0", "indicator--c4d7fdd5-33d7-4f41-964a-3e6e7f70fa05", "indicator--1010213d-8713-42bd-b702-fab3ce148889", "indicator--6abf4eb9-f3e4-420f-b3ed-b14a3a2592a3", "indicator--034ec90f-b4e0-46cb-835a-287e3f51a7a7", "indicator--76de8a4e-ea85-4d25-bf89-b6140869a19c", "indicator--9d78e9bb-7ad2-4f52-9c89-0ad8150d0f9d", "indicator--4d50c445-5d04-4146-8058-2e99c0999ebd", "indicator--a9bb3978-9cc9-4ffa-b12d-16e62e963d1d", "indicator--c7e83226-f997-402e-a5ba-8a0ed3c9b010", "indicator--f96844de-8424-4e2b-b30b-56187b85f5d8", "indicator--92db427d-5be9-4633-a228-5329f7cc5ecb", "indicator--3b7bd92c-3f9a-4766-978f-60dc4ae49c4f", "indicator--55409b2c-edb3-480e-8531-b6e98e3ce9d4", "indicator--5a736604-27c9-4087-b6f9-e520d07d4874", "indicator--99865879-5fee-4d53-b4b1-4620f237e80a", "indicator--a512cded-5b1e-4cbf-8d48-fbb4f53c781d", "indicator--011df131-7b9e-4136-873b-078eeb054e8a", "indicator--bb73b460-17db-4223-bca9-0958bfc20c6a", "indicator--86a2f73e-db93-4e92-92b7-1beab32e2f66", "indicator--dce4999a-ad02-4471-93c8-99e410af7ce5", "indicator--03c2734e-ccd3-4f81-9830-275fc38b0e31", "indicator--e47090a0-872d-4625-bd9d-3c25d60b8ba0", "indicator--17e5e7b5-a466-4093-8a56-e125b24e4108", "indicator--216c8224-55fc-4038-89d6-68be330dade7", "indicator--1b9afe34-4dad-4453-a8f4-48c1a38824dd", "indicator--5cd21290-932d-49fe-8dcd-8c1f5cf9d087", "indicator--360fc058-c613-4e4e-bf52-e675e76f888b", "indicator--0f99ead4-98d2-4dc9-b203-f0045ff8a88b", "indicator--35466afe-d645-4147-a74c-11eb6ff499af", "indicator--fdbf6a10-b61c-4b56-936c-5ec3eb66fb22", "indicator--4c9fb79d-2d45-4268-bd7f-be070edf7959", "indicator--e5ea8f07-3f8a-4251-b6a7-87e6819f23c4", "indicator--7a20ffa5-ccb9-43cf-97ec-affbafa7cf0d", "indicator--c119e026-8dbb-497b-a0d2-cd0da355e4d0", "indicator--51544de8-baab-47f4-9f4e-48cb722b3a35", "indicator--2cbf6621-1530-4318-83b1-cc30fff81f37", "indicator--aab1eaab-4efa-4ecb-9a7a-4af220ae384d", "indicator--a8173c58-8457-4f1b-b6a6-bf7582f58df5", "indicator--1bc40d99-cc8d-4378-9a37-6ff67e71e537", "indicator--559eb9e4-6d89-49c9-b84a-187669f4e636", "indicator--0fd9eae6-cffe-43bf-9a8e-69040299fc68", "indicator--1b48c92f-2da8-44fe-b9f3-6cdde83301fe", "indicator--c10e1596-36fa-4be6-a294-5927b1cc05fd", "indicator--bd4075af-5d1c-4091-8f2f-3ff6be026109", "indicator--b931d4da-53e4-40f8-89ec-d866e74210b8", "indicator--9482a337-fbff-4363-9086-62371ea48133", "indicator--d85ff173-8403-4f99-b56a-e320e9c106a8", "indicator--2cd962db-bf0a-4767-9c6d-beb7d48ace02", "indicator--916777de-4e4a-41fd-a0b9-8b201fa45d2e", "indicator--49a5bfe2-01d7-4c1b-9728-c9be634176f5", "indicator--d9d213ae-f497-40a4-8575-096386935fbd", "indicator--77f94c21-3a8b-406d-b22e-913f700c0cb8", "indicator--56979f61-51b2-4b39-9b39-ba7247ad4c1a", "indicator--f2a22c16-13c1-48f7-8543-3ecd9aaac227", "indicator--f48bdd4f-1f86-4682-841e-e6f265e1fa96", "indicator--b1a5d8a9-5cf1-4995-af86-cec0300b05ac", "indicator--aaa9dbea-8013-4f35-b1f7-c5326db49ace", "indicator--04aa083b-2e09-45bb-a536-70950587f54a", "indicator--75dfcde8-a532-4cdc-a953-d6f7f1471f2d", "indicator--9546c93c-3d14-41b2-afe4-3bcb1a0a0ea3", "indicator--e2a69e81-ff55-444d-9f77-e8b48e1d2a56", "indicator--60916724-63e7-4c66-b7d8-eefbb656618e", "indicator--95224f2d-7ef6-4a9f-a114-510308aac8f7", "indicator--d1546178-09e3-42c5-b062-4d8049b7c31c", "indicator--a1068f97-25cd-4412-b1d6-fd4951ab784e", "indicator--c53c57ae-8414-4b0e-836b-15ac690c560b", "indicator--d3fa86f2-6945-453d-b33c-56397c8e2152", "indicator--abe3ea7b-a0b8-4c2f-87e5-2592fd929af2", "indicator--bc86e801-afa8-4cb1-9f9c-214e20d74dc2", "indicator--fd1d6bd8-d520-490a-ba3e-5a5aca22542c", "indicator--727683b6-e43b-4711-824e-9fb606cf402f", "indicator--385edda4-56ac-4dcc-8f34-95ab98343928", "indicator--c9ac99a7-1329-4aca-b2c4-40e3c5eed385", "indicator--5637ce17-38d1-4a2d-9c57-60f3b7f4b95f", "indicator--abd84870-d33c-4cf9-8cf1-44e7e1ad1b94", "indicator--7ffcb489-9622-4f3b-8e66-e2dbd83556e8", "indicator--3394c137-77de-450c-a7f4-24bc826b30e1", "indicator--f85826f6-166f-4ae5-9ddd-100f0e7743de", "indicator--5564296e-829c-4510-a717-7391f8982e01", "indicator--bdb6ed5b-8816-4a95-895a-04b44c5003e2", "indicator--a55e5286-5629-433b-965a-c1852df7e940", "indicator--474d0379-6a41-4f95-8786-eb83dcf2661c", "indicator--4782fda0-fb35-4d16-afa4-4c72451fcd42", "indicator--19962545-bbf4-4597-8666-37d304967459", "indicator--ed39a762-94f3-46fb-b2dc-9152f2f95538", "indicator--69fd2fcb-3564-45a3-82fa-4e4bdb820f71", "indicator--324408b9-8ec4-427e-b02c-50903b550a25", "indicator--1eff351c-ade4-49fc-abd3-04a3745fb047", "indicator--9c85053e-0908-4d90-9acf-29463e89395f", "indicator--5011f53c-d694-4082-a19d-ee0175025271", "indicator--57d41ee3-110d-491e-a406-5f847962ad41", "indicator--6481a3a5-5a24-40d5-acdf-698bb518ee8c", "indicator--a768ff8e-9f8a-4ba5-a892-6fe9010e99a5", "indicator--00c8f1ce-9a39-4e05-83dc-c096d3f81f5d", "indicator--d3b96659-ab8a-45f8-b615-8dc58d0dae99", "indicator--069a210f-f9c4-4f26-bacc-2f76288f99d1", "indicator--82dbceee-0993-477e-928f-276af939cd68", "indicator--448063b7-4f15-4614-bcd6-594bdb9d5669", "indicator--d427c265-bd7b-4219-bcef-0ccb3a8125df", "indicator--76931f7b-a26a-4808-86c4-1b6f8ce3b6a7", "indicator--904cc966-16e3-4677-9b77-9b67b78eaa03", "indicator--43057a44-2783-4ea5-86de-ae57e575ce3f", "indicator--4171200c-57e6-4788-8006-adacc608fb28", "indicator--0bbe56fc-850c-41fc-ba4e-7f4ce13b2932", "indicator--2d568c69-3486-4993-a537-7ee21e38e293", "indicator--506a3f88-9fda-4ec1-aa4a-497971feb80d", "indicator--4af8d8ba-86cf-4e16-9647-9445d25af0b6", "indicator--0277e7db-0a12-4399-b953-1e0eb32a3d0e", "indicator--0e2c1c00-cf6e-4f89-9f4e-1820096ada7c", "indicator--376ce992-1687-4464-9534-78c02c1f1430", "indicator--753449c8-2129-4f8e-8d81-42aba420e868", "indicator--33e21a72-9dfe-4867-8ac6-b20c6b8714d3", "indicator--aaa58c4f-7016-42ef-acb6-48d4a5817c5b", "indicator--ca55617b-a29d-4307-9773-7424d9c68355", "indicator--efbcbb9b-a304-4ed5-8036-fe3c05f4ad78", "indicator--5a38d862-7ee4-4a1d-a587-4899a0dc8b90", "indicator--83ba4d5e-22c3-4694-b9e2-83b0cc971d82", "indicator--6c9566f3-e11b-43fb-8175-727102b733a0", "indicator--a102f4e4-45c3-4efd-9347-e15f32539bc6", "indicator--4234fd51-35ea-4dcf-8dda-3d5d92b3445f", "indicator--e4feb920-3a60-438e-81cc-c69997ac1a60", "indicator--d18b6c60-a998-435b-a91b-7a60a50aec9e", "indicator--12308d28-3655-45a5-b5ce-408163dd2aa9", "indicator--28d12474-0064-425a-bf06-a6fa22ff7473", "indicator--d1cea8b8-c80e-4f43-b017-beba780cf956", "indicator--1f8c3bad-156e-4c0b-b402-fc6805642aa7", "indicator--56e9e990-2f04-47ab-a1cb-1124011bb72b", "indicator--8d00b4b9-08f3-48c0-8310-5119199cbabf", "indicator--1846deff-59a7-47be-9f4c-60f9ed104ee1", "indicator--1948ee54-8361-442a-bcd6-5ca51cfd6056", "indicator--5f173c2f-8749-452a-bea9-ff1bb5a0ed07", "indicator--97969283-c214-4e90-bacc-27a3e8e7fe4a", "indicator--6e42eaf3-e570-43d6-bd71-b45dc625bd24", "indicator--6f0095d3-eca9-497a-a1b0-05fc0d928aba", "indicator--b2d223af-a9b6-4bde-89e1-da56b975a41c", "indicator--3dc6d6d0-e192-47ca-951c-2bdafb0e911e", "indicator--f44b191a-c5e3-4ca9-a631-7057bd00ad66", "indicator--6fcb228c-4128-44ee-8e2c-71dcb00a9f71", "indicator--27e5994e-b5fc-427e-bc3d-1354554b3c32", "indicator--ffee3a0a-35c1-4164-b766-b9441fb5b485", "indicator--01cdb7b1-8977-4b18-8945-ac50748683ce", "indicator--81855aad-4b32-40d2-acda-67f247a0f899", "indicator--eed07180-19ab-43a7-9a72-0b68f4fde18d", "indicator--1e744fed-c802-4cf1-b565-392c2fd77879", "indicator--d478ebe0-8178-44de-89ff-32228ed6c492", "indicator--ce788038-68ac-49b4-9938-a7260cedba95", "indicator--30039ea3-8255-42dd-a5a6-ac0e7e122faa", "indicator--9e752b68-6079-4eca-b62e-443f9d63c665", "indicator--1df0edee-bd65-4e7a-a70a-a51f03108109", "indicator--c3e30805-581a-4ee2-b1cb-701724a8070c", "indicator--2dec2afd-3a45-403a-9bfb-28d8d3ca2da2", "indicator--35127b1c-d11c-43f4-9632-ab3443deae43", "indicator--b8fe80ae-1b32-449b-a9c0-babc6c003870", "indicator--a36fb84d-c73c-4b1f-a680-18033c64006b", "indicator--d2dd8c8a-c842-46bc-a680-784129806544", "indicator--1aba2a1d-2b17-44f0-af9d-33d078b64cb6", "indicator--15ce4708-0646-4dc2-8339-2c6bb1ba5b7c", "indicator--57dbeeeb-c5ce-4c66-87c4-e2f42c083457", "indicator--816df394-74c4-4a25-8fa5-d0b65a76b1e7", "indicator--5f9e4097-9bd0-4d83-8dd6-460ff92c4070", "indicator--23078251-875a-4356-b96e-1431729d8f7f", "indicator--efdf1c4a-7cc7-45a4-b9f7-a8c2075bd91e", "indicator--33ab29d0-7061-4afc-99c4-177a8abea34e", "indicator--3e7e3d32-3aa0-4247-b682-44f98bb6ce20", "indicator--f083bf25-b99e-4bc8-be34-a609edfb0165", "indicator--991d6b03-8b5e-4494-8a60-eda3910b8a45", "indicator--ca997552-8ba5-4c6d-8fc9-e436537b3543", "indicator--21d59efe-30bd-406a-9a4f-9ea2c059db2d", "indicator--70c8393b-7dec-4d04-8841-d98a0ad56759", "indicator--cd94affa-fdc0-471f-9a8d-66b784a39708", "indicator--4abab003-0944-466d-8048-dc986f0a5740", "indicator--4931535e-b4e9-4951-bb56-78c44c1297fa", "indicator--518e2779-f339-4f76-91c2-85bef86c1d0b", "indicator--e2f5f9be-7103-428c-a95b-c6078582a4d7", "indicator--1c01b5bf-6b5f-4c71-876c-a573af09ebdd", "indicator--8cad7293-2cec-4b4d-9f6c-3c0b5b45f982", "indicator--840c7899-f778-47f1-82db-b947b60bc9ff", "indicator--92c242ac-019f-4919-943e-062fe205928b", "indicator--62c9357c-24e5-4e58-8e7e-818f2a19c274", "indicator--cd5b5f2c-74e3-4939-95b3-63ddbf00278b", "indicator--f26423c4-5ec8-4e3e-9e99-b7c85cc25d80", "indicator--e535f07f-1c69-4d3d-9d8d-172cf47bc4cd", "indicator--24bfef3a-d8f2-424f-92ae-b59f784f9d32", "indicator--63b9bfd7-6582-4b53-a88d-2303393656d8", "indicator--ed5af8fd-eb56-4f5c-833b-985d5b3675e0", "indicator--aa04b1ca-fa37-408d-89a3-87f04ee78eb5", "indicator--ecf0df88-1da3-4a57-bd13-ea779e40c2e0", "indicator--592fa5b6-aa1b-47a7-8156-80dee7617503", "indicator--7f7ac874-1b0b-448a-80b0-513cfac6c881", "indicator--d3f60511-53d1-49a8-a255-3e87315e8b56", "indicator--1732959c-b14d-4724-bfae-8af87e8937e5", "indicator--acf23965-bc4b-4def-b480-6562aed2cb8f", "indicator--57632b21-05e3-459b-856c-fea7f0d8a6ce", "indicator--0a50ee9e-4e86-4b50-b759-1a2eab091043", "indicator--32fa60fb-630d-48e5-96e6-44a21db605ec", "indicator--8d982a32-126c-4397-8930-db5f8710e5da", "indicator--8f1d6dda-bb1a-44a9-b2eb-82ac61971866", "indicator--91fc8a3e-a1be-478b-8469-f17656d18a95", "indicator--da271799-c51d-4cf1-b028-ae4395668a86", "indicator--51c1ea1b-b674-44fc-9ffb-8e09b327999b", "indicator--53647a30-afeb-419a-acab-727d97cda50d", "indicator--59484a3f-ed82-4f67-8b70-ea04f7618ebe", "indicator--7db488a5-de5d-4765-ae6d-034ba7fd85e8", "indicator--bf5bcd18-48e2-4f0e-b432-609f5b68181d", "indicator--89bdb634-abe9-41b9-aa86-1a3d36de2e79", "indicator--e3d73ae3-6dd0-4254-a1e7-ca44a395c1be", "indicator--5e5f02a4-7cd8-4729-afc8-070eb0f135e5", "indicator--9f10cfbf-9596-4b9b-903f-cba02f5b51a0", "indicator--f1d10dec-9a83-4b62-a511-91ea01b50da2", "indicator--1047c6ea-7351-4a4f-a140-c4381ca289e7", "indicator--db4b4f0b-a87d-4360-b9a6-4e740016e978", "indicator--de560b3a-d356-4d90-b0ef-eef483f0d9df", "indicator--929cdcd4-5750-498f-8d30-89ffbce8960e", "indicator--e872fa7c-c6ef-400d-bc95-3a74003c5829", "indicator--c8ebcbed-bb30-41c2-8cee-041565ba71a1", "indicator--c1799145-c8e8-417f-a520-28079700bd6c", "indicator--c3787957-cf7d-45d1-beac-23ef49ce92bc", "indicator--043c84e5-7d31-424d-a239-9b4cb5d1cb84", "indicator--47bf1f9c-6d4e-4f24-b482-81ae3c889e49", "indicator--569206f1-73f5-4a4e-be29-c1b4f76fbd08", "indicator--edca6459-ce00-43d6-8b64-9ef7684a785c", "indicator--786892fe-4f59-4e36-97ce-ab70cd1535ba", "indicator--9600f2a7-fd52-4a13-8f35-e13fc3d8af10", "indicator--6d24b5a6-806f-4054-a8b4-4efc3d86adf4", "indicator--0d4d9dd3-fc2c-44c0-b436-f69f7b05c245", "indicator--4ebb8ace-e851-4397-97e1-006912c9a001", "indicator--7d66a85b-c38d-46be-82ec-96585501645e", "indicator--1b938332-8c1b-4b5b-8b20-5b1708fd3d91", "indicator--9cc40d65-0ab2-446f-b229-a9d47e9bfef9", "indicator--4ba32930-d941-4594-b6dd-51081e9c3bb5", "indicator--4a6a43db-e5e0-4140-9966-d92ba980a432", "indicator--ed25b30a-659d-48d4-8f5c-9ea40b7b830b", "indicator--deea3690-03d1-4489-b1eb-868688b9469a", "indicator--44bf03c0-d640-40d0-8727-819ab7c721e8", "indicator--df461120-2a75-4b80-aa86-910a8d697cc9", "indicator--f33b42bd-ed60-4eaa-8232-3479e492c6ac", "indicator--e5034618-c0fd-4051-a342-27ca7caee3aa", "indicator--77b180ce-187c-4a5e-b68b-ed4b6a7c6769", "indicator--2238a9fc-0e74-4c7b-9af9-7f87e47d7f01", "indicator--bff70b31-da7c-4b38-a90b-f6160ca4bd39", "indicator--05970646-80af-4a4e-8293-96a2d2460c84", "indicator--fea0572b-87bc-434d-873f-356af5194eba", "indicator--1519e473-d770-4555-aba3-3e4582460a15", "indicator--529527e2-7240-41d0-904d-0a9203d90aac", "indicator--3865aef5-0141-470a-82b0-7731683ef6b3", "indicator--c128be6d-a7bc-47d3-8404-5caff6358875", "indicator--d3e13640-6f6d-4f2a-91d9-47ac91ab1bfd", "indicator--eeeaedbd-b17b-4035-8ece-0016ed54ca91", "indicator--c267a593-6d6d-4526-9fff-481fe5542e43", "indicator--ebc1f420-cffd-4d24-abe2-3aba1096bda2", "indicator--afa14d02-4263-4f13-9ab2-a70cc22b1f01", "indicator--20cfaf06-2095-4ddf-92d0-5168054e76cd", "indicator--149c1080-a580-4d98-a4ba-572d6af14878", "indicator--da736e52-beb6-4e44-ac78-c2c9ca9a69e2", "indicator--bc7f3cf2-be77-4e14-a466-4453eecc81db", "indicator--56046ac7-0ecc-49df-b924-14a4103bad8e", "indicator--1632672a-e276-43fa-a0e6-2edd4b13e183", "indicator--0a1731cc-1810-45f5-a757-38572c985920", "indicator--49728338-587f-4152-97ee-bc83ee86a95b", "indicator--9f738528-2e55-4738-88e1-4693d7f5b473", "indicator--d28fa4e8-e7a2-4712-b51e-a72a62ea856a", "indicator--5ed4843d-8481-4107-ba15-ac0b3af9d95b", "indicator--895660b2-e710-4d30-bf4c-1b32d41b0a56", "indicator--37000a17-cb65-4aef-a2fd-5e876b0ea8a5", "indicator--306a626b-d1e4-4c54-ad43-276ac5bcaca6", "indicator--bad58093-85df-4ab6-ac3a-f52ce84fbd32", "indicator--7820bc3e-86df-4999-a7f3-e3c31345bb5a", "indicator--75474078-133b-476a-8eba-7ada4994d62b", "indicator--eb5ed293-ca8f-458e-b5da-6e730aea1561", "indicator--d4e711f5-4376-4263-8ac2-a8b5c49289ff", "indicator--9a8dbc73-35a2-4ccb-a9c8-12495e64e619", "indicator--f9a76973-cced-45be-b16a-7a6e0671c8a4", "indicator--0a20556b-be06-448b-8b8a-81b676b2a839", "indicator--1b3af599-3a2c-4c0a-a6b4-bd39f1e34c8e", "indicator--90c67484-892f-43ab-aab0-a8a44e883bdf", "indicator--34297b03-753e-462e-b4af-cfd6da472f37", "indicator--42d0339b-e52e-4be6-bcf8-c643753d828e", "indicator--027520a2-18bb-4cef-b4f5-e07f8787ed2b", "indicator--e19893c3-3f4f-4333-995d-bd4aa59b7616", "indicator--af8f10f9-2df2-4d74-b000-3e0ee5f34312", "indicator--66f2290c-39e1-4725-8417-ea80a4b87b41", "indicator--4bc41159-bcc3-4f56-9f1e-154ba8f96475", "indicator--95692319-eedd-49e5-9e43-dc301d9228ea", "indicator--f6f316df-9757-425c-bb60-4096ee374ddd", "indicator--085cf37f-220b-4c37-bcbe-64439afe22c4", "indicator--a3531c70-9a3c-46bb-a3de-f0c82a56b4c8", "indicator--650a3365-03d8-479f-8a79-a4f34bce8f47", "indicator--ae7e8b65-c11e-4de8-8607-021a41a3c9b0", "indicator--73db4966-0221-4ad5-a3b7-c51babdd8551", "indicator--4d59acf7-e048-4060-929d-63133a1ac910", "indicator--c738c560-56a0-4cce-9d44-837de7334dff", "indicator--bbfe9f19-1478-49c4-8b90-5f29d275a9b1", "indicator--915e7ecc-d849-4cf2-b583-aabb3c74ae42", "indicator--120777e8-681d-4c4e-a9d3-09bf5284f882", "indicator--e3ed4ce3-b6c6-4061-8799-2989636809f8", "indicator--4ce28ddb-6114-4523-9a8c-45c9eda42de5", "indicator--8482485f-8d9b-4e6b-851f-d17006c3c0d8", "indicator--edea7549-555c-470e-bad3-ea22bda08ce0", "indicator--cb17ccd2-0daa-4d05-a209-135d5b84c334", "indicator--c7fa6f47-2759-4853-bfb9-4e420bf58d6b", "indicator--afc53ba4-46ed-4240-9a47-68d1660ee5e7", "indicator--bf091480-cfd0-4807-b41d-9f7fbbe17ce9", "indicator--3b8de919-d01e-4064-a011-badac49b9970", "indicator--5a5b8065-123f-4722-9d18-ebfb465e4058", "indicator--60eb4777-e8ce-4ed7-9535-e77fa4e61174", "indicator--04354e5c-1674-492d-8766-516311511b46", "indicator--6f8df94c-66d7-4b40-a2ce-3746a43e74a5", "indicator--fe65ef4a-f14a-4899-9cb2-82557eed45bb", "indicator--0b733d04-b2f3-4160-86cd-849ad74ba7e0", "indicator--14ce07d0-bde2-4c74-8a3a-32121aea7ad3", "indicator--fa3deb86-42f0-48bc-9b7a-9d88253989f6", "indicator--f8494992-a502-4f35-9bfb-ac3f64e7a618", "indicator--223a31b7-eaea-420e-ac0a-d89863a677bb", "indicator--365ef1b5-d334-415f-9750-ec8917018023", "indicator--dcad00ef-4b58-4ad1-9b6a-da3aed9cd6b7", "indicator--17c1dbc4-ab59-464a-a4bb-53513f37c434", "indicator--e7771811-c403-40b8-b317-a5667ee5136d", "indicator--4407a394-3b24-4b33-bdfb-11d82869a6bc", "indicator--fa39ba59-8ab4-4c6f-a2ad-1b15aaebb346", "indicator--835e1bb0-1a7e-4f27-96de-d122f3c3859c", "indicator--2c86e8f6-cd0c-4a01-9b8e-9e5201521d54", "indicator--577bac93-1b50-43c2-bc7d-95d0f0ebaf3f", "indicator--faadb18b-586e-4e1e-a075-0628cbf50cf1", "indicator--e00b9c1c-b75f-4f4d-8e25-c52a4636645f", "indicator--9940bc2c-ec04-470b-93f6-ea681bb48e24", "indicator--1ddd73a7-4e37-42fc-8bc7-e8ec44ee49ff", "indicator--42527d6d-de5c-46f9-b7f2-a4ea1979aab8", "indicator--e0e2c475-3e5a-4b07-ae89-63b8c2627951", "indicator--1e245151-64c6-4e6f-913a-355335152a05", "indicator--e2229363-ab77-4e94-a158-52e61e6a0b44", "indicator--34e257a1-468c-44ad-9b2b-05aad3f7c4f5", "indicator--7657de69-61b3-4a04-875f-c0af1ab293a3", "indicator--6ff509c7-c7f7-4775-a74b-5c67e74d96af", "indicator--0d97f2a2-fbbf-427a-a69d-955c5d002fad", "indicator--db10d484-de15-4d2e-9d97-6f111e538e56", "indicator--0a27f016-0c05-49cc-98a6-c0e6f8021326", "indicator--6b8ea1cd-b1f8-4419-9383-eeacd9cdb68c", "indicator--2e497569-c0f5-4010-944a-1229d5ca4887", "indicator--e46110d5-3996-4f66-9fc5-61d399fbe946", "indicator--9e80b65a-a1ae-40b1-aefc-f631336233d6", "indicator--23fd56b1-268c-4022-be1d-b0b003e72e1c", "indicator--6eb7055c-7c11-4627-a3e3-b7ca07a48c34", "indicator--50d9c477-5d0f-4bc1-bf0d-0029ddd27d23", "indicator--e2f7c843-e178-4291-ad53-93e1af3054b7", "indicator--835bb155-6261-4327-9187-db7f51a18c42", "indicator--ffe37742-1666-43a6-814d-a633aaf3a980", "indicator--fe6c747d-a035-4ccf-8500-e3b994b9dece", "indicator--e2a52a5e-64cb-43cb-8f8a-b0c53b79d5c3", "indicator--25c3ff5b-c7f1-4041-995c-0bca55ffe68f", "indicator--0f3ff038-e412-4fa7-9b8e-156844a113ab", "indicator--dbbf2150-c015-4ee8-80a9-5a241d4ed6ee", "indicator--b47bddaf-a47f-448c-9a65-0b63a6887d7e", "indicator--45ea2bcf-9339-4362-8395-431366ae37f5", "indicator--24057f42-8418-434d-a5a6-f3d301d5786b", "indicator--8fd614c5-c30a-42f4-bb0d-1d96c5eb843e", "indicator--d1ea709d-24bb-45da-a405-f5cc71d7c0fb", "indicator--dd13d10b-eca9-4840-93df-6b6e56302783", "indicator--02f3c089-dc27-4330-bd47-25fd748cf9fa", "indicator--c591c802-f4c7-45c8-b18a-12550c2e4429", "indicator--da4c9d89-80b5-4b50-a329-1dc4977264b6", "indicator--6783b53e-f63e-48b7-bee5-2975321ecf00", "indicator--190691f3-6989-4e69-895e-f39fb898d4a4", "indicator--7b213892-40db-453f-b571-be60185dcebc", "indicator--5d552b07-862c-4935-b38e-493d9070cc70", "indicator--9f7545b4-7a62-4bea-8501-fd3370cbadda", "indicator--a85c9e82-f0e6-476a-b367-6d231c4b81dc", "indicator--d0692b03-c809-489e-a676-4b76ad7a0c54", "indicator--1775dffb-2d3b-45cf-8fe7-74f2f9427127", "indicator--195a6507-049f-4c7b-a0e6-0e4c91bbfeac", "indicator--38527445-5553-4855-997e-f42293014fa2", "indicator--3dd4c047-8d16-4d05-8f75-108224d2d466", "indicator--a06c2dae-61ab-4e31-8b07-48c6c4e37bb0", "indicator--51b9014b-ab5c-4a5f-b678-1f70f996eda2", "indicator--a7866ea3-3bbc-4dbd-a57b-5180c814ecd2", "indicator--c000cd69-1cdc-4522-8af5-ea79f31623ef", "indicator--d9393656-39d7-4ed0-85b5-d576e59ed1ba", "indicator--6516038e-1c8a-4b8d-b097-0c6be4d099ae", "indicator--7c1dcd18-28d8-4cc4-a420-dd7c31786cb4", "indicator--2470c7a5-b68f-4fc7-859d-d7620c7fe1dc", "indicator--e22b3b0a-4f24-4a28-ac0f-3e6682333146", "indicator--dd1783eb-6787-4800-a1f1-559ccce13cb9", "indicator--82adf7b2-d36b-4232-a159-442d52258e3a", "indicator--36903304-91e9-4f45-a11f-b5d04d2765c1", "indicator--09803977-c2e3-458e-b9b0-e2974e7facfd", "indicator--9f22c4eb-2a4e-4cbf-8cd8-c7ea8ac26d05", "indicator--7020c87e-77b5-45c9-a4d9-ba63b6e0a6a8", "indicator--b62cd459-944a-4a4d-a604-0bef44114b7e", "indicator--72a3cc8c-4227-4a1e-8962-ebb0dedda85b", "indicator--9cac0da4-67c4-442e-af1d-671128e6642d", "indicator--e3ee3e2d-0664-419c-b001-a2c2360e9d85", "indicator--e8750e05-ee64-4a59-a550-656921d158e5", "indicator--5354d2dc-9ad4-4fe6-a685-06314853fe60", "indicator--1f6ac678-9aa1-4005-ad66-b23f8c0dd144", "indicator--8668250f-cf93-4c00-b4f2-adfbb2d5c83b", "indicator--9a96b380-ca67-459d-bd53-9902ea5a9869", "indicator--bd4488e7-8d18-4dfc-b9e0-19e83ced6943", "indicator--69f212e3-e003-48a1-920f-380b8362617c", "indicator--c4c82c76-690f-4531-8e5c-a382d49a6687", "indicator--0b1c2124-f85b-4e65-820b-7d25903766dc", "indicator--29e572a1-fc7c-412d-a29e-94e6ba55dd6e", "indicator--ca46dc1a-14c1-4650-aa55-5c27a48125ae", "indicator--425b6b61-cca0-47ba-8cdc-67c1e4c0e928", "indicator--abc698be-3cee-4e27-8ac4-f029fa068f12", "indicator--018022a5-0203-4f2e-a72a-e70cfb0bd647", "indicator--88a8f864-2072-4fcd-a02a-35d5cc8f9663", "indicator--5e6045df-6f15-4d69-9463-70be3fe325d6", "indicator--8a4d590d-781f-4b9a-ae73-80a4494d0ced", "indicator--98cb62dd-77d2-4a2f-a410-4b032ebe6371", "indicator--14f76585-2b7b-4371-81c4-5667c53c624a", "indicator--57f1bbb9-4596-4757-ac5a-33f2e87dd2a4", "indicator--a683a05a-8df3-4f3e-bbb7-3c1a94048588", "indicator--c6851950-fea6-4aaf-8a1f-7c2c2adc7df7", "indicator--c4e2135c-291a-4027-830c-4d012e81fdf0", "indicator--6e086321-a2d6-4c95-95fe-088810e91c69", "indicator--804172b6-4501-444d-b932-dd7fb3ee951b", "indicator--df1384d0-061d-4e87-a33b-aea5c7a01ab8", "indicator--e5d9cbb5-cf70-4ec9-9506-648c33ab8a00", "indicator--52ff8383-fce5-4d3e-932a-bb032502bcdd", "indicator--7d30267a-1411-4a08-b2d6-ab4d9e49c28b", "indicator--0ac4a441-5052-4e66-b93f-8869a94379aa", "indicator--d8f71fda-5a43-4f54-9909-291b0ef374e9", "indicator--718d9dfd-a7ea-4538-af34-d3ee411cb1a1", "indicator--a4d3e2e2-6aa4-4949-b4ed-cf9d875bde5e", "indicator--0f1082f1-7ffa-4ec0-9578-77ae189f52d6", "indicator--c1180fd1-31bf-47ce-bbc6-5f598384ac46", "indicator--d28227a7-2a71-40ea-a00f-1b4ca8666861", "indicator--39eb63f3-9a72-4d86-aab4-43dd0486fc77", "indicator--913ebe6e-bc03-4198-a1f4-26d6520bce46", "indicator--352d375b-6806-4b9e-bb93-820c99ef2b00", "indicator--3155333f-7ccf-485f-a3a9-b9fcb108f1ea", "indicator--de600c53-3d7d-4e00-a72e-8613a1b57405", "indicator--6ad39a1a-269d-4997-9277-383bd58766b1", "indicator--df880cef-5adc-4b10-8889-8b4bf1035724", "indicator--5f3ce70c-1f1e-4ddc-9b1e-31a88d534e94", "indicator--b3c2b916-87f8-48e7-8c3a-7266331ea329", "indicator--548e4b7f-d5e6-403c-98f8-b49953a06f48", "indicator--961f1dec-0fcc-4358-8871-d1f94bc2ab61", "indicator--cec2dc6c-5306-4b57-bca1-b5119053380a", "indicator--b1be3fb5-6060-4587-b9db-90dfd1dda535", "indicator--41337506-1b8e-4aee-9072-cc56bd0521b0", "indicator--403e12bd-8d6e-4e2d-b3e8-6135719241e3", "indicator--c83d7f37-8b68-4b15-b493-a1c9785febe1", "indicator--f4879e0a-2302-4732-8280-64a20aaf47e0", "indicator--cf6dc145-4125-477a-b013-9fbc7c132352", "indicator--88231782-e003-44cb-96bc-26bfcacfdfc6", "indicator--89705a20-6b76-43b9-b9ad-547399f06a00", "indicator--8db7f624-edb4-4ed4-a4c1-529723c80f17", "indicator--c16c0fb4-da90-46ad-8f9f-e08bfe75b198", "indicator--46db1920-7515-4584-a23c-2a3c7384be41", "indicator--2a3a7c32-9990-4e5d-b8c2-f8e066204d73", "indicator--66613c8b-21ed-4b72-bdcc-e6c4c784e1cd", "indicator--5b127b79-b1e3-4210-ae8e-4d3df0808c22", "indicator--9e381193-645e-47f8-9041-1ef696e8354d", "indicator--b219d256-9e9b-4f37-a1f1-13a0f9b005c3", "indicator--9182fe38-c9dc-4fd4-b5cf-2878eb4f47de", "indicator--ac19c5b4-b0e8-4b48-8857-6aefb37e932f", "indicator--44c554a4-fe28-4d67-9d86-2bca0892cdb1", "indicator--6ab2c68a-9b0a-44b0-9c29-240e3c90c67f", "indicator--a5d693e6-4186-4917-add8-cfbbd9c3c4d4", "indicator--cd50f0fa-2b6a-4c71-b2a2-cfdb1e3e5f63", "indicator--c3df60a5-c541-45d6-8270-6542f7ef53b0", "indicator--45630dc5-cb14-4996-8575-c564d6644d32", "indicator--e015699d-696b-48a0-9c90-e09c3c5c4360", "indicator--649a0efe-b4de-4a20-bf0d-b71f32fc7b2c", "indicator--ee8ee37b-db02-42b0-b010-62500befe63e", "indicator--7d5f59d1-fad7-4421-a637-ae26a05726f0", "indicator--13bf937b-da5a-4c03-886b-333875bbfdcc", "indicator--ef499813-5eeb-4658-9627-6a38045dcfce", "indicator--5c8c587a-635a-4008-be83-ec2d12844d89", "indicator--d4ba4c13-191c-4a37-8c76-96af47a58117", "indicator--ccb05458-ec70-4c88-a692-bb7feef58195", "indicator--69c016ff-c5fa-4e8f-a13e-69d915808b59", "indicator--6a9144be-e632-4aed-a1a5-3855af10a59b", "indicator--6bea1cdb-0570-463f-8a28-ca0cf2d4d524", "indicator--d5228dde-c7b0-4930-aeea-2e781387f862", "indicator--95c2feab-71fc-40f5-ae62-9606d968bb0e", "indicator--72b5ab19-f773-40f4-b49d-71726a496c40", "indicator--e8e2dc40-8a3d-4885-b3d0-8281c7e69a99", "indicator--468623a2-064d-4bcc-a287-18ee76b22544", "indicator--8341f668-1e1d-4ba1-b0fb-9afe0d8dbf17", "indicator--bed2353e-455a-4188-9b8b-657391da6a2e", "indicator--e97c306d-861e-49c8-89ff-c8b390f7ee66", "indicator--2b60556c-8a4b-4291-84e1-24c9b08657d6", "indicator--4cf9db68-22a3-467d-84cf-b4331c48da12", "indicator--a13ff31c-aaa2-424d-a363-d5a3a232355d", "indicator--24c8f112-2dd4-48e3-8347-6667553f7538", "indicator--b10a1302-2661-4541-98e6-00e0dca4fcdb", "indicator--4ed394e1-2383-4e06-9083-b334da32340b", "indicator--a197dd92-16a6-45eb-92a0-0c8b03fdbb89", "indicator--9557f749-fb1e-4252-b4e4-40b920a052c9", "indicator--635a3f05-c984-4eb6-a686-1e9aca634dde", "indicator--08d74d31-cbdf-4954-a4b9-427522d74f74", "indicator--a3e11c74-2106-41e3-b8cb-aba5df965a01", "indicator--a39839f3-302e-44b1-94d7-61b0b856800d", "indicator--6e77d1bc-cf44-40a5-99d7-40786ad66869", "indicator--1ff36dac-cd00-463f-a949-7ed805e2c050", "indicator--5b32c0bc-54df-4f67-a469-ec62aa81050a", "indicator--7f322e48-1507-4d2b-a0bd-d8f4142a7613", "indicator--2e7bd993-b738-4482-b81f-a034ad658547", "indicator--e7db3e0e-2822-45bd-b03a-933132477d82", "indicator--d760ef83-3d24-4d8f-8aa9-eb0e5aba3dd7", "indicator--a8fccddd-8aea-4039-945c-3306fa04f012", "indicator--5bb47f83-8a0d-4c81-8a48-e341d4373726", "indicator--c9cc3278-60c0-4dd6-94e7-2de5aa37b173", "indicator--615d8887-3afc-4d66-ac3b-6d50b73044a7", "indicator--d0c21249-aa17-4325-b177-2e674019a28b", "indicator--d97c0947-debb-477c-ae24-5f95031b6a9f", "indicator--b6e67583-774b-4681-bae9-a0de3fbae680", "indicator--2d7c015b-9ddd-4665-b637-44b978a4e137", "indicator--f2d85ba3-087f-4faf-b99d-bb9b68acbeb4", "indicator--41f5e797-2c95-471e-a685-ec49b70e62bf", "indicator--74f263e3-7561-4a2f-950b-1bff720644e7", "indicator--3e24f312-a8fa-421c-beca-dcfa32e2c0ea", "indicator--a7ed4d7e-9a06-4013-8c3e-c11d6280c2b4", "indicator--648d3409-0a24-4cd7-b5d9-ad1790017048", "indicator--8146ed75-b10b-4f2a-8145-1b09b71884c9", "indicator--da9c2784-9993-4b69-838c-ac13e1b653af", "indicator--2c2e4b79-f513-4222-894c-1f6ca757e403", "indicator--67c61fee-a7b7-4f3c-9c95-14965e025227", "indicator--1fb25168-7735-4d28-b72c-becfee37b12d", "indicator--903bfda6-2dbe-40a0-a9b7-d33c03204027", "indicator--314bea13-9ec9-4025-9f02-8e1056e177e6", "indicator--3dd6ea9f-d418-4a5f-b15e-b38cbc528c7d", "indicator--5568e246-1bdb-4345-b920-23666548cf11", "indicator--744f4b09-56b5-454c-bfae-27389d9c4587", "indicator--614bf2a4-6837-4e88-9b61-ea7d8d39c501", "indicator--c966ddac-8d45-4642-acaa-ca25de98a8b8", "indicator--229b5ca5-d6ac-448d-b9a9-b9daea289538", "indicator--83fe5433-f85d-4feb-ac3c-cf95c56d334e", "indicator--a9250bee-ea58-44fc-94fa-c229d57429d1", "indicator--6e196d85-8dab-4f76-bede-9f4e5dd6a4a1", "indicator--fd2022be-dc4f-4baa-9834-813ef782a4d8", "indicator--0f97a788-62ef-4d7e-8ceb-82ec4bc96d1b", "indicator--85bde356-0463-48a7-8f13-170f39b20cf5", "indicator--29896ee6-304d-4714-8c54-7e5e694db96d", "indicator--03fa66a7-eeb2-47b3-bdfd-e347c07fa2d8", "indicator--c1aed011-220a-48db-8663-8634dcf6e469", "indicator--dac3ae5b-bf71-40e5-a3ee-1362c0c2cd82", "indicator--c5274b29-0b56-4367-825e-b3d16ebad58f", "indicator--817355e0-d2ee-4d3f-869c-d953d9127f93", "indicator--35823b39-a3d1-4094-804d-29c075062f04", "indicator--85732768-e901-4854-9929-93c35d7a1724", "indicator--03717b91-2158-46df-b3e0-a6ccce3849df", "indicator--25c171a7-70dc-4b3a-9111-c6b10a681665", "indicator--f82c3c4c-b694-4f3c-82db-33c1ffd87229", "indicator--8cd63b12-179d-4ee9-aa6b-9a605f67ce2d", "indicator--54a564c5-aa0d-4a15-83bd-5875466577ac", "indicator--1b7f9b7e-33c0-497e-827c-02629ef67d09", "indicator--6d2c355f-8c16-48b8-b09a-4d4013e19d1b", "indicator--6cc0dcca-78dd-4166-bc0c-0a9ec426ba15", "indicator--dba791bb-db2a-4192-a785-9dd3aede30f8", "indicator--6ccb8c7a-4b2e-4d85-b818-0fb8f1b46a0e", "indicator--675b2375-542e-4a99-9ffa-e34d76d0eaec", "indicator--a51330d5-9def-4e10-94e8-21e58b625368", "indicator--36f101e3-1401-42b9-8743-869e81dffeab", "indicator--76d0fe4b-c12e-4f09-a7bd-6538ba2f8ef8", "indicator--c200f46a-c1a2-415c-b16b-b565aa3f3890", "indicator--5a7652b2-af62-4fb7-ab3a-7ffdb7ec8837", "indicator--a3b967e9-0b37-485c-9654-6ac0a083aa15", "indicator--218c98a7-2e71-4227-a4dc-7d5feacdec8b", "indicator--01881513-ec22-46e4-a25c-468fb8c1584e", "indicator--c63d954c-9c95-47b2-81d1-4284938471c5", "indicator--e92c87ab-10c4-4c62-bf94-9d2597dd5c7e", "indicator--816e6789-3db9-4ff2-8b64-8aa5cb3a7093", "indicator--fe8b44ad-1d1d-4629-9ae8-3de42a71cb5b", "indicator--cecce2fd-dc51-4fda-a3d8-fad8c232a721", "indicator--705f0437-ee0c-4820-84f9-1bc8b734f102", "indicator--65cc5b01-9a7d-4f85-8724-2264ac559d9a", "indicator--12348e66-0861-4931-a9fc-011bf61a0f55", "indicator--ac3351bb-2412-4974-b490-c9a9b47b2ae4", "indicator--53336b76-89b5-4236-a9ae-ddc4444dfd65", "indicator--cb18a322-c3a0-4ed6-b498-dc41b8543c97", "indicator--7e4427c6-95e2-4abc-925d-cf04ff37a02b", "indicator--be2d4f7f-d6e9-46a3-931a-9ede8926f5f4", "indicator--21de717d-1e97-492f-b833-36c69f6d511f", "indicator--a3f000fe-fe15-4b0c-b1f5-10a27dd94204", "indicator--89b33293-0b58-4871-a890-92123387d64d", "indicator--723a19e3-7e08-4929-9952-30d470af1ff9", "indicator--97989914-dfde-4491-86ad-7c0b4bd8f912", "indicator--9b1ea792-ae75-40ce-be90-779425f31b7a", "indicator--be95a1bc-5336-440c-b79d-f65e7836d982", "indicator--333466f2-927e-48be-9316-8b69ec67b120", "indicator--950b949e-3f5d-47aa-b660-ac8ae67a0df1", "indicator--e36f88a7-1261-4705-b2b6-59cbca31ad82", "indicator--ca14d9a6-8f7d-42d0-b600-347231c8e82d", "indicator--9aebdb7d-de72-464f-b43e-a1c2dddaf6ea", "indicator--b28c37f7-4fac-4a95-ace3-686f2e165817", "indicator--5953a6eb-3e2c-411e-aee6-669117f2d7ba", "indicator--ddd1f4d2-d5d6-42a8-8f7c-7340e6cb9543", "indicator--d7effc57-25ee-4412-b099-e931ff09d69c", "indicator--51d61a0a-b062-4014-9a1a-30928d272901", "indicator--9f12dda7-2fab-4336-80ad-2a1184a47735", "indicator--efb6e75f-03cf-4f3d-8194-e5839c1ca997", "indicator--23cf8eed-fd1f-4af7-bea3-047745feb5d4", "indicator--42a017ea-b393-421a-b2ff-b41157d285cf", "indicator--a775ae04-888a-4b83-aac3-e9aff21e61ac", "indicator--b6afa0d1-a71c-4767-9164-a83f67b5354f", "indicator--f98b47a1-b581-4cf4-9dba-2acb578a547b", "indicator--16fb6ec9-7338-4a90-a1b8-cb3ca0fcc729", "indicator--f4698bbf-b73e-42b6-bbea-e621392efee1", "indicator--ddec436d-ab19-443a-ae81-31bf89898ce1", "indicator--cde615ea-10e3-489c-8799-7c2446e87acb", "indicator--44ad1d35-0c8f-4a04-a267-e1de97301878", "indicator--763264c6-61b3-4c31-bf3c-46c487ca5ce1", "indicator--d6b4ac2e-dad2-4e11-a9d4-76ba010cc0cf", "indicator--e1b27889-34db-4ed0-bac7-6f52ec02779e", "indicator--09cb4ea4-e170-43d8-89ed-f4013b126e71", "indicator--6bf37765-950e-4d5e-8425-ae9ea47c82ca", "indicator--536be9a7-0d22-4267-8187-85fc4092ddfd", "indicator--01c69155-d219-4901-beb3-7e7b928d75a4", "indicator--27ac15a0-603e-4b72-8155-ea5df853c11f", "indicator--2d254f72-572c-4187-aed9-43d70760240b", "indicator--afb1b04e-3490-421c-90b8-9fe2ba1e0185", "indicator--95594af8-b956-4687-b3f3-897ef1104ff8", "indicator--eae22b12-db2e-44a0-a9f2-204d8b01023b", "indicator--6d0832de-1868-40f3-a026-ed26e09abc9e", "indicator--82c9d085-8c2e-44a2-b1ca-d2552471ded2", "indicator--90b7cb41-bdaa-487c-953d-49dbb77aeced", "indicator--a35e2e3c-f6c2-4070-aee3-c769c89efa10", "indicator--d6296a68-bce1-42e1-a797-2fa107d24edc", "indicator--ce1c51dd-5223-4d2b-af6d-5cf3e186f448", "indicator--c606ed8a-19eb-404d-85f1-6151d242d03e", "indicator--24728d01-c6fa-4986-8a2e-bb2a41463422", "indicator--bc017568-e390-4432-ba28-d305e9af2ea3", "indicator--d4df9dfd-8430-4620-a8b9-bd03c06c05ce", "indicator--a568d638-1217-41b9-9341-b28ffcd8493b", "indicator--8c358e77-c4a3-402e-85ba-9f2936a30cf2", "indicator--9d6a515b-025f-4bb1-be81-738584a28504", "indicator--7aa7324b-63de-468e-b709-4f94db5b75c5", "indicator--b371ff94-56ee-47ab-8c1c-c26273f038b5", "indicator--790119ec-ae00-40c6-b777-72ca35985521", "indicator--dfe0575a-a4bc-41ed-972f-720731ddd49f", "indicator--1bf931da-8e3c-423d-8189-25accc00fe06", "indicator--d2bee403-54e5-4c2c-a1b2-9b052c475a2a", "relationship--108ad1c3-81da-4b41-87af-1c567ec30915", "indicator--cd4a7e85-a0b0-4f00-9c40-151126762915", "indicator--953c79dd-7a63-4d4c-a1f0-c13a68aaae03", "indicator--b35a58c3-9319-4474-82b3-7d82de3512fc", "indicator--126e9eb4-c416-418b-bc34-80b143eab8d5", "indicator--197127e6-ccf4-496a-924d-e5c5b491f98a", "indicator--7f4a58a9-7208-419a-ad28-5c90a2d5f16b", "indicator--e27fbb4b-f303-4eea-8e27-867cb96f9ebe", "indicator--1d656df1-9df5-4759-b22e-ee69b0ec0ed8", "indicator--856e1fe4-0717-4ac3-8441-697d39557512", "indicator--56039695-6ff2-4ff1-a9aa-a40b546a57da", "indicator--a910b926-6d3f-4e55-a60b-ed67d844ae77", "indicator--197c3d41-929c-4099-b4eb-b6d4cf4043d3", "indicator--8373c3fb-cefa-474d-90ef-d31717dc67ea", "indicator--6aca4a10-3c8b-4353-b806-571f1a507a93", "indicator--1c0577d3-5b1a-41cf-a41b-4f0e657a766b", "indicator--fa8fdccd-e510-4742-86b2-dd3c7b14915e", "indicator--9b5c8dc1-57df-43ef-9a00-fcd5c7a00e04", "indicator--3b6c39b4-b6b3-4ec1-b42c-4c4722530baf", "indicator--0205485e-819e-45fa-abc3-aa7c7d601005", "indicator--b4f44566-2ecf-4936-bf69-344d78a6449e", "indicator--20d91ea5-aab2-44ee-8a48-1a9e0bdacc1f", "indicator--24a68b9e-6649-4518-9252-e510630e51cb", "indicator--ac123f8f-89ae-4ee9-8325-79eb9f76647c", "indicator--6501791f-4962-4910-86a6-86e047ccbd8a", "indicator--d4e0a933-b262-48b5-8951-536049cdeac5", "indicator--11208dfa-564e-4679-b6ef-534cbba4c416", "indicator--2ac1b14f-d8f5-4c2f-be4c-a090140127ab", "indicator--90146a90-5747-4927-aec2-c834d4c08392", "indicator--0c0a6399-132e-4e5d-9403-7d233988f131", "indicator--9e1e3f08-313c-40f8-b483-314507b056c8", "indicator--15638224-38b4-47c3-94b5-c8696dd9594b", "indicator--72b23b25-f1a1-439d-8d14-128c2b723a6f", "indicator--4e25d612-3a1a-4af8-ab4e-05819b2e218c", "indicator--5a143538-7fea-4b2d-afd5-c9dcf0b4c513", "indicator--aa99ef6f-6c48-4fc0-91ab-5a522d2c604d", "indicator--161c01a5-4cb7-44e8-9010-41009fc55296", "indicator--2792b388-e8ac-47e6-ad42-1e03fb875136", "indicator--2f489ea0-3b5d-460c-8e12-18f9b48d4d72", "indicator--9255133a-23ff-49d9-b088-10a8fca1ec3d", "indicator--a1a491d2-b872-4fb2-b308-760674af2a28", "indicator--f01bfe01-faf3-4fb9-8980-02e74310ee12", "indicator--7db88c20-4b38-41a1-b026-6d80d8a70531", "indicator--e0ee1125-54e1-434f-904f-8d85d01291e8", "indicator--99f6cebb-44f5-4344-9ac8-a3ea4dbf015b", "indicator--afaa1793-703c-41ff-84d0-5c585d974d89", "indicator--07efc950-d122-41fa-a3b0-19ee605a0a6b", "indicator--544ede9d-3e23-46c6-b69f-e55a095d88d1", "indicator--1eaf8f9d-3d91-4e0d-b55f-e60e5fa2fa55", "indicator--2699c6f1-8d37-4a34-a660-d05289e2e273", "indicator--fb55bf74-b6ee-4d43-affd-40c6385c49f6", "indicator--e8888f69-8a65-4d1d-b9d8-48f662942102", "indicator--d7dd8db3-5a19-4441-a537-cdd56206f1b7", "indicator--c6420f92-42d0-4079-ab27-f86ac6e87072", "indicator--89131b34-83b6-4f8b-9ac3-98e5256a90d0", "indicator--8f8d5010-243b-4dd5-92ab-941fbcc07ad3", "indicator--41c92cd7-e504-4003-97c2-5f95325b5425", "indicator--8586253d-f880-4201-b385-2f0cc9d93598", "indicator--357f87b9-ce45-4f55-8cb6-688dc230685c", "indicator--c34d6bfb-eee9-4df8-bc7f-6246572fca96", "indicator--8a426fbe-31e6-450a-923a-f0849ab0ab3c", "indicator--080863d7-abe7-430b-a219-ed91cb35a922", "indicator--e6b5324d-649d-440b-a9d1-b786bd4c5747", "indicator--3f790903-3e17-4794-abe3-7a05ad4b800f", "indicator--c39776ed-794a-40d1-95fe-ce6ef2772c00", "indicator--37b44318-4a58-4bf0-9dbb-81e28ef35f5e", "indicator--337a1525-42a7-4384-864d-21be93be8045", "indicator--680c1e30-9d23-419b-8713-613ce419791a", "indicator--f7bbc390-5a27-4ef5-9bb8-64069f34eac8", "indicator--bae427d4-448c-41ba-b1d5-dc12613ca54f", "indicator--5c73a3ef-c175-446a-99fa-b4d22babd7c6", "indicator--51f869fc-7acb-4773-a45e-65fab8077425", "indicator--65a7e54d-036f-4b9d-aedb-a9ac9f5a92aa", "indicator--41686997-aa87-4cfd-890c-53b0a84dadd7", "indicator--b3373b6d-8b84-4243-9dd8-9522fa313849", "indicator--b4e7350a-54d5-4424-a20e-23f7cc22c499", "indicator--0cee6346-9ecb-4c57-a379-436a90b46873", "indicator--7c1530fd-2a82-447e-ad25-28421203fffa", "indicator--8e13c96d-0c62-4ed3-b4d6-7fcda63cd7e9", "indicator--2dc68ac4-b0cd-43ef-886e-42eefb6e9e5a", "indicator--34305dc7-fca6-45d3-8995-467fa551350c", "indicator--f33566e0-2234-4047-963e-d44b97668bdf", "indicator--b571162b-2467-40ed-8127-0a687f3b9c38", "indicator--67f2d580-3e66-4ce6-8d44-3f9aedc67466", "indicator--817cc82a-5626-471c-8495-7c2e3688d80a", "indicator--2995c12e-91ed-40f4-942d-adc7585e142a", "indicator--9dfd0594-d4da-4618-b1cd-11c441ac0491", "indicator--548b2bbf-2b54-498c-ac0c-80446c4e2417", "indicator--ebd77f1a-1c84-425d-a871-29df77c3cfee", "indicator--d4a27b67-8ce1-4e1a-9dd6-193dca46b1fd", "indicator--3532377a-ad03-4727-8f41-113c886f6a60", "indicator--8254fa4f-42a8-4c8a-9209-a4aced1bb55b", "indicator--fecc3af3-8b55-45cd-bd4c-12a3a059bfc7", "indicator--7cb6a1c2-c654-4621-ac32-83d8b75493e0", "indicator--5f1833fc-ea6d-4fd2-a7f7-cb1e3b186371", "indicator--236e8f09-af5f-409e-a915-7f14dc3cfcdd", "indicator--bd1aebe9-0e50-46a7-bf23-b88450f0dc9a", "indicator--98f02922-d6d9-4d5a-98cb-af69de2d9a88", "indicator--d831ea18-55bf-4488-b777-61acb3d4755a", "indicator--c974f7e8-5eb3-4dfb-b9d2-3f0b0dbc3730", "indicator--21d30cce-fcc6-4362-ac35-c84818fe1907", "indicator--3463647f-7107-4b1b-be3d-bf5f33983ea6", "indicator--a70a3e48-363c-48ba-b176-608bd5d2661b", "indicator--9ee228e8-0a43-4d9e-9238-26a4e29f945d", "indicator--2eacd2b9-4066-4e5f-ac93-a8ca8a8897ce", "indicator--abb4e67e-ba93-41f7-b240-0164ae79fd56", "indicator--ac468f9c-b462-46ba-a97b-5c7b0aa4673f", "indicator--a48d9e88-1380-4264-8978-50b2d72cc182", "indicator--baa78b48-13c3-41c5-9acb-4353058029cd", "indicator--24486540-9469-4111-aa87-035849457e2f", "indicator--a5c366d8-5dc5-4535-8e1d-869acf6d5e91", "indicator--0b9a3912-ed73-499d-b329-60c365a212d3", "indicator--4c4d87a5-76d1-48a3-8cda-6e89c8c6f8f4", "indicator--772cb150-3273-4f61-8213-928f65cfbc5d", "indicator--d292a7ac-2614-426e-9858-a2889651bc71", "indicator--63f5b926-3b36-49c2-a72e-f74ad2b776da", "indicator--db88aa96-0b97-4e2c-aa7c-372be53ad7a2", "indicator--f5f22371-36da-42e0-b8b3-38bc8d8441d6", "indicator--54f2f639-8778-4688-981e-6cc7068feefb", "indicator--f5bf341f-dc0b-4603-afc8-ecb0d7a199c5", "indicator--b5cc3920-8777-41af-94df-5064a8402fb3", "indicator--af7dca33-867a-4b6d-84b9-b2c92f652573", "indicator--c6f8f6d2-d536-4888-9522-ce87135f38f3", "indicator--41b183d9-c68a-4c3c-be64-c89b1c452a03", "indicator--e83d005b-11f7-4953-98d8-f2fcfd71a052", "indicator--649c6166-01c0-4a9e-aa4f-142eadade366", "indicator--3f612f39-ff86-44e5-a986-f3ded8873346", "indicator--2a462aa6-3b87-4e87-b25c-59a84670b364", "indicator--61020ec9-fc0b-4d04-b5d4-a807227ee6c7", "indicator--ece449f4-c3af-40d5-9bab-6d43115d490a", "indicator--51f46d2d-73a5-445d-8a6b-d0f300df6a81", "indicator--f14407a0-4372-414b-92e7-c3414bfb2e63", "indicator--2fb23583-1f15-43ef-a971-3024c6435b69", "indicator--82a78ecd-0312-4d86-873b-4982efd6f94b", "indicator--e2710f52-78a3-483f-99c7-7d99edf7f3fc", "indicator--eb6fc1d2-9235-4240-9b25-deb30ca30634", "indicator--95955fa0-96c0-4ef6-bc51-077eccae7b6d", "indicator--548e978b-f844-40e7-9405-610782a0b6a7", "indicator--3f2ff212-8419-4440-8f86-ac305624e2c9", "indicator--820842d9-80e2-42c7-a039-82d8861a809b", "indicator--d374e459-fb00-4481-8126-a3f907b82d52", "indicator--0dc79977-55b8-4eae-8e8b-443e3657e6ab", "indicator--4c276dd7-973a-4da9-858f-09f146300dad", "indicator--b32e7c12-df46-4550-b31d-e97f66aa16ef", "indicator--34d0f67f-780e-4afd-ae57-f7bcc05258e7", "indicator--f3bb3d5c-a10f-46ea-990f-fda3d8d1d7a1", "indicator--fc1c619b-dd8d-4989-823a-792db5b7d077", "indicator--8acff3ba-d90a-4f66-80fd-5afe32dfe10d", "indicator--d18183b3-7b36-4b40-8489-9530efa94151", "indicator--0713f8d7-5872-424f-a7d8-ea3fc642f8e1", "indicator--79762355-7642-4402-87a3-48958655013c", "indicator--b00e502b-e146-4b75-910b-83d5de4f8ddd", "indicator--c5e377e1-9cf9-49de-8845-1f8c63ee0fc5", "indicator--8d0f4759-8aea-4aed-889f-610c6df7d7af", "indicator--ab6f16f7-8a19-489b-a905-3717bd973a99", "indicator--a647c356-7bca-452f-904b-1cff0a400316", "indicator--58ccdb3b-b920-47b1-b264-e59fe152c0b5", "indicator--f6ecbae7-2a1f-4060-8fff-f44dbb6901db", "indicator--af1c0885-9e6d-44af-a0df-6f9d526c54fe", "indicator--3e9b7da7-c590-48dc-bbc0-e21a4cd9c9d0", "indicator--43044a50-7892-462f-ac49-ebd4b204fbc0", "indicator--05c82d98-523c-4701-9fbf-a4037abad933", "indicator--3ecb73aa-0d56-42cd-a1cd-7e74e12abf91", "indicator--7ca410e1-9c74-44ef-b1ae-2811f9537030", "indicator--9c186924-17e3-4996-9508-88c2a72c0a1e", "indicator--ee7fda71-a430-40cb-91fd-cc3b2671f3d8", "indicator--2a7906c0-c24c-4f67-a9f4-6a0447ff8f7e", "indicator--e672b840-dc72-42cc-bb17-3a61471562f9", "indicator--f9288a27-e88a-4f77-83d7-8ed93c360cf3", "indicator--079e9d80-ca1c-4115-ae37-5812a19bb8f0", "indicator--a8d1e47d-45a5-4c5a-ba5c-4e5dc0256e0d", "indicator--bc45ca12-682b-49f6-bdd6-4a06aa5a1176", "indicator--494d929b-13b9-4225-9040-1907529576c5", "indicator--d9483086-bc0e-45d8-ac92-ae18b96d9482", "indicator--304d15bd-a2ab-4ab1-8187-534f82006a01", "indicator--9c2bab2c-8122-4d21-8f1c-f0a5690925b1", "indicator--ae427bdc-7601-4ad2-86d3-e11e75f63c14", "indicator--e0089e70-894e-4073-be9f-4c34855cc7bd", "indicator--db048ae5-152a-4d26-815b-52f7c2decd63", "indicator--abc284b0-88d4-453d-8582-1a24bce46e0f", "indicator--60eedba4-1b63-456f-9c84-7f0fa9d1c479", "indicator--127babad-a145-4671-a52c-ea01fb030cab", "indicator--eb8f2774-2246-4525-b934-b9c6147ae838", "indicator--5051e5b8-e4ce-4b5d-8225-bbfd598af99a", "indicator--090e7741-b969-4df5-808c-6ee1ffb300df", "indicator--0fd96e5d-fd9c-4611-8180-c47d743811c3", "indicator--17fc634c-893e-43d3-9be2-0c666fa494f5", "indicator--66088b92-53a2-4e3b-a2b0-3d51b751b4ee", "indicator--b6c4132f-ae75-4750-8bf1-38eb3e96ff73", "indicator--bc0919b2-2469-4eb7-9809-e5fc807c7062", "indicator--fc842714-b943-4f63-a0bd-4a1986353f4f", "indicator--b9661a68-ef3a-4330-b71f-7a0809a80bf7", "indicator--4cf3d8c5-0328-446f-bf7e-002419a192cd", "indicator--15139f74-cdd0-45d4-a190-0d09dd9ec297", "indicator--0c5683a8-2e1e-4815-94f7-d6bd71ec90ce", "indicator--26bfb154-1360-4caf-a686-42c7c287cdc6", "indicator--9db66250-8da6-42bb-9d79-94adb54e5c4d", "indicator--4e6e6d14-4666-46b7-9991-6e5f58686142", "indicator--f418c9c4-ed34-4113-847c-8be0e7e25f44", "indicator--eb92f209-d709-4039-8e83-6cb544cc67f1", "indicator--0f9d6be2-e530-4def-9fa8-acef24a3af72", "indicator--b652b6ca-0f04-46f9-b55c-5489f29feec0", "indicator--11545707-5d41-4e38-9dc7-8fb3a4a08225", "indicator--de840279-e35d-4d31-a22e-f629b36a9a5a", "indicator--76a2d3c3-a98c-461c-8289-8661caf62a10", "indicator--055d897e-3bf4-439a-b51a-1f8c61f16b2b", "indicator--1a951c1f-75f7-48e4-a981-db6d1d746aca", "indicator--bbd146a1-857a-4291-9ff3-7acecc9815bc", "indicator--de261644-cb23-4f41-ad88-37a90a5de9be", "indicator--bbc34d9f-95ed-4732-baf7-2282b36bceb0", "indicator--edcbfdf2-a60f-4b22-9478-fc489a54ed79", "indicator--12747382-d860-4494-ae7f-5a589690d822", "indicator--ec9ca1a2-d5b9-4413-ac2b-99ee3fc49998", "indicator--3304c3e6-7a43-443e-9587-30918eb33a6d", "indicator--255d1909-d986-4374-8bb7-fbe081885a96", "indicator--08d5ebcc-ec8e-4372-b5ec-4b22e5227071", "indicator--eeeba9fd-7821-4388-9f6f-623efacaf55f", "indicator--c230afd8-b46c-46eb-9a31-add7e8734bc8", "indicator--28882f6e-e1ca-499e-a3a4-3ea16c1772bc", "indicator--bf676125-92e9-482e-91d8-ad2dac561595", "indicator--6f041856-0fda-4f0d-a87d-a1a48941342d", "indicator--4a58e5e7-0802-4b28-90e8-57177da18780", "indicator--8708098e-7577-46ab-bb84-73f8c025dec3", "indicator--1d840e7f-7797-4fbe-8448-b90f363d070b", "indicator--d05f8281-a7cf-4e45-9c22-48253052514c", "indicator--6b5cc170-e117-4b50-a6d0-b4ebbd43674d", "indicator--227d56fd-def5-4b1b-8065-c435f593dc24", "indicator--5e43527a-06d6-4b5f-8365-7df6c992395e", "indicator--381be6a3-1daf-4b2b-b7ed-009fd18b5f15", "indicator--f560c456-8354-4b97-a180-06a463a06a94", "indicator--190cd7b1-586d-4b70-9f7f-54b21600e3f7", "indicator--75a54120-afb2-45b8-84c7-653207f467af", "indicator--c9b7edc9-86a6-464e-97ad-72fbbd83be65", "indicator--8234c98d-9520-40de-a7d0-e6bbc679449b", "indicator--fb8031f6-3126-4381-b211-66f656a00d90", "indicator--f0e5da2f-912c-4baa-9f00-37c2613c48ae", "indicator--f5a048ab-eb18-4222-83d8-e2cfeb4c8901", "indicator--a4cab868-0757-4a28-a8d0-84588f30cc1a", "indicator--e3b9dedf-3e31-4123-b03a-afa62094f092", "indicator--2d9baae2-ca90-46c3-bc3b-276bee1d0c7a", "indicator--e15ac37c-bee1-4f6a-8a3c-90ff3d99c888", "indicator--42bd364f-600e-4b7c-9340-5dec89adf528", "indicator--d6bdb3e3-0035-4e43-aa11-dc0cde71595c", "indicator--13472689-5efe-4240-b9db-8d4195c780af", "indicator--d1def8d4-a224-43d6-8905-95550443ce76", "indicator--05547542-8140-461c-b0d5-af4dbf84d21f", "indicator--d4f62e73-068b-49b0-9ed4-fe95ee74de5c", "indicator--7d7dd8bd-4c23-4dcd-b919-013f1a23255b", "indicator--f4aa6253-7b7f-45c6-8075-638db25ef5d1", "indicator--42ad7530-dd9f-4a50-b594-79bf860cd241", "indicator--a98bf31d-ac9a-4018-8b1d-6a54c54109ed", "indicator--77265a7d-fc5c-45f2-8fc3-290c6d8ec5e5", "indicator--ff21f6e6-49e0-433e-ab96-c50bf42ba5c4", "indicator--797ba73c-e571-4321-8e0d-e02715eaedab", "indicator--aca92d73-e927-410b-b7c8-a4e4e168913c", "indicator--05c3bbb0-90b0-431a-b16f-fa803ac516d1", "indicator--8b38eb9d-94c0-4504-a8ca-f11f7544a36e", "indicator--b02a8d56-3585-4be5-891e-bea2c040bcfb", "indicator--6d90dec6-30dc-4720-bc4b-16e4d4b0ca51", "indicator--dc576ba1-160c-44dc-a32c-eaf74ca43d69", "indicator--56c4a263-7de1-4995-bff0-93563a8f39cf", "indicator--1ba9588e-50dd-4e7d-8f30-4c1cc0057851", "indicator--272803b7-b37e-4c77-83a1-33cb6275799c", "indicator--92a8311c-ea3c-4866-8b8e-91287ff00d8f", "indicator--6f6bc153-71ed-4aa7-88cc-12981c085b43", "indicator--c46d1b1e-6829-4f02-976b-79e8a9a1294c", "indicator--4d8804b2-0017-4371-9b19-d01581b60039", "indicator--ade9dc00-35ba-4786-908f-22714adfe440", "indicator--1098f515-dfec-428e-9d11-9b47421f58f4", "indicator--7de175f8-ddc5-4e56-a4f9-f75f87316022", "indicator--7df14fab-264a-44ec-8032-ca0ec27c8a1a", "indicator--b3655ced-393b-41fe-9c22-6638a5083c16", "indicator--7f72951f-d34c-4bac-a0db-47a4f143ccf2", "indicator--6b9a0d4b-1cd6-4c3b-a076-ed197c853b5b", "indicator--bcce1ba1-1850-499a-acd8-b9ed379cecbe", "indicator--5396e1dd-0100-468c-81e8-03ca0df397fe", "indicator--78a9ddc7-e708-4cef-a434-d368f1fbbbb1", "indicator--435551cc-c874-42a8-bd1a-8cbf8b03e1d7", "indicator--34d4bf52-8592-4927-b0e3-5feb031a0a0c", "indicator--86df3b14-8635-4d05-9316-81a3229547fe", "indicator--ad57b20b-4963-4a6c-98b9-835796a7172a", "indicator--90a198ec-f323-4b8d-a893-2316687174f4", "indicator--8d082701-0f63-4054-b4fd-a93be2e2e704", "indicator--6776c877-1610-4d9e-8284-c78ecd195c72", "indicator--8f705550-db0b-4980-85ce-815446c90c46", "indicator--ee753396-d594-4e13-9d9f-c2036810aa9c", "indicator--375ab2cb-e44a-4656-959e-890a0474d706", "indicator--c5b27dda-b161-416e-a717-119507925dcc", "indicator--10df2837-1b49-4da7-b400-6d42cb70c643", "indicator--30a2660d-86b5-4d82-8af8-3224faca232c", "indicator--cf504a23-0284-489f-9240-b18838b1adbe", "indicator--3bdfbcd3-8248-4391-86a9-cbf4b19c3232", "indicator--01726059-9c94-4f4a-9f2e-5e286b58d6c1", "indicator--b22fd837-908d-4edc-af09-6c63e0023053", "indicator--3facc83c-0c26-454a-a82e-aca6b76da0ce", "indicator--7b770db7-6b5c-48ab-9345-1fa5fe46fe66", "indicator--eb9bd702-8314-4a3a-9d54-9966c0c6cfd1", "indicator--70b4c00b-7009-40d9-a0d8-f9cc4a062078", "indicator--1d510d47-6162-4360-b034-83d35685291a", "indicator--3b3f60b6-ff8a-4eda-a4c2-93ad34be3dc5", "indicator--74adb4db-d8e2-46bb-ac59-75f571cb8644", "indicator--e2f404ed-a447-4021-86d5-efe670e0b18f", "indicator--4908b138-c11f-40e9-9b20-dc176b6ba3e2", "indicator--22aa7e03-006d-4492-943c-4e896b6d452a", "indicator--1ab12221-09aa-4a70-a7db-bc9ded3a075b", "indicator--103ae1c6-11eb-4051-a53a-895106403d34", "indicator--9102672c-b2c2-4fbc-b2af-ba7dcb22a1a4", "indicator--22deff7d-cd34-4547-bd0e-e495426af7ba", "indicator--cfe575f7-0c3f-4e01-9838-3d0021854be4", "indicator--659d5bda-6de8-4ad8-8be6-3cf08aab11aa", "indicator--ccf1f487-3a46-4008-b681-5f72f100f71d", "indicator--6a8e71d3-dbb6-416d-ae5b-2778f59f9e08", "indicator--1947e2f7-f36d-4591-9ec0-65e9b0c964b7", "indicator--b05ebee8-99ce-4f5d-b0db-e305f39f7c20", "indicator--1313ff59-8194-4a4c-ad42-06cb7f7f0e18", "indicator--e5509cde-0980-483d-b56b-1183667ba69a", "indicator--8bbb4925-8331-4311-9c04-fa23fcd73249", "indicator--47338666-1356-4fee-92a0-e19455041e00", "indicator--79ce4fc3-dfa3-4d94-8d7e-53f98c24358c", "indicator--c1ee307e-4745-421d-91ad-5d17942285fe", "indicator--0e1abfa0-47ad-4a24-8084-38751b98f111", "indicator--4d50cd10-d9bf-4c9e-8ab6-1a275fb1ee87", "indicator--5aa6730e-8f1d-48ef-8d4a-a3ecf97e25a3", "indicator--936711ee-e24d-40cc-b017-b3f05c5ef30b", "indicator--6ae23413-137b-43d7-9cec-ab1f4e839b69", "indicator--45afbaa5-1ae6-40af-9f75-2cc6b940b702", "indicator--d1a28377-77a1-47f9-81a0-ed4e9b4b618a", "indicator--3af73cbf-d5a3-4ba0-9bcf-7d9618a97156", "indicator--f3737570-4f0f-49b4-b588-b0073af616b2", "indicator--85371fa8-f768-49d7-861d-da3e4732bde5", "indicator--4fd0c4fa-8566-47c3-b743-61df3a409f5e", "indicator--9af4d8bf-55b9-45f9-8c1d-097721fd754f", "indicator--8c8dfd33-191b-49b9-88bb-fa63ad4ac308", "indicator--4b7995cc-0138-4de0-830e-c48ea67bc39d", "indicator--5167418f-01aa-45db-9f7b-de20a68106c7", "indicator--068f0203-f441-4112-b291-a7a0b290c4d3", "indicator--898900c3-fe61-449c-98a4-d41e13599ce7", "indicator--f9701681-9ca0-4e98-bb24-4944c08473bd", "indicator--2ae7d7c9-f3a3-43fb-b495-5a7b9660b9f0", "indicator--7f9a994e-d414-40a8-bc2e-d2b7e69688ad", "indicator--3be9c5fa-ee8d-4672-af65-c44e13dd6b53", "indicator--2a264444-78cb-491f-be98-4d6b4102e6b7", "indicator--c873a319-6b15-4dbb-93af-eda2cb1af8de", "indicator--1b0f2bc4-f39e-4d4b-bb8b-98fa15fe8ef9", "indicator--fe77ebed-e96e-4ad7-90e5-7f2491a0fa04", "indicator--3f5700e7-877f-4f6d-a9b1-43f38769d935", "indicator--f70f2842-d304-4c2d-9ab5-6dad03bd49ed", "indicator--db7a492b-9102-4109-9593-c6785eb051a9", "indicator--edc811ed-2229-442e-913d-64b40c5af64c", "indicator--193783eb-e3b3-4a98-afd5-69a02d901d2c", "indicator--e9762981-7d0f-4ae1-b12c-304889243648", "indicator--7f35e364-09ab-4c41-8b3e-be7530069e2a", "indicator--8c31a01a-d7e7-49e1-ac37-b75c70c06a02", "indicator--95a366a4-3de8-43f5-ad13-354af3f92f22", "indicator--6d7c4085-0e36-4733-bc89-3ad1803d6181", "indicator--5c433430-6d22-4778-ab32-b3239a39200b", "indicator--0678f010-16ea-4216-b890-04b3a4ba6e70", "indicator--122db8b5-6dc2-4dc0-8168-f020442e6888", "indicator--77543fc6-4bf8-4a2b-9cb5-c68e31dbe478", "indicator--585065a2-a4b5-4155-997c-bbcc95ec7ff5", "indicator--2256b5ae-91db-425c-8a75-782e3d0f0b8c", "indicator--85583056-e595-4e3e-8941-d5303557edd0", "indicator--9951642d-05f1-4859-94e7-76762c0fbbe2", "indicator--3cd10ae5-bbfb-469f-ac02-4c491bec0736", "indicator--39695cb9-a9a5-4b6b-916d-597ad0f3f216", "indicator--7067b7a4-4937-4246-8d79-dd839cb8de6c", "indicator--857b793e-1520-4c08-9f34-3377d55aa214", "indicator--d3fba777-f799-48ed-a0b6-1bec1e77a5df", "indicator--445ed1b0-9d08-4ab3-a5e2-9ea14465813f", "indicator--84d3dd46-2cc8-4877-bf41-8f8d65bee655", "indicator--db65dad9-fe8a-43ba-8f2f-87626d46db85", "indicator--792d43f1-97fe-4aaf-a0a7-93cca497635d", "indicator--ede2d3bc-2edc-4ced-993c-683fd1a57aeb", "indicator--5bb49a27-13c1-4d48-9ec3-48d395f2df41", "indicator--ae2d3dcd-be74-4d3d-9a45-76964d74c0d1", "indicator--4a385242-4b45-4ebc-9977-c916fadecca4", "indicator--71ece133-405a-422f-9e16-4d03206e17aa", "indicator--081e74bd-f479-4d40-b691-2fb760ee22b6", "indicator--b907da0a-77a8-447b-974d-1d31c4bdc7de", "indicator--4c77c6e2-508b-4dca-a62b-6a83178f0192", "indicator--983c59af-520b-4e7a-ace7-4cf734814a97", "indicator--fb2df7d1-64fd-4ba5-9001-5f046915bc0d", "indicator--a8d52a2f-463d-4da2-8283-1d30aae3f49b", "indicator--47a96910-57c3-4b77-bbe0-5ac8dd17c7fe", "indicator--73b52cd9-3d9a-4578-aa20-b90de2dd4436", "indicator--600ef799-6c23-4931-976a-b8bfdb2d6f56", "indicator--0736d0af-4b9a-4b78-8498-0c8218fb6242", "indicator--78a7d894-0987-4356-b6a5-b70937bd655b", "indicator--b54bebe1-877d-415d-99d2-bff6859e0740", "indicator--ad9082e5-f4c2-46ba-9f93-f6d8c06cc6a9", "indicator--9260630f-fdd8-47bc-b958-a320415cbafe", "indicator--174409d8-9b7e-4d1a-ae2d-5a42ae47155f", "indicator--949a2924-799b-439f-92f6-faf31403dd41", "indicator--e5004dd4-f99e-434e-a279-77b72688341d", "indicator--05dc12d2-7ba3-4ead-97be-38d3e0dd36fe", "indicator--504bd29b-8c1d-48d4-b02d-c409a349fac0", "indicator--90334329-3231-49f3-87fb-f3cf36360a03", "indicator--49d81e2e-c16e-495e-b1cb-abc384ac3cc2", "indicator--ed62e0cc-c2b2-47b3-87b5-12e347e8ef85", "indicator--691b131b-fd34-42f0-9c8a-060bac544aa1", "indicator--acfb6e2f-783b-4e7a-a153-66e30f1b8818", "indicator--195d2503-a35e-4fdf-b044-b349832e28e6", "indicator--cafbad07-f2e5-484f-98de-96683551c08a", "indicator--2cb2f957-8780-4159-acb6-f6f16b766fb1", "indicator--b7fcc11a-3cd2-417b-b4e3-d240db2bf06f", "indicator--5eda01f2-0828-4a2b-afc7-d31b48c0c0ae", "indicator--751f60e1-fec6-4580-a535-23a570f66726", "indicator--31016da4-358e-4d36-87c6-992a4a16e18c", "indicator--c4b6e0cd-762c-4a21-905c-6fe479ad8a0a", "indicator--f5938815-d61a-4fed-997a-65993eb46e88", "indicator--4aaef125-8940-4dc3-9ddd-63947ebc7cb3", "indicator--55172862-b001-4b29-9bd0-971cb9464680", "indicator--91aee9fa-a9e2-4730-86bc-6ee6bee9ce8e", "indicator--ee841351-9689-4338-b195-d0743fabdc68", "indicator--f2c72ab4-faac-46dd-9031-29f008cc2431", "indicator--901aac62-fce1-49da-9fe5-dd17f76a9718", "indicator--fb197a31-9c8d-4ecf-8bad-74f68ff0e85d", "indicator--244f80ef-be81-43d9-8d86-65b56112a57e", "indicator--92931de7-8964-412e-a43f-a1b84c22174a", "indicator--868f5b24-64b1-4287-b2e8-2d4a5feb59c2", "indicator--eece3779-00b0-43b4-851b-8aa2e16a41b0", "indicator--18a299f2-57db-4a8c-82a3-77046c16a0c1", "indicator--8a77ef44-f899-45a8-8f61-63c1fb27b4b5", "indicator--e70ae43a-e313-498c-accf-3a10c8067b12", "indicator--c4b31fee-9721-47d1-b006-db36d3714f10", "indicator--9ac8fd65-e28f-4b8a-928b-09baa2c423d2", "indicator--e411e8a9-400c-4b3c-8d35-b65b257e5ee6", "indicator--bdfb82e1-11c7-4bf4-a6ee-1b8dc46c40a4", "indicator--8fb74c8d-60b0-4047-882b-54ccb44da5a0", "indicator--6d4e662b-c86a-48b4-b462-d75e9d199a8c", "indicator--f7c1f2b5-b9c3-48e3-bc83-2152639ddba5", "indicator--a471a09a-8fd2-4791-92b7-3c9c3891ee05", "indicator--0d131be3-7293-4d9b-91bd-c2d05ac83006", "indicator--f1be22e6-47b4-4ff0-91a2-3a86bc60c97a", "indicator--d6f1d574-355c-4f91-8276-a29da0373fd5", "indicator--7668b233-36bb-4570-89f3-ff47a2d789da", "indicator--dbe4d38d-be54-4487-951b-14d8fc5b1d0e", "indicator--f4f1e485-9504-477b-8d87-92c2e3d71c1a", "indicator--3e6541a6-e0fa-48d2-8fdd-e308aa544e5e", "indicator--dfc10c31-2608-4edd-b4a3-23e96ce97958", "indicator--0087e697-31f4-4219-a5df-08e997db034f", "indicator--8ace942f-5477-4687-a692-c1f770efba7b", "indicator--ec5c9144-0aaa-4b45-9e05-c3201e572330", "indicator--55c83539-5701-4cde-ba6b-4f1d0fbe1cbc", "indicator--e0e99291-8601-435b-98ad-57c1a9e2928c", "indicator--9b180c6f-a2c8-42fb-bb8c-04a76b248c2d", "indicator--2328e0e3-7854-4472-b65b-88e3f8d0ab70", "indicator--05406276-7b7a-437e-a12a-15494cd0a5a5", "indicator--eb79ec07-e203-40c0-81d5-3675afc6478f", "indicator--509738d1-2cd9-4626-b94f-c375e20ff289", "indicator--1ce5240f-6b15-4251-bb11-5ec2ec4dc5e1", "indicator--72ddee75-d397-49c0-b285-c87643c50df8", "indicator--2c763c0d-bcec-4973-8f9b-5104b8281951", "indicator--e57096bb-5369-4aa7-b337-eb8474bb766f", "indicator--a0de5b07-e895-4de4-9254-222ecd99fd4b", "indicator--d4382fd0-56c7-484f-af83-00793a76dd8c", "indicator--410d84a1-88c6-45d7-8a5f-41371fac47fe", "indicator--005b1b39-a373-4fbe-b1ac-d16389e13a45", "indicator--f4c7c954-0c0b-4f1c-8dcf-89f1c519177d", "indicator--d473f6f5-a530-4352-8990-31e8448e1601", "indicator--73f9ddac-da2e-496d-9941-14bba3886b53", "indicator--0abe3c71-59e7-43f6-b930-194e6fbf1c7b", "indicator--4c8d5e8e-c16f-40bd-9a9e-ce22c2d93cab", "indicator--b993939f-130b-41fc-9d10-8cb970ace036", "indicator--da14a7c1-870a-4f29-ab82-0a58b45ee44f", "indicator--1f57e7e2-5f17-408b-ab4c-31503311aa2a", "indicator--55712f1d-a5a2-4f2f-b7c6-66ae5426280a", "indicator--987c511a-da5b-4d90-b4e5-f986833acc27", "indicator--51646640-c28a-4b57-b9f4-0bb56e583664", "indicator--4deea2c0-d10c-40b3-a876-298209f53a6b", "indicator--33f7de2e-103a-4dac-913a-845388dc0a8d", "indicator--ecd3462e-09ef-46b5-adea-c6e04dc86e9b", "indicator--aa46246b-f3a7-420f-9dcf-132b28b3411e", "indicator--4bdabf7b-26a6-42be-af45-4a926f015b50", "indicator--54e94da9-79a4-440c-9398-94183449bb4f", "indicator--1bfb7761-43f1-428c-b38e-a8b5ac677ee3", "indicator--e651bb5b-b677-4e04-8b01-782b9236442d", "indicator--d12256a1-f23a-4367-b789-11a625acb596", "indicator--82ef583c-b4f6-4003-a1d4-1e666adb7508", "indicator--1e065eaf-6cfe-4438-8793-29259baee785", "indicator--d9c6f5ea-7fff-43ab-ba94-0ae4228b86b5", "indicator--bc5acbcd-b52c-414e-bcc0-1f6cefa521c3", "indicator--7508e4a1-2127-4ae7-846b-b0050bfaa44e", "indicator--afa0fb2c-45a8-4701-a439-f96f1310589f", "indicator--28cbe8ba-fb81-490a-b3ba-36ca3f3581df", "indicator--d64dc810-440a-441c-b199-2d73b4ee3089", "indicator--b8359732-4dbd-44ba-a8ee-ba0f31272b97", "indicator--e3bfcbe6-136e-49c4-9af4-549195ca0d43", "indicator--f3e14125-d3b7-4f5e-8179-cb14fb0ef64f", "indicator--af17f0fc-65d2-4d4b-9377-ed211e2dc477", "indicator--22831990-8ff8-4cab-a52d-527f9c71aa5d", "indicator--e2e76e81-df54-4ddc-84fe-47ddb6b30320", "indicator--f13b1441-994c-4794-af4d-04fa77b31b6d", "indicator--64c3ede4-2a51-4a36-8528-98ce4c4644f0", "indicator--9e53ab37-502f-4917-86df-41ccd5feac12", "indicator--652d1698-e5c4-4d03-8889-68e2f5cc9dcf", "indicator--2d8396d2-15f2-455a-be57-7b111eeb37b4", "indicator--4adca306-cffe-4fe9-8e6b-0f1ad0baac97", "indicator--eefb7dd5-9ccf-4ef9-befc-09ee94b616c1", "indicator--e5a17d5a-22ad-4294-9efa-c41c33eea0e9", "indicator--f217f042-9f41-4883-b969-4b60fabacd1a", "indicator--4b50055c-3476-434a-9dd0-e0e97105d9ba", "indicator--99655738-12d6-42f7-9e23-f0894e06490a", "indicator--55150a56-c18f-45cb-8495-f0718733b232", "indicator--0d35fcfe-30d6-41de-a15e-6e873f1faaf1", "indicator--46116f44-f71d-4362-a83d-5d576970115e", "indicator--e4f5d58b-3e0b-4f43-8f41-da7fc9960625", "indicator--9c611ed3-68cf-4ffa-bcca-e82f524c5653", "indicator--f7b31a15-7913-4110-a65a-806087d182cf", "indicator--293b6a85-c713-4416-8ec8-93b60dc8b2d7", "indicator--0518fff5-c910-4602-ae66-af35069644a4", "indicator--b8df21fe-020b-49a9-ba52-ed1a27edfed1", "indicator--23a39df6-0690-4ca2-9365-24ac3dc2d80c", "indicator--d2e2f650-e270-473f-8996-d48f95855ff7", "indicator--fdea9253-210c-409f-a708-837b029a7df5", "indicator--418f2427-f5c9-44e7-ab0b-d3c6352706af", "indicator--a7137a1c-4a24-436d-8a65-3386dcde710d", "indicator--7282d519-1491-4fe7-af81-97b12a22e05a", "indicator--94c8bae6-b1a9-4708-92f5-12587782cd83", "indicator--bbf246e7-6c29-4680-adac-1ac01f75e6f6", "indicator--4791ad19-1a43-41a8-8f1c-c4ced7df01b0", "indicator--53b73595-44d9-4b08-8080-e29bd64240f4", "indicator--f8106051-3a0e-4610-a26f-7a125260937b", "indicator--544e5304-9404-41bd-aa4e-963f6c98dedc", "indicator--04b2cfe6-1712-4d1e-8932-7b745e1530a5", "indicator--09c6db45-1fe9-479c-9b12-ce506b5d6692", "indicator--92583c5b-2f2a-4a95-82e3-87d6d5257b34", "indicator--50cfe04c-63ea-4a1b-be64-3ee12aba3f28", "indicator--3fac8d59-ee34-44e5-b515-89120342c208", "indicator--b67da3d7-1a5d-4373-9ceb-de492ca5a8e4", "indicator--a5c33e2e-51ee-46d4-badb-42e39578d167", "indicator--89c182a9-e929-4c0c-a1cb-28b935250a19", "indicator--9a0f650a-03c6-4fc0-a3d3-108dd9de1fc5", "indicator--4fb0f33d-c56b-4ba3-b990-53f12e3ea998", "indicator--bc27a49b-9eb3-46d7-83bf-2f58b60bb0f3", "indicator--858f5725-941f-4dc2-a8b6-14c85c4a26a7", "indicator--b997d8d3-1ba6-4cc8-917b-77dc5d094015", "indicator--c4a0b55c-62fe-436d-9075-24c36c85d82f", "indicator--1626f300-04fb-41a2-84e7-4dd843450b1b", "indicator--65d217df-59e9-4d7b-ba4e-4d6e85383287", "indicator--9391d660-d5dc-4f36-9e26-ababda8d3bba", "indicator--742bf890-3705-42b9-8956-5983cc1ba7a8", "indicator--f890a195-e5fa-42c0-bfb6-9dd6971a8e55", "indicator--03e9bdb7-2b9e-47de-9218-1b509c5a378e", "indicator--f000d38e-994f-4cea-9e11-a869ba529690", "indicator--fc644585-da09-497c-912f-7f4a65245597", "indicator--064f6e2d-cf9e-4bc8-8d0f-86c86c51c495", "indicator--4bbffe84-ec48-4017-a472-62e6c4896be4", "indicator--13e212fe-460a-4863-a983-2078e3766033", "indicator--27e76eb9-58bf-4a40-ad14-6a66550bd8ab", "indicator--240cc1ea-6d3b-46df-a431-c731ffe163db", "indicator--49044f10-d212-4eaf-8170-0768335be5c1", "indicator--d927e547-7100-41e7-ad5f-eeccafe73124", "indicator--07a162c6-e73c-4f73-9ee3-49f83b6a9b80", "indicator--26de8401-6334-41c9-8a60-cdde63f93201", "indicator--f2b2c1e8-cfd1-42cc-8995-076a3c7694a5", "indicator--7dd75060-cb66-47f0-9192-fb305e5d3557", "indicator--6922cdba-ba96-40a6-a89e-bf94975d1afe", "indicator--2a23d3f1-e5d4-451a-ba2e-a097b2b12e43", "indicator--a89822c7-e0cc-4181-9dee-5197ebf1027f", "indicator--ba3e9a69-df98-4e5e-8131-df9e87f923f7", "indicator--2bd4162a-98ee-4858-b3d6-f915b933aeac", "indicator--0724ac52-b260-4aa6-93fd-a644045a17b2", "indicator--2d62ea4d-c6a1-4600-abea-54599caeafa3", "indicator--b2868856-5f19-4d19-84f8-624d51472ebc", "indicator--b95512aa-6413-445b-bf7b-548e9c8f55a0", "indicator--d41c18b7-6c51-4311-ba13-e4a2c5698768", "indicator--205cfb9f-1913-40b4-96f9-3ee05eff2ca0", "indicator--2c46eb26-8948-49f2-a14c-ba53c65b85bd", "indicator--8612b5fa-a989-42ba-803d-6dfc55efa6b7", "indicator--52fe4b0d-fe00-42e7-a7f9-1b06ec5a8c52", "indicator--3cb2b07d-869d-46ee-97ee-3b298b382aeb", "indicator--204931c6-25c6-4746-bb2d-ad46b7076eab", "indicator--204bda01-f0fe-439e-8d65-393d8e3aada9", "indicator--ed1277b6-dee7-4fe2-9a39-b485ac549f0b", "indicator--f64d99bf-a43f-4d54-922a-709481721e29", "indicator--c544d707-757e-4823-b16e-3751c30faa9f", "indicator--c9fa67dc-1fe1-4f99-beec-08389b73f876", "indicator--0eaf9404-9bd7-4438-9e65-88c46307d364", "indicator--375c5922-8226-42a9-bf1a-bd50c8f1458e", "indicator--899fe0e3-5d42-4eb3-996a-d172044b54bb", "indicator--1da9a40c-54a0-4387-a2f3-dd7a0fa91e34", "indicator--ed79d66d-7e43-4e59-bbcf-5e584f87d37f", "indicator--0f2f8d09-25dc-4d05-9d47-cb12410e6d70", "indicator--7e693a99-9617-4d6e-8924-1ef313837e14", "indicator--adb9901f-6172-4539-a58e-19f0b9b62a0e", "indicator--503f43e5-8c0b-4546-9a30-0c4e7be04b64", "indicator--3db24c8b-06c4-46ad-a2a2-8096a4bfe7cc", "indicator--4ef521a9-b9d0-46ee-b17e-26a3aa399577", "indicator--78ca3493-f538-434c-8b6e-93fd3e9d9332", "indicator--6c0a2659-183e-4381-9c1d-e5d6cf4060ec", "indicator--b67a1c19-39ca-446f-bcff-e95c01648a1f", "indicator--38e4e611-df83-4166-b258-9754972c0a93", "indicator--fba07681-f864-4f5d-9fe8-b21ae6fd6f08", "indicator--96ae0525-a1e1-4628-bd3a-d31abb6d86a4", "indicator--46f33a84-e703-46cc-88d1-12b113f1861a", "indicator--3b22ccc5-0d17-49f3-8ba9-bd5c20ff9761", "indicator--0e2fbae6-1337-48be-85f0-6f3e5986939a", "indicator--589e41f1-8877-447a-8abe-ebbcb299a196", "indicator--06b36692-4927-4153-a51b-015e36f7e6f3", "indicator--7aab839d-7f81-40f7-9033-e9e1143022ae", "indicator--f8811a07-5d1a-4c4f-b64a-a67ec06208b4", "indicator--f097e691-e98b-403f-9848-b45c396acb7e", "indicator--f6b3b3b1-c49e-4892-9b38-97a322b794e7", "indicator--41d01ef9-2da4-41b2-ad8c-aed0b41b406b", "indicator--7f35b961-0325-4702-ad8b-7b8f3dc6c313", "indicator--f4c272b8-6a12-429a-9328-04fe2ce94ec7", "indicator--07948ebc-0651-4862-a41e-26a6e9d9c929", "indicator--0f9199d6-20f5-4eb5-ab60-09c9dd84edad", "indicator--2b582b3e-e021-4c59-8104-e344a9cc5db3", "indicator--9bd81044-9f1d-437a-a2ef-0eb057855a6e", "indicator--708ce087-5d16-4a49-bc18-f26b2d010669", "indicator--f3ff5e0b-534d-498f-ad61-87da624f4d1b", "indicator--800191ad-2ac8-46ff-88e4-cb5323b83edb", "indicator--13f9bdc2-a563-4520-9dbc-f7580c9db399", "indicator--dd4d3bb4-459d-4ac5-aff6-df17fb1ba9a2", "indicator--3f3fa5b8-07b8-499e-93ad-4104d1b50d39", "indicator--d16915d3-acb6-4d63-aa1d-aab94cf17ad8", "indicator--9e1c8ef1-5844-42eb-a18b-086ecfbca8f1", "indicator--e0576f28-1f74-42b2-913e-5e74204b6998", "indicator--5d8571c7-bec0-404e-aff1-0807a07be817", "indicator--889b5329-79aa-4260-813e-4d882f3bd414", "indicator--1d6a1f36-29d7-4676-83eb-48cee36ddf83", "indicator--f63d0e28-e749-4ab0-b6b1-a9a40c081269", "indicator--042c0f69-2ca4-4a2d-8e32-25a1e23c204e", "indicator--90f569c0-a2db-4954-a035-322d8a8aa4f2", "indicator--1e5f7db9-9d55-4859-be3f-58c23463220d", "indicator--006ae895-d5b5-4ce0-b5eb-8268fb7dbeb7", "indicator--46662703-9ec9-4017-85e1-7cddc2f8dd53", "indicator--79676fd2-f800-44a4-90bc-546bdd3f9f17", "indicator--12d01d67-e98c-4e76-a9cb-c5e53507d243", "indicator--d5c83e95-62e1-49a1-998e-7423742858d3", "indicator--3bdb0553-1747-4842-83d6-2068639ee082", "indicator--0fc8a6f4-12f5-4b50-a434-9df1d8a62415", "indicator--16e12400-7ec1-4ce0-a360-293fadf93ae3", "indicator--a77a70c6-64bf-4482-a638-c73e1f09b82b", "indicator--b8a578fb-b5c9-41ce-97f7-1cb4dcd94d97", "indicator--b2810f22-1381-454a-a4a2-8b49a9ac0c4c", "indicator--1c77f430-5cb3-458e-97c8-3465cc17694b", "indicator--58139309-1b0c-45b0-918e-16b39bbba904", "indicator--0b65470b-e077-4a2e-9a99-780b7e0ffc4b", "indicator--95533bac-30e0-4a12-b761-e29c2c9b72b5", "indicator--4a6b4834-a962-472a-9f00-1ba30d5769b1", "indicator--c660eb4d-8feb-400a-96c8-1e8d549cf9e3", "indicator--163a5ace-3ff2-4a2e-aad8-abf1268a7119", "indicator--ffe2d93a-bebe-4ff6-9cd3-664fe4c36355", "indicator--afc5277c-c424-42b4-8c0d-3f03be3fb00b", "indicator--2ecba9e0-036f-4c82-8a24-5431c0fdcfda", "indicator--88af8739-1eda-4121-9d18-e4426cf2405f", "indicator--e99cc541-d122-40f7-aad8-87ba6c67ffb0", "indicator--c5363880-a224-4d6a-895e-5a0de694ad8b", "indicator--33d32076-64a2-4403-9bf9-15fc3c8f35f1", "indicator--70456c31-937a-494a-88ad-0062c6f717c7", "indicator--64d8d5f7-34a1-4f26-8f3b-f39385151b3b", "indicator--37ed0952-8678-4ba4-ba4c-5ea531dff21e", "indicator--e0a160e0-5897-45b0-8e72-271ae4660ab0", "indicator--8f580faf-4ab5-4e5b-a23a-33c5f01d12b2", "indicator--fead75c7-77a3-4469-99a5-ff8d7e37f19c", "indicator--af39f5ee-278b-4f9c-909f-e1e40a5d2a54", "indicator--bd8530fa-78b9-4844-a0cd-c0af996efe78", "indicator--c4df160f-c0d3-4949-9d99-8cd0d4952c35", "indicator--1c8d52e9-8383-4caa-b9b6-3ea74bd65801", "indicator--eafbf1a3-e41d-4691-90ca-81bf2cfaf700", "indicator--27129ea3-758d-4571-acd9-dcd73ae0b82f", "indicator--02cd380c-7950-4c39-a6fc-3cdf0fc3f34e", "indicator--4eed8660-2ebe-4ec3-8599-c2fface4cd73", "indicator--17d4a522-b5d2-403c-8dc5-70ff14e86a02", "indicator--be73ad89-dc9b-4647-b4e1-8614f367d378", "indicator--0529e50a-8380-46ea-a291-ac9e43551bac", "indicator--95c763da-2a0d-466d-b710-a9cfeda0de36", "indicator--8297beed-03c9-425a-bb28-2117fd5d719d", "indicator--fbd66106-c098-4b92-85b8-acc4ec2eef53", "indicator--57e21ebe-c8aa-4183-858a-56f2ac4c82f6", "indicator--4fb0ecd8-9c9d-41ca-ac1f-7f55543af170", "indicator--8a73796d-f1e1-4e83-af0b-7e1cc4b3447f", "indicator--eac6fcca-f661-4df8-b510-713ba88e38b5", "indicator--80279ee1-3faa-49ac-8380-e2c61b7a6e73", "indicator--2a4d1569-68e3-45d2-bd2f-e2dbdbb6408d", "indicator--5f1f1c7c-95d8-46b2-a1fd-080ce4a11ad7", "indicator--d8d665da-7def-4f81-845d-93d703682f2b", "indicator--b447edd2-7d19-43a8-adb9-89ebecaf85c5", "indicator--4c9b7bf1-2942-4fc1-9153-21f8c8544e6d", "indicator--04f7b9a9-8c68-4aed-a216-ee468d193fe8", "indicator--de17f412-377c-4a2a-a092-f2d1c990e9df", "indicator--314d93f6-7344-4694-83be-c96a8b94095c", "indicator--c7a71e65-d02f-4789-bd05-68e14d237bfe", "indicator--535e9a83-2352-422d-b184-d1067458bd3d", "indicator--50f672e3-bef9-4e7e-9a03-4c06cb062a42", "indicator--3d595662-0856-4fd0-8949-53cc547f6550", "indicator--e7145621-782e-4890-8f8f-4869625ef210", "indicator--9e7eb0ab-a944-4761-9176-e4603af29337", "indicator--34bb3518-d830-409c-973a-91e0aac89659", "indicator--6400af15-a44c-484b-ab74-8599c26998c4", "indicator--e298abdf-5105-4ed2-807b-0eacadf8bfc9", "indicator--5ff0a8fe-9ab9-4d30-8ed3-df07178a4ea6", "indicator--f9851b49-ee48-4785-ac1a-6e1530353a53", "indicator--3d00e2ec-d5dc-4ecb-ba39-afbec3435f0a", "indicator--8297dad7-6678-4db6-807e-aa9b8542e70e", "indicator--8a7e5000-bfd5-4e99-bbba-9cc33808f6c3", "indicator--33504a95-3816-45a9-ba36-9c78992c07f5", "indicator--cf244fd9-6859-46fd-a1a3-46235035166d", "indicator--63544f88-abc8-4b21-9870-86a2e7da91da", "indicator--028775e1-9b64-459d-83ee-1462f9baa48b", "indicator--d490ec9a-faf6-4c08-a489-6dfb0c94cb3c", "indicator--4e59300d-811a-4581-8f6b-5afe4592010b", "indicator--b18a07c6-96ec-4d61-83c9-4e04ecf5e0c4", "indicator--d3be91eb-eded-4b3c-8d09-8a408f70edf1", "indicator--fd5f0b4a-3159-46ca-8eaf-ee2e2cfdfb77", "indicator--b1f1d079-fdce-4982-bb05-6c3df32cbbdd", "indicator--dd3570be-0f09-4142-aa8f-cda72dd483af", "indicator--d78f627b-6497-4c21-80ce-1387515e1672", "indicator--b5c1a174-44f4-4e52-b634-f4af26e5532c", "indicator--d7138001-213a-45db-ab96-b624c573555d", "indicator--257c3ed2-c32b-4420-a609-16a68c417106", "indicator--4b4c8c0d-b1ef-47cd-949d-de741d356495", "indicator--51edae83-36eb-41cf-bd7a-eabada16d836", "indicator--cd010572-a799-4e87-ae1d-0a0f7855e811", "indicator--3d39ab7a-5577-4801-ac60-5ae2477dcfe0", "indicator--2076a0db-40b9-4d42-aa2f-5129243501c5", "indicator--77e34127-d450-4e4a-98f2-93788ded0d78", "indicator--fa3f82df-e55c-4b94-8bf0-1a7187f2c857", "indicator--f71baa5b-e562-45c1-b0e7-28d043e37022", "indicator--1a5718e7-1225-4111-8830-d8d939721f00", "indicator--6cb98b5c-95c0-4aee-b907-f37888c08565", "indicator--148bb3df-b918-48c1-9ac8-6422b2914caf", "indicator--d88e315c-67cd-417c-85eb-00e185933f1f", "indicator--16c695a8-f7c0-4515-b3b4-cf52f8f0628a", "indicator--dab9b1b9-8e55-4724-ae73-19137097bdd2", "indicator--0ada0ba3-2b58-471b-8ea3-1cdf263972ea", "indicator--5ad2ef03-6764-4e15-8894-841c6f896a06", "indicator--abb7e308-3e9f-4b9b-995d-5751927c53f6", "indicator--cbbc2fe2-c774-4752-8400-7ca3e0830804", "indicator--6ee99cd6-a3b9-44c2-93dd-e401fc396a7c", "indicator--268cdf7f-eeac-4244-bc49-26b440a0f77f", "indicator--70701b4f-5257-4559-ba34-ad1ba3b1c683", "indicator--527fc823-c359-4310-95a8-c1bbd82db82c", "indicator--1a3796f1-0a1c-497b-b5d0-4d8bbceb1ba2", "indicator--205966c1-ec9e-40c8-bf1c-29ecdd1b48e8", "indicator--a61ebf2e-adf2-4db2-8716-da60c27ba960", "indicator--bac24009-cbc5-446f-a524-3c740d068751", "indicator--bb32d787-df32-4cf5-9bcc-aee9942dbf76", "indicator--1492ccd2-8575-4bc9-aba0-6790b24f4a6b", "indicator--fc2c663c-7d25-4609-a25f-d7f4c80b6d6d", "indicator--e1e471dd-3eaa-4202-8447-f2ef834a4fe8", "indicator--24c75422-6718-4aec-bf90-be53c86054ad", "indicator--1ad05448-9993-4dd6-b507-6651abf606b8", "indicator--06ae518a-7c56-4853-bfef-aaeed6b38f76", "indicator--76c12e20-1e94-45e2-b810-7cca1a88e10b", "indicator--7a110fb2-e9d9-416a-b72a-968acca031ba", "indicator--1f07ff3c-3976-4127-994a-4f7a3892e68d", "indicator--e7cce18a-80a4-4da3-8307-578970c433b4", "indicator--e5b23ad1-60e4-41c3-8e7c-219da9d5a27a", "indicator--b2ffbab6-23c4-4454-a4c6-6eccf429a916", "indicator--7e62eea9-0d39-4189-948d-22ff44ad3ee7", "indicator--27bbfe83-91cb-4ded-98af-cfe33da1b0b1", "indicator--dd7ebdd2-6741-44db-9c1d-e2adfcd218fb", "indicator--35dd6414-be60-48dd-a840-56781d9950fd", "indicator--c331b648-0366-424f-a4a9-77dfe275839e", "indicator--6b13638b-7ee1-4d67-9c42-8d792ff3a65c", "indicator--05c46e5d-0df3-4630-bb3b-9d14ac2ccec4", "indicator--0740e70b-381d-4380-8e76-dbd3b1ed0d7c", "indicator--047fa63f-0bac-4563-b9de-5aac7a23d127", "indicator--fa64463a-65d6-4c65-ba31-d4ef289dd471", "indicator--4e04f17e-d309-43b1-bfd1-dc78dab1e47e", "indicator--190df1f8-fa67-4fc0-8839-cbdd841d4e0c", "indicator--412a79f2-f3df-40ee-8377-219891d504df", "indicator--d9a08d63-17e8-44ac-b66e-9d2be8e2d6bb", "indicator--ba7a79e5-4414-4d65-97c5-6dc005716166", "indicator--44071a87-e746-4c89-928a-90fd3b38fb0c", "indicator--8e5abf13-6b21-415c-8377-0ebc42d51f33", "indicator--bcbfecf5-2527-41c5-9c1d-5d6faeea8fd9", "indicator--849845f4-9a5d-425c-bcad-08c9bcc2808c", "indicator--4250fdfb-2770-43b0-9727-e89e611112ac", "indicator--4c2da8d6-cef1-4776-9bcd-0eee0814af8d", "indicator--cc507895-0595-40c3-ace9-7e6709721353", "indicator--cf4377ef-84d3-4e20-b278-117f795a32a1", "indicator--4a13fa08-45e1-4994-9f34-d6a435bb42de", "indicator--256bcf17-a991-404d-9785-3c5ef9b6a776", "indicator--0411e21d-f6c3-48aa-9b94-458f7f00f8f7", "indicator--453589d8-5659-4ec7-bb74-145d32fdda36", "indicator--bac85c9f-e4c2-4085-870d-df7d0806f696", "indicator--edacb159-a350-45e5-88be-5ea6859b67c8", "indicator--7d3c079e-bb59-4bd7-b49c-f212d8a4b9f6", "indicator--467d6d5c-6adc-4d77-b5d6-628e28f65e11", "indicator--2769fd0f-ef8a-40a1-9d69-3aa0bf23e946", "indicator--3a0cfa72-5a35-4baa-92ec-2bee565917a4", "indicator--29971b40-76dd-4572-a14f-6a18231278a9", "indicator--f995961a-94ff-407c-9560-671c629d6b2d", "indicator--7fbf055a-5894-48d2-a948-bd12b7c05401", "indicator--107e2f15-342a-4bf6-88e2-c7b19274a498", "indicator--74584fe2-f610-445c-be5f-77ec0406ae51", "indicator--594125d1-51bc-4aaa-bba3-4922dd243060", "indicator--8b7a8cab-9e72-483d-8475-fb1005e1869d", "indicator--fb73cbf0-ee6c-4c8f-9bb7-d62ed6c5e7ca", "indicator--f667847a-e510-4f16-adec-e1e56f49d4a8", "indicator--57f88788-5cd0-41b1-91bd-414309f146a6", "indicator--1529cc32-6535-4960-8c89-d32f44127790", "indicator--399ae0cd-cda5-455a-a327-798b11a5c7d0", "indicator--d2a4f8c6-1f96-4eb9-add4-b6303f4489b0", "indicator--46701bd8-8fd1-476d-9cf6-59e9ce5de99e", "indicator--564abe57-d1a9-419f-bfdc-cb534b9233ce", "indicator--98373bc0-9c57-4503-a123-8426d0a651d7", "indicator--307fca00-1c92-4d35-9a1e-74f5f41de681", "indicator--243277a6-7573-4372-b30d-3b0b13a98e23", "indicator--f1d6cdab-5d80-4560-95e2-6e44ab09f225", "indicator--b9f495f1-ecce-4f13-9ac0-bdec2fdf7950", "indicator--354c8ba2-b496-4fdb-8a28-0b02e345467e", "indicator--cd7d1695-8b91-48d1-ae29-91b587e76c6d", "indicator--a6d4ba12-75f5-4815-8ccb-949d8f522aaa", "indicator--39bc86cd-93bb-4357-8517-dbdaab0e7738", "indicator--a0cb216c-de82-438f-adfc-5ee1cd9f7d06", "indicator--f6ef23f2-fcc5-4926-9b83-9a86bc1ca8d8", "indicator--84155afa-a81f-4693-87ea-056f443dfdb8", "indicator--2cf7fd60-1a05-4e52-8bda-7f8ba0a9e501", "indicator--d2b71318-724b-4190-9569-c61c26ad33a4", "indicator--0079421b-7efe-4ca4-ba25-3db2b34b3460", "indicator--1a928acc-3a47-4432-ab5a-db3fce326fe2", "indicator--8d750b75-a341-406d-85c9-27da486ac621", "indicator--6d758f9a-d88b-4ad0-a591-7e185ef664d9", "indicator--9174343b-aa4c-46ce-a776-8b20a68f963d", "indicator--062d855f-4798-4df5-8f76-480373ad9aba", "indicator--b3170d7a-39f8-484c-af49-9ee23585e244", "indicator--54ac8d04-8a84-44aa-a9ff-1fb0005179ff", "indicator--06d75b13-dc74-4f9d-99de-dd0884ba30a5", "indicator--702fd9b0-a014-4ae1-a2a3-0d5e6542e9c0", "indicator--4997ee33-54cc-4c15-98ef-ef4d5fb9d6f3", "indicator--b0c480c9-bdf2-4e2b-84d6-1a627b2b5f7b", "indicator--b435fcef-76fa-4759-acfe-4af06d0801a0", "indicator--1798219b-9215-4d0a-8914-cafe972aa159", "indicator--feabc199-a59f-466b-baf9-5e06e0d7ec4c", "indicator--a1363c4f-6861-47f6-9d34-abac67f113b2", "indicator--0b83ae4a-0399-4378-9c05-4d9b8b542816", "indicator--a9ab843a-2dc2-41ac-8656-968cedb55916", "indicator--03541651-de40-4e05-8817-c52d5414b7da", "indicator--bbbb8349-45f8-4d33-9991-934ea0eea568", "indicator--0b8915d8-3690-44a2-ba15-c589b90e06fd", "indicator--3a52ed0d-54dd-4219-a8aa-88d7b5c767ee", "indicator--75f65c44-a817-42f7-ac39-c23c692119d8", "indicator--8e90b683-d125-426a-990d-76505ac256d7", "indicator--b7acea5b-0756-4722-bbc3-a3c30ee908a7", "indicator--cf0b15ec-3063-45a7-92e6-70e667f57e2c", "indicator--4f6bed45-14fe-4b00-99b4-4b8be0287e41", "indicator--d0b0ed68-ff65-42cc-ad2b-08b36ca997c8", "indicator--6304147f-c955-4079-ad00-9d2d0f63f7f0", "indicator--ef79e638-81b5-4bf8-9b9f-510923e35636", "indicator--a3ff1ad5-da25-4a60-911b-0e7bf9f32950", "indicator--9a79874b-8e2e-4702-b6bd-e8bb3f87ff68", "indicator--db42848d-19b2-4758-952e-94c9b941e555", "indicator--6b8b9b85-8d4d-4876-a476-e492d4a44a38", "indicator--1b5dabe4-406b-4c6b-a356-360e5bfc8053", "indicator--a56be980-48cb-4d91-a0a2-03056ff23b76", "indicator--cae4331a-0968-4474-95c6-2845ceb94c72", "indicator--19c9e275-8f34-426e-afa9-f20b40cc1306", "indicator--c91ce041-bbf5-4d98-a291-d20fa501476f", "indicator--ab53d928-0dd9-4cfb-8fad-03458f7daa6f", "indicator--eab41058-f6af-426e-b686-3eb624af7009", "indicator--739a57a6-0b5b-4afc-964b-91f09f853bf4", "indicator--38707d80-4ae9-4ccb-b34b-8c4e1b3d4ebf", "indicator--d8ea0fc8-2e6c-41b8-bbf1-216babf40659", "indicator--1e7e93e4-71d5-4a52-9b5a-4cc0d4cb2d20", "indicator--5bd4f1f8-0729-4408-9fe6-0e0da7b97d98", "indicator--564c65d1-b561-4120-ad15-e8478db7d826", "indicator--93c26fcd-7acb-4cb2-ad3b-5422af6824b0", "indicator--aff2172a-d7d8-40f0-8349-c5ce81ec2302", "indicator--6ffbc490-769a-4620-bb0a-984d6330db5b", "indicator--ec2dbd0f-38e9-4b12-a04c-ed211d4ea638", "indicator--b56fa4d6-b9cc-4a02-811a-e184941cb15c", "indicator--ade13f0f-19b1-471d-8be9-4e1390c84b82", "indicator--2d8a7891-042d-448a-9e20-e93284f253c1", "indicator--f43fa457-9057-4d38-9254-77310a1dbf59", "indicator--7af4f6e0-c131-4a57-ad86-32e28189e419", "indicator--200cb2b3-acb3-481f-bdea-842154f5cf9b", "indicator--96178ad4-c7e2-4810-aa87-2c49adf7e1e7", "indicator--66c38a2f-3d62-4b57-b615-69c4209df4a7", "indicator--0eec5488-e20e-45c4-a0ba-523d49d72939", "indicator--3e8afaa3-270a-40c5-bc11-9c324ff6221d", "indicator--0c19634b-7e5f-45b8-bd5d-f30946ab52a1", "indicator--dccd67be-6e5e-4718-a1f4-6925353565ae", "indicator--4c59f534-fee3-44d7-b5de-baed8a22d3e8", "indicator--3d01c045-b8b8-4486-b49d-4f094133ffc9", "indicator--78874424-07c9-41ca-81b6-a079dc1f82ec", "indicator--9ad46182-5d79-44ff-b9cc-d5c6196f452e", "indicator--7017ac1e-205f-411c-a2b8-fcff427bb486", "indicator--e8052547-0a00-4915-97da-0c67b8a1cc34", "indicator--0c9aca2c-7bfc-4fb3-9b13-10d10171325c", "indicator--1869077e-7795-4822-bada-d321a20ecd52", "indicator--5fa975b1-cd04-4b8f-9a7a-6cb00eae4f59", "indicator--aabe59f5-6bf0-4149-97f8-f292a89b6ef4", "indicator--e41a5b76-fc86-48c7-90b8-6ce48b38e78b", "indicator--c4d0638e-4873-4877-94ff-e619cb08390b", "indicator--69e10d7e-b09e-4bf5-91d6-b82b20a3d886", "indicator--b34081c9-ec17-413c-ad67-71e8ab6da376", "indicator--9f043859-804f-416f-ae2f-a53c8c0b7093", "indicator--21856623-3b51-4fb0-89ae-374d16b57250", "indicator--1a8b8ec5-0b6d-4d51-a095-cbc9d7ab1338", "indicator--48643433-12f2-491c-8323-0a11e96877f6", "indicator--7c59b111-a6f2-422e-813d-319c50227a3d", "indicator--5fd7ce8d-289f-41db-809c-b1b5f1b6c973", "indicator--dc86bd54-3859-4785-93f1-effdf95c1cdd", "indicator--bcb04dd3-0b9b-43db-b5fc-1259c02d9fc3", "indicator--ccbb40d4-a5af-4e27-b3e7-4f59f0de7b31", "indicator--431c5cca-2f33-4a33-bb0b-2e5bd1c07adf", "indicator--8ba2fe66-872b-4eec-8c9a-9db7390cf89b", "indicator--c3aa09d3-8834-4c41-bd28-c7fa54ea5b6b", "indicator--320f929f-e401-478d-b387-70d30fa0dd76", "indicator--ad4efb16-6dd1-48b4-bd25-e6d2d67fc21c", "indicator--8c93b841-fed8-4d7b-a6f5-bfc6d0248b7d", "indicator--cb3349e3-8767-4365-a745-a6585dd0c3e2", "indicator--7595c6a1-7552-4ea2-b509-9913f8c6607f", "indicator--71b04ba2-49c9-48d0-bbe0-14cb20a4bd1f", "indicator--ad670c19-b2a1-4302-aa2d-0bf81343b10c", "indicator--4ee60e4a-9dd5-4790-8682-11259bbf67fb", "indicator--acb97f48-06ee-4418-8d25-fb228f1be100", "indicator--21d18bbf-91c8-41e7-98f1-3acfad746d13", "indicator--30167e03-1f9c-455d-b557-4e337f25dbc5", "indicator--6f2ae888-71ec-4efd-aae2-48c74ba6a8d7", "indicator--abf80126-1f31-4f9d-9b96-d85b6da65722", "indicator--cca9998f-9ef3-4633-80d3-7e8d8fea40c6", "indicator--21c6457e-a2f4-4ca6-abfb-4e810cb0f3bc", "indicator--b71ff0ea-7fcb-4abc-a8c9-299b9dc7ce14", "indicator--df0aa79b-70f2-42fd-9883-5aebc89a6750", "indicator--a6b976b4-e4a4-4571-85be-62107b7123d2", "indicator--4c126515-f7d8-48f2-8941-ea7b3beaf385", "indicator--1e02d8be-1761-494e-a733-5a366e7ae04e", "indicator--ff3e7a1b-3035-4dd6-902e-6768874ec870", "indicator--21d0fd71-dde2-4b17-98fe-d97956ee6883", "indicator--9b302087-02d2-4fe9-a8f3-2f1e82433f36", "indicator--4345cb05-4f44-42b4-8015-dde5790d3ac6", "indicator--34fe3d6f-e7bb-4e82-be45-877bf429c3a1", "indicator--947e4188-c646-4b54-9e39-61f0b1b18f10", "indicator--09edcd6a-6cc3-4a7c-a37b-cee72be35b58", "indicator--562931cc-661b-45e6-aad7-120159281124", "indicator--315b681a-4fc4-4b14-bd94-2b2bbe3a4b51", "indicator--c436e625-bd72-42a9-bc70-f509601aeab7", "indicator--b324ea62-9438-4cb5-b17a-cce41e13df52", "indicator--621ec3dd-ebe8-4951-ba50-b7775e3d8ce3", "indicator--207f5ff5-e77e-470e-a63a-d5001e7c497f", "indicator--13c446ff-5e55-4d2f-997d-9d203f97b6db", "indicator--0411d216-4521-4421-9bc2-5dadcee6f87f", "indicator--2bd4fe49-3166-4c85-8b55-06fcd954c98f", "indicator--1b4c924e-d1b0-4758-905d-13500dbc6a5a", "indicator--912ae4f4-73cc-4442-bbd1-1a3a91d81c66", "indicator--493e3186-e0e6-4aa5-990d-c1749bfa5be1", "indicator--0b56f5ac-bf0c-4ac5-9f56-bdb948ccd839", "indicator--fc427497-57c7-4308-a602-78c97790aa68", "indicator--6f5b26f7-4ef7-4ef7-b415-3fafec72d540", "indicator--fe3942a7-f0fa-4a8b-bb7b-97242b8da538", "indicator--07c47f32-311e-49f9-b969-61ecb32a5af1", "indicator--4ff733df-1955-45ba-ab54-774189c1913d", "indicator--66c8bec1-67e1-418d-9fad-5dce7e88fb85", "indicator--4e9b02f5-6f3b-4059-8e08-5a8459e56366", "indicator--a9c23bbc-e5c2-4cd6-905b-3d40a0506410", "indicator--7a16ce64-4506-4912-8fa4-e82bd626813e", "indicator--87429f5e-9b08-40d9-8577-e3001b09a4c0", "indicator--cf7ee8f3-b325-48f8-b300-ee3d5842173b", "indicator--5b1ef3fa-e49e-49d6-a371-02d23ca6cb3c", "indicator--950a38f0-35bf-4d13-ac7e-b909053b295c", "indicator--64f8e2c3-b286-4462-818d-cd36c0b47e69", "indicator--56ca0e51-ced0-4386-a75d-d8846f77adc5", "indicator--af4cb1df-17b6-454c-80ac-5b9c80d15b0b", "indicator--d7c0f548-1625-476e-85e0-41f6c8c8a847", "indicator--75552e7d-8665-48c6-84db-6f19c4958692", "indicator--5c24c014-2a17-4ba6-8818-f872588b0fc3", "indicator--40e6a67f-deeb-48c3-912b-7a4e5a794185", "indicator--bc285555-63ef-456a-88a1-4b1a4133563c", "indicator--62e1dc14-75dd-4539-b140-38af360de1d0", "indicator--cd7f6b32-164c-4c1f-8a24-b78bb9960256", "indicator--fd94648f-2312-458b-9c8e-d0f0c0f892a2", "indicator--a1910b87-2fe2-4c79-b251-be2f8f27164a", "indicator--d21da07c-c0ab-4a72-9bcd-98f7e8bb74e6", "indicator--03b04533-a2f9-4e17-bf80-976abda1446a", "indicator--583061aa-575b-4a5b-9847-dfb8f7940928", "indicator--47bbc3dc-6a81-44ff-a72a-652581e9e54c", "indicator--52dbd9c6-ecbd-49a7-b82e-cd69bcbecc04", "indicator--01cc4dec-7b37-4d38-8cad-38f7107e9875", "indicator--8aab2fca-a619-460a-9778-026f421f4472", "indicator--3b4fa92b-b634-4cfd-9f69-5ff5f140de5c", "indicator--6b47faea-549b-4a6d-a8aa-8602dd472682", "indicator--a680bea5-946d-4904-bf58-a2908f19f10c", "indicator--52d104f4-ec0a-4a90-a0a9-d8f9d0e8c2bb", "indicator--6dbb84f2-ed01-461c-9285-28b3a51701da", "indicator--0092330a-a852-4467-b961-f9606ef7662b", "indicator--60a28528-adfe-4551-bfb2-858501f240cc", "indicator--5a41afec-f534-4562-807a-616bd18885af", "indicator--3413a007-06a7-409a-be3a-5a55a934b868", "indicator--00c5a359-8aa9-4929-99af-2aa8a724b0ee", "indicator--91d0bdf5-df18-4f31-bc23-0d9b0fe0dc36", "indicator--1bcf48fa-409a-4d6d-80d2-7783db6ac1e9", "indicator--32252a4a-62fc-4f71-90b5-04f7f722f422", "indicator--f194ab6c-7956-471a-bcf7-15ca5d5dd072", "indicator--90e2ae0d-45cf-4493-b9ee-6a7d2a4804c2", "indicator--da2599ae-9420-4c20-90c9-f47b78901a9d", "indicator--c1853aa5-4d7c-4a52-81fd-9d160ab21289", "indicator--835cb745-123b-41c5-a162-9991d8fa432b", "indicator--95a6da40-800b-4ef0-a102-e00ace10f4d5", "indicator--5aa74925-1a46-4ee4-8a1d-9461507d4f93", "indicator--e95836bf-c821-4911-bb68-d77c42e40239", "indicator--1a16078f-8004-4a47-847f-cd71b3141472", "indicator--af31a699-4165-431d-bb60-fbda67441b86", "indicator--f67cacb2-b3e4-4c00-8ef9-cb2c4a398d1e", "indicator--861aa570-c231-4d19-ab2e-7b9c2faff78e", "indicator--3e73c7c5-5dcc-4170-a750-7dfec94dcc37", "indicator--86e1f653-d170-4640-9325-16c6a4f7d378", "indicator--7b1459ad-4806-4b9d-ad90-b5f0ddebfed4", "indicator--3f3d767c-1cd1-4492-aa07-68c0e448b06a", "indicator--eaf84574-602d-4fe0-8a6b-d05280048985", "indicator--b2d3d4ce-270c-4a41-bf23-f983592c91e9", "indicator--47d9bec7-be64-4c22-993e-a885f48da954", "indicator--d80c3fc7-d656-4dd4-951f-8683b74956fc", "indicator--6bb34de1-0f38-455b-a30b-edf09b22def0", "indicator--c258ba43-da38-4b78-b4b7-3e3a32679518", "indicator--13934951-0c73-4aa3-8b5b-339771cb9ac5", "indicator--c65e4efd-2c0f-446d-954f-f9ecd7e12d06", "indicator--e99fb206-aa67-407c-8d6b-785eae2fde02", "indicator--df9c6c38-45cd-4d06-ae98-8dd684f8536a", "indicator--f4c08194-fe75-44c9-8531-833c6f0ddbe2", "indicator--61d14b10-2369-4822-ae9c-4e50ddd53de0", "indicator--fe86166d-c901-4892-8290-783bdc443e0d", "indicator--1b9d9121-71f1-43a6-acf3-078a36bff3ff", "indicator--7724aa2a-0be1-440f-841d-a7af4d63cf8c", "indicator--37fb9e12-f911-4047-bf3f-0ceb1ad7ffae", "indicator--588c61bf-ddd1-414a-a677-63db17796f00", "indicator--650f0b28-9a5c-4ea6-a6a0-6a712e1f90f5", "indicator--86963bee-68db-4b5f-a44f-fa0126707de9", "indicator--37cf19d6-01ff-45c3-b6a2-613089d9ccd4", "indicator--bcb715f1-5eb1-49a5-a1fc-f322448644e2", "indicator--1abef793-8755-47ea-a97f-6c64262168df", "indicator--836ed2af-d8f5-46c1-acf0-69f5c2515607", "indicator--571f6371-fc78-4162-9af3-2edbcf2bbc8c", "indicator--d4820601-97ce-490e-919c-64b21678f41e", "indicator--53bda80d-8b63-45a5-9b6b-9da840614471", "indicator--53edf4a7-51e5-4b18-8bcb-356a196b3085", "indicator--36821fcc-349e-4906-b0af-79776dd8330c", "indicator--2a94fbfd-ba3e-4d2e-bfa0-7bb75bee35c8", "indicator--616c5cda-e90b-4065-aa4e-ad419b9be95c", "indicator--480075f5-5bc8-4d1e-928e-e6921d6d7fd6", "indicator--b9882e84-3ac7-49c0-a40f-0d8d5949e967", "indicator--2891ab3f-616f-452d-bd7b-c87154057afe", "indicator--98959047-7ef7-41bd-b04b-9b5a9bd740bf", "indicator--eb11a1b2-d49b-47c5-8329-07edff516c60", "indicator--6535fbac-21db-4f24-b0dd-f488c435bfd8", "indicator--6c517d2b-6f5f-4cb2-8343-fb562db7d120", "indicator--e10b0cc8-3467-49a3-b5c2-d597dc666a33", "indicator--8dae56f2-697f-452f-b558-fd943500ce6d", "indicator--22c785f5-533b-40a8-88e9-cbc2b2184c8f", "indicator--cb0d314d-331e-4417-8ec4-f7abc986f262", "indicator--fb9c82f1-41bd-4ddd-9779-82fe4d35121b", "indicator--7ed12328-4f52-4f1a-8cd7-b23be2e553e8", "indicator--0b8f983c-236b-4f58-b3fc-d13700d72a5b", "indicator--b064c49e-7080-44a8-95bb-4939b36a58a6", "indicator--321414a0-636d-4a82-b0ea-41b3a11766f1", "indicator--1f65575a-1b02-4a4b-a4f2-ad68970ae590", "indicator--dfa32181-7203-47be-aa4a-ddaf364c36fd", "indicator--bb1e068d-fb9b-46ce-ad61-f1d6faa08977", "indicator--d54873a7-3f6b-4714-8d32-7bb683554cd4", "indicator--63c9a9c4-0560-4470-b56a-2927a43fc188", "indicator--c15ee66f-86fb-4d7e-bd52-6c366c93798c", "indicator--03ac939d-81d5-48b6-8a4b-8030ef51f723", "indicator--adda078d-2632-47ad-9a2c-9661635aa0c7", "indicator--2e7112d8-b8c6-4e0d-99dc-9eb1ee39f78f", "indicator--7277a317-6fb5-4f23-9958-e2bfa4cf2146", "indicator--f5bc4fe4-a1ed-423d-92c9-113c5f9a9855", "indicator--337a67a3-95c8-4257-8e41-8ff68d1723f3", "indicator--8e50bcd5-2382-4478-8c5c-0da2232a4f2a", "indicator--654e4e02-badd-44a2-b122-2e74b9a7b98b", "indicator--e52eee1e-547c-41ca-b2c2-a525b6a1c9ad", "indicator--56161c04-9615-4872-872f-dfe1e05a4c45", "indicator--41c782a4-8eaa-4434-a5ea-49944ae11bcf", "indicator--0872416c-acad-4706-9777-5c7c8cd4a1a3", "indicator--86c53ed2-37ea-4928-930e-a1b7d659b793", "indicator--0926f48c-faa0-42b2-b3e3-60eb690cf913", "indicator--f067414e-5d86-425b-90f6-0b25e63b7965", "indicator--6483c8c5-66d0-4f89-8cd5-685b707daba5", "indicator--0b43c36c-81cd-4697-bc1d-adc8bfa56a8a", "indicator--aa6b0f5b-3420-4dcb-8bff-0b004e05864f", "indicator--a226039d-70db-43cf-8d3d-31c09d234be4", "indicator--153bf706-fd89-4704-b408-5a36635dff30", "indicator--9fa87119-fc75-4d6a-bc02-c89c4a6ca1f3", "indicator--48401fb7-290c-4bbe-8424-1ae38911a55a", "indicator--05b577d9-1c2b-4d6e-b4bd-63608ed90477", "indicator--9091d138-9794-41da-acd8-8d322376f9dc", "indicator--0df30473-4502-4293-9ff8-9beade3e22e6", "indicator--788da45a-119b-4d30-b881-983fc553668d", "indicator--9ee9a84f-674b-4bfd-8246-c997d01fc6df", "indicator--3aeece78-9d87-49ee-913e-84b6f201cc1d", "indicator--37457696-262b-4cb9-9f9b-72a2913acd43", "indicator--4ac73904-dc12-4de6-b5f1-5757ea2a0ef8", "indicator--87318a0e-1e7c-4f86-bd98-74adeec78c78", "indicator--88e1ffb9-a4fd-4113-8df7-743578803327", "indicator--10256c87-e243-466e-a326-5719b7530241", "indicator--96f743f7-23a1-4953-994a-bc7d5a214a0a", "indicator--8bf78429-27cd-4c2e-8418-21ec7d4a0316", "indicator--c319347b-826a-4275-b174-fe9dd96f5ca4", "indicator--a0ee0be0-f766-49b6-974b-6c0289bfb9b6", "indicator--acff01a8-ab86-46a3-9335-c7bfcdf44791", "indicator--baacb116-1e9c-4449-9c56-9dcc691de398", "indicator--74cc7b89-313a-41c7-b8a4-fdc5de21eab2", "indicator--b63db703-c7bf-445a-ba88-f3f281a7df9c", "indicator--bdb7c5ea-2c88-4a39-96dc-7947a8f5f3e3", "indicator--15b73c57-f158-4dfd-88cb-8439c6e7e02f", "indicator--4a6da640-7447-4af8-b4cf-4cd7743e7b03", "indicator--37497d18-627e-4a49-a7aa-79b9296eac2d", "indicator--5f8b01ba-f110-467b-bb06-f5eb14fbfac9", "indicator--dfad89eb-33a2-410a-b8a3-efb45c575111", "indicator--bccc5b7e-227d-4b46-bb09-4def09a82971", "indicator--7f986995-c4d7-4ebf-9a37-accde99100d6", "indicator--8ad7e562-1474-480d-880d-03fc5c82c871", "indicator--519f9a8a-3143-4002-b728-0214b84a7b31", "indicator--3f2ac1ee-10e5-4497-bb66-b3e48e7e59d8", "indicator--398201d6-5778-4270-a82a-872bf976373d", "indicator--c5c7f21f-38c1-4d54-89f8-e19be6d67463", "indicator--30369f81-a3a6-4b18-b4b6-8ba7859a54e3", "indicator--9ba9454d-35b0-48c4-991d-e705832da7b1", "indicator--9a3fe342-d2c3-4254-8326-5049365be9f0", "indicator--81970381-224c-49a2-8546-b6d4bee867a1", "indicator--0d8bd914-6dee-4c8c-a4a0-b86c68250422", "indicator--ab62b82d-a70c-4abb-86b9-147a0b53bc9c", "indicator--3f0a6216-1bda-4e26-849f-92e7cd35ce24", "indicator--b914ea5a-57db-44d4-b77e-64407598e875", "indicator--e8cd69eb-921c-4102-9b7f-e79972e14120", "indicator--42fd4d0b-15b2-440c-93dd-9e1bd9d3606c", "indicator--ecb83065-a04a-45fb-89bc-0836adf5efeb", "indicator--3b31b8b0-ec0c-482a-9050-9f3624c1dc67", "indicator--3ed6ff7e-d773-40e6-98e6-69299a2678e3", "indicator--5370e0f8-b3a3-4370-a71d-59a22285a284", "indicator--1db6d657-4e1e-44d3-b3e3-5ac621a7a304", "indicator--c51ba00a-f8d9-4298-bdd0-d818f79f0e30", "indicator--17cd77ea-3813-43fd-bac0-9dfb2127743b", "indicator--000051bc-d6cd-4c1b-8ff1-b392a275d725", "indicator--af29cc8a-df18-4081-8439-3d3b24ac8d1f", "indicator--53d2a3f3-bff0-441d-b6ee-6c636bcf230a", "indicator--6ca04c26-19b7-4abf-a82e-78a598db3bb5", "indicator--aaa29687-3475-47cf-96c0-3d35ca896753", "indicator--1aec390a-8fe2-467f-87b2-db0b5b2f34da", "indicator--ac6ea242-1213-426c-87a3-b9a5449e23a1", "indicator--626ad271-71fc-40be-8a24-c05829b79690", "indicator--8ea00295-d00d-49c2-83fc-a8f19e858feb", "indicator--b736adfb-ee1b-44c3-8f1d-319e859e992e", "indicator--d8510ce0-0c8a-4c2b-8de4-562ac532675d", "indicator--69ab3fe4-7d29-491b-8640-fc841e899a4e", "indicator--06a949b1-ac92-4fa8-8b3c-b2610b1a7002", "indicator--2758e016-3cae-4ec2-ab30-e3f565fdab33", "indicator--31bf24bd-2dc8-4481-8db5-3ec9e11dd1b4", "indicator--0d693e48-754f-42ed-a093-dfcbfeaac405", "indicator--798b510b-e8ef-47a1-9e23-520e6059fa1b", "indicator--531e4be8-a2d0-405b-baa8-af6983e8345b", "indicator--27655ee4-fcc2-4f79-b905-42260da5756f", "indicator--c73a471e-dd4a-4f27-8734-6c793d89fda3", "indicator--e0db0132-3716-4356-9a7c-bef7a3aafb31", "indicator--777004aa-ea2a-4a84-a2ca-ebb32cabc047", "indicator--337ad7f4-44b0-4a1e-a62b-24e8200a7e71", "indicator--52757723-569f-4e51-a5bd-06550c0c8a02", "indicator--5b3a717d-8c51-44a0-8ba0-c76a284a3e22", "indicator--51699d74-c095-4b83-81ce-d4208dbe2f12", "indicator--8452ca7f-c2ef-4cd9-b90d-3db120c3e675", "indicator--5384c94b-724b-4336-b158-0c7ba735132d", "indicator--9f0f7ec0-6f3d-4c98-abd5-bb5239711f2c", "indicator--c339839b-f330-47f2-afb1-94de4269d53f", "indicator--05dfffe7-7a89-48ce-b13d-5f1b422b7528", "indicator--d96f5130-d416-414c-808e-d456cf82b6bd", "indicator--de7912f5-9933-43db-b4d8-1d7aec11335e", "indicator--c8ebbdef-229c-4191-bbe0-54c61ba8af35", "indicator--5bc022fd-275e-4423-93b8-c76fd0a7bcd8", "indicator--89176d5e-132a-4662-b519-35ba2c36de4d", "indicator--f6fa1b20-1ec1-4a08-b357-10e227796b48", "indicator--02ce6413-91f0-46d5-957a-5621f138260d", "indicator--d6bd9193-04b5-447c-b2c7-a2a1671448da", "indicator--0611f25c-faed-4280-bdb5-44a17d61ec87", "indicator--9eeff69b-251b-44ac-ae95-d0d0a2f1d257", "indicator--056d168c-f211-4b9b-b517-9c6abdddaa58", "indicator--491d84c6-c5c0-47a5-9ea1-7ad25d4f3471", "indicator--2cf23527-915a-4c58-bb5f-8309a15ef5e1", "indicator--cb7a35a2-fb21-4543-b2a0-cd420dfa9060", "indicator--8477a249-f3c1-40f8-9baf-9b68dcf80440", "indicator--ee37da2e-f9a4-4087-9570-f3b161e262ca", "indicator--b012770a-a6ce-4cdc-a99e-5b9f1c089281", "indicator--ba2125db-de08-45b0-b9b0-ead244de0330", "indicator--1dc82c41-cc93-4d5c-8ebd-7076ad507831", "indicator--5a186e9a-445b-42ae-84be-d60910a6edc0", "indicator--5833650f-3a1a-4dc1-b03c-3bd48c0f0934", "indicator--c68c45cf-d038-4983-b618-dfabb03ece23", "indicator--2517c62e-3ab4-4b1a-96a0-0852a57e2a2b", "indicator--ddf85520-e9c4-4dd4-97f4-c1a313364f19", "indicator--886f6ae7-1a82-41f5-a344-cc5c1866252f", "indicator--7323cbb7-eaf6-45a7-bc12-6bc342cb42e2", "indicator--a9740103-2b95-489b-8f4e-85fb31396b67", "indicator--479c6933-9e8b-4b22-8e5e-79e96e2fbc4a", "indicator--96303ce6-8940-426f-a0db-384662659dc4", "indicator--8143ed42-4852-4157-8e5e-31dfceb656ad", "indicator--0f10c0e1-ed16-404f-bb1a-7cae36dc9adc", "indicator--ede3f694-5655-434a-8ec1-8cbb65fd307d", "indicator--a3569e0f-8c06-4e48-a3f0-0fb3b56f528f", "indicator--cf6cd451-6500-43d9-b65d-6ffd593641f0", "indicator--394c304e-b859-4e63-9d3d-f37fe163300d", "indicator--b16ce06f-5e81-4193-8967-4c7120e26e78", "indicator--414d4010-c045-47f1-9284-7aceba30a379", "indicator--4afc96a0-0551-497f-b39a-210152b99838", "indicator--08ded047-6260-493f-877f-d0e26118d7b8", "indicator--fe8e0d72-dd35-43f9-840a-b748f571aa3b", "indicator--6916bce2-967c-404f-bd62-868545a6c252", "indicator--79801597-6d9c-4b13-909a-7813d1c226cc", "indicator--9b9a91dd-e5ce-4510-96cd-09f33a33183e", "indicator--44c8d542-6743-4426-a681-fc24f7ad8f44", "indicator--4b1cc258-a24c-453d-8f22-607a4bbaff91", "indicator--c6596719-d0f3-49ce-918d-99d785c3d36a", "indicator--325f31fe-3c80-45a3-9c6d-e6bd9ee3baba", "indicator--37b7f49f-4167-49eb-9dc6-f7b50867fe52", "indicator--032f4ce1-56c8-4f82-b6ec-dc2d38992d49", "indicator--f0ad6e98-0b8e-4c20-a427-927458b71973", "indicator--5907b1d0-cda8-4717-965d-3af7f22e6723", "indicator--4da87b48-abbd-4daa-86b6-cc8babbd4b58", "indicator--ffeceb8c-182f-4dc8-9523-63a5a7f930ee", "indicator--45bf5e45-b239-4c15-a421-48a400b5d3ef", "indicator--a3107c42-930f-4551-85ea-6b5602eb133d", "indicator--12a3526c-761a-405a-bdf1-da2c85de541c", "indicator--363cdf6d-d4dc-456b-b449-f7b8db516d9c", "indicator--5bed3af3-1d18-4e6e-8505-8b05345c40ba", "indicator--12c85b2c-165f-4ee4-b23d-663a43d8e201", "indicator--2a8204f1-26ec-4348-ab49-33420431ccd8", "indicator--4a03218e-8d23-4ab2-aa26-ccd3f26430a7", "indicator--74b54248-c5ad-4f88-b1a7-5413fb4bfe8c", "indicator--ebe7e9ae-8081-4dea-a66a-4c72af014130", "indicator--5ba1bbc7-db27-4fea-8d2c-f9763678db57", "indicator--b1988827-2fe0-458a-8b2f-ff78b9e5b77c", "indicator--3f4a4005-336f-435d-bcc2-9bbcc78dca72", "indicator--e12f0e78-c8c8-418f-8c3a-61c2cb48118c", "indicator--977298be-bb6f-4ae5-9e48-b417deb04ec4", "indicator--e34351e3-0827-4007-b050-0278528144a2", "indicator--d7b58291-d329-4de8-b50a-c4cff5151e37", "indicator--d013e713-8d9d-4cb8-ad56-ef1b78a9ebc9", "indicator--5b648688-b8f7-4236-9811-dbaaa2ddbc96", "indicator--4019ff5f-2621-458d-867d-8975156a1a82", "indicator--bcd5112c-f9da-4fc4-9f63-9a06e0bd6c33", "indicator--b31172c8-c12e-4ec5-8cfa-bd0cb83518ed", "indicator--d073a93f-13f9-4465-af3d-49c30d3869d0", "indicator--85bcf12f-c5a9-459a-acb2-3e80c3cd09cb", "indicator--a1ce0900-50b8-42cb-9f43-f440e429e778", "indicator--3d2898d4-ef11-4b00-9e09-522843ede10d", "indicator--e0ccf3d1-3ac0-4887-91be-3b8cb24d33ea", "indicator--1eaaffc7-e11e-4134-8534-be77da314caf", "indicator--3cffbf62-4b1f-4d45-9864-7632ab0fd12b", "indicator--cb81fb82-36dc-400f-b5b6-f6a03f454f51", "indicator--37acc015-59f8-40d4-85ad-0ab1769d9c49", "indicator--1279b19b-629e-4ebf-b3a7-a8d799b69af5", "indicator--0c3a119a-5bbd-4cbf-930e-467c46166778", "indicator--1014773f-c69e-47b9-b717-cf89d2b45979", "indicator--982ca80b-fd60-4063-945a-a093c20243a6", "indicator--400ce253-447e-4f92-956d-d3847f48cda3", "indicator--87e0844f-31b5-472e-b4ba-07a18fcde007", "indicator--033f8e46-cd7c-4358-a20d-b3d7b0c6b9c9", "indicator--de94183f-d62a-4de5-b79c-7e6e3897d708", "indicator--266b4952-9d91-4745-876b-a7e5c22b22e1", "indicator--3e6d42fa-bd26-4b83-b776-794b98b3f498", "indicator--5ee145e5-be51-40e8-8e96-98232d91d9a2", "indicator--31118b3f-c7ee-490b-9017-30dc44cdf25c", "indicator--1119c35d-74d1-418a-be35-d46caa4e2c90", "indicator--e9f4f116-133d-4de0-a85e-0916553fc25e", "indicator--76608c0a-3c2c-498c-ba37-4ce6d2426a0b", "indicator--1154530e-614c-480a-b3a7-1a67b423dc51", "indicator--7ebacad2-648d-45eb-ab66-eae78a2957f2", "indicator--588acaa7-8342-41c5-ae95-7faef483b112", "indicator--1382e717-6534-4229-aca0-8c5fcfaa3555", "indicator--fc56e261-a9da-4d72-8249-51d6dfd1470c", "indicator--8ead97a3-ed86-45af-a026-59a9c38f4744", "indicator--9a4e097d-96a2-41ec-afe2-43d7719bdca6", "indicator--f6c2a4cc-9702-445c-ae3d-a30d4800090f", "indicator--1ac6945f-3bd3-4a09-b6c4-a6db83f06d77", "indicator--1034f9e6-bc04-49b2-a7d3-1b30982121a1", "indicator--690c2d97-4b35-4623-905c-fe542fa1a7c6", "indicator--17bb626f-8c1b-49ec-b81b-748a4e2813b4", "indicator--a64e1700-956d-4c0c-89f7-605f56805d87", "indicator--f2e17b75-bfc1-418b-b376-d63e0434b563", "indicator--e5618bfe-31cf-41ee-9336-01a5e53937e4", "indicator--80ce9547-ecdd-47c7-9381-fee27fbcf8dc", "indicator--e4b3c484-2f40-41fb-b9d1-d523bcd8f7cd", "indicator--313663f1-a680-4ea9-8b33-12e17d338892", "indicator--dc015234-219e-45e5-b8a3-71588d45a9f3", "indicator--c9145414-6499-4578-853f-d4f30a02174d", "indicator--2a25aad4-9c1e-450a-a432-2ee7c2d9d18f", "indicator--629ddf6d-e37a-46a9-82b2-3e01db5c158b", "indicator--cb400459-a60f-47b9-984a-35f091334c18", "indicator--d6ce0f47-09ac-4656-a0e9-602fa393bb3a", "indicator--230d8010-b6b1-44e3-ac99-6d22d2ce1e4d", "relationship--eea94242-a769-48f0-903a-9502a75db52e", "relationship--efe24f25-7d50-4b5a-94ac-06525f5b47aa", "relationship--b29456ae-1d92-48d4-8c29-f619c5c450fb", "indicator--b6d3ad9d-157a-45ac-ba7f-eb8a9512e719", "indicator--0182ea9a-a2b7-421e-88de-7e1bbf7f10dc", "indicator--97078f41-e7f6-4f1b-a6eb-0fa8c69a40e1", "indicator--8f00483d-8d6d-4143-b456-32370b7e8212", "indicator--eb1bc182-86a2-497c-8f19-9740085d6b3e", "indicator--906ff810-a763-4e07-81ce-b1f17a60bd8b", "indicator--53506c41-5417-4ce9-8af2-7ea23a387341", "indicator--81577a5c-154e-41e6-9dbd-2b9dae87775d", "indicator--6ea408f1-3e17-4f90-8a0d-c3fab5b70c09", "indicator--cb8853b1-968d-4165-bb62-4c9bdbfc5d3d", "indicator--6d165db2-68e4-4d35-8257-a872cda2442f", "indicator--680a0de5-bab7-42b1-9650-e0b233dd446a", "indicator--cd0602c3-2af8-43d1-a2aa-d35b62d11cad", "indicator--0be15b74-ac84-4d37-a088-014475718cba", "indicator--73d84727-b500-4474-aaac-35950a661630", "indicator--c828e368-5d15-4d7a-b37d-f4403622980c", "indicator--a983e51f-d516-4d21-9f2e-d46858521aea", "indicator--c76b9209-6410-41cf-86e0-19d0903e4e71", "indicator--d109d8a5-0080-4d41-abb7-a6297ecf7e7d", "indicator--bd5c1cb3-6234-4dd7-bfca-1422bb681f07", "indicator--5e3a297c-875a-4e70-b613-b4b04ab74cc3", "indicator--15ca7dfb-02d8-4357-bf87-ca1cd4e9581f", "indicator--6117746a-49f2-42c0-9082-05a5520abf4a", "indicator--32e19af0-2e64-4c77-8d7f-b7d7baac1353", "indicator--d05d39ae-a48e-4c3d-8cf3-81ada16d2563", "indicator--531a0a33-a53c-4b69-a991-78bc790aa07b", "indicator--714d2fb6-9453-41b8-aff1-20a1e794dfa9", "indicator--60d746a9-9130-4e67-9e12-bc565cbda5f1", "indicator--55dca4d2-d9a7-4a65-98a6-a5d9fb59865c", "indicator--ec36f274-7117-4f65-88be-ba7dc60d8c48", "indicator--28dbbfe6-d027-4673-aac7-144460aeb560", "indicator--317fd3f1-3861-4838-96b6-de44bbb34139", "indicator--59261c34-8a43-4352-b793-1b8c2c5ceb51", "indicator--9ea538ce-94b0-4efb-b0b9-6c736a2a3891", "indicator--1daab4c3-7bd9-4615-98b3-3c5b1b2ec392", "indicator--ba98a776-a53a-4044-b79d-8483bde3829b", "indicator--15603f9a-c8e0-4d96-89cd-2c5cd70aa2df", "indicator--3fb0a6d9-3c19-4c41-833c-86df358be9fe", "indicator--ba869f22-b8db-4de9-9fe7-0914f84371fa", "indicator--eefdb625-8ef4-498b-a733-a1fb5499ddd0", "indicator--f9dd6d90-dca5-455b-9da9-3b1e5bb5d03d", "indicator--773a71c7-40b1-4270-b1f8-dac93ba35067", "indicator--41ac0af9-21e0-454c-8b4b-b87dbb364f8a", "indicator--23ce94e6-ae62-4ce8-b395-6f2c14528cf1", "indicator--cffdf500-4854-4293-b877-389988309c0e", "indicator--9a824e34-8b4c-4934-a9ed-4242355749f4", "indicator--737493d8-2f1c-431f-b527-45911c60d539", "indicator--94b111d4-552a-471c-86a0-74458530e61d", "indicator--3d6dfde5-62bc-4f63-895b-7eb3fe5ae550", "indicator--78d251b1-c469-4ac5-b403-78f55073c525", "indicator--dc7e7c59-e880-4865-a8c3-230d4d6773ae", "indicator--7493e170-6946-4efa-a093-e782cbd86fde", "indicator--755a30f0-8423-4b81-9fb4-9970a1ea0ac2", "indicator--05fff74a-66eb-4b93-a0ee-b67a1eeb61ae", "indicator--2b6a4f19-26c9-48d8-8dc8-41a752c9573a", "indicator--76bc97c7-a6cf-48cf-96ed-b64475c3efe9", "indicator--f41680ca-91c0-418e-ae09-1b96ecb2930e", "indicator--cdfda2bb-af93-49f5-8276-12df7d7254cd", "indicator--8b47da7e-4100-4967-be92-6c499365b127", "indicator--81fd3028-fa9f-4f56-9320-b80abbd81441", "indicator--52d92092-6356-4129-b726-9cfebe26785d", "indicator--1e0da979-c0a4-464c-9b85-e13032b8156c", "indicator--576da040-21b9-4156-b5be-2870fabf95e6", "indicator--c09e6071-357e-40b7-9460-8206042ccbd2", "indicator--a9bc8eaf-41df-49fe-a1bb-21bda3aab6fd", "indicator--ed9b0489-3206-49b2-bfbc-09cb6081659d", "indicator--a42cacfa-d9c6-4338-9626-400028f64b17", "indicator--50d2a292-cf21-4957-854f-ace79e47ff1d", "indicator--ea18ecfa-b760-4862-a1a7-3a672173f39c", "indicator--dc145b5b-ee9c-431d-9df3-9c2e8e42bd7f", "indicator--703d0b37-a7d6-4a96-b1f6-ecb6f3021a15", "indicator--85082f0c-3a60-47f1-9354-6b0d32f9ac86", "indicator--e5bf0b0c-90b6-4a3c-9ec0-744770a39141", "indicator--1df4f840-82c5-487b-8d88-c1c8a298e7e3", "indicator--830cae9d-3794-4f1d-adf6-cf6ba0cfb1c8", "indicator--1f867b17-e7c6-4363-9030-f1c89634d1a6", "indicator--0c3125e8-ccba-4a20-afc9-5af1600dea2b", "indicator--b24038d1-c1ac-404f-90aa-4fc26cdf2e2f", "indicator--24b96927-c59e-4e37-8190-4f807d601be8", "indicator--1e4f6d83-00b6-47d1-9fb1-27c96f00a49b", "indicator--06801ab5-7216-40f2-82a2-74dec6631e3d", "indicator--df86aa1a-7289-4d8f-a548-d07c901f279d", "indicator--f550309c-ed93-4fba-a125-14fedf46adea", "indicator--4d44c869-03d5-4d2e-82f8-f7c8dae38640", "indicator--0fe25461-8653-4a6c-b5e8-4e8825ea6682", "indicator--499b52cd-4329-4e4a-b652-242eb665e5b2", "indicator--769db944-9145-4e11-9732-a135062bc09a", "indicator--c67cc62c-2b2e-4dfe-96b5-42a2544e652b", "indicator--61bff4de-5877-4ef7-ba65-f4359cdc554d", "indicator--13ca07a2-1506-4e63-b949-633253dd45ef", "indicator--2064a3c0-534f-4e1b-bafb-c3310474e093", "indicator--72e137d0-b243-4688-8231-5d9affe34b53", "indicator--6c5b6b18-a228-4312-8416-9b0390895c0f", "indicator--9e5d4e08-2d58-432d-bcdf-34fba5c4663e", "indicator--e2fe82c7-fd1e-499d-a2b6-89b9aed720c2", "indicator--4c1f6b02-31b3-4027-a59a-29267ce15811", "indicator--be184ed9-a7e5-41b7-8dfa-cabe1f14e605", "indicator--c477f104-42c3-4a3b-8345-d85e0d8f815c", "indicator--97169a5d-d237-4a98-b41b-acd7a1fa8e7c", "indicator--b129a1bc-5402-4335-a356-4205fbe97f9e", "indicator--42d9b7ae-c744-4d69-bf90-299e52b07e55", "indicator--2bafe2f0-f45a-4304-b97d-b96fed573b36", "indicator--98e13b6b-50f1-4e1c-ad39-19b005415469", "indicator--e9f09ad2-16c3-445e-b6f9-d770439973f3", "indicator--e624715a-aedb-45a0-b411-7a64206e257f", "indicator--1082b9e8-0cde-481f-bc02-3504ecc7a39e", "indicator--29029e11-80ad-4b54-a5d6-5cb2e51a16e3", "indicator--de1dda7f-c879-4184-907c-ecaf1ce4fd04", "indicator--efc477ba-96a5-46f1-bd9d-5aa64ee4cb9b", "indicator--f22c17d3-894c-48fd-b112-323b72b566cc", "indicator--c6123e78-2331-4a71-86c5-34a28167779d", "indicator--8dcfef93-04a3-40bb-859e-d934df5984e2", "indicator--cab310ee-d182-4aeb-9354-b48a16c89e3f", "indicator--f852359c-7227-4e96-9329-dd3bfb027493", "indicator--b94c5234-186c-458d-9862-2e7202de9b1b", "indicator--cf8c9e7c-a838-4d41-be7c-e8a0f433de8c", "indicator--b650e7d7-597f-4699-9ab3-04783fbadb33", "indicator--ada6316e-39f3-40c0-9e9c-b2becd59ee31", "indicator--89901ffd-f05a-4514-a6bb-c95887a0c57b", "indicator--0fa18284-3dd6-4335-851b-6fe5ed1f5e39", "indicator--a4471986-d011-41fc-9e90-aad5c843e720", "indicator--f05b2572-2286-47bb-a7fc-b96ffcb8dfd4", "indicator--01d3fd02-3b4b-4ae5-9c98-a0456fd3848c", "indicator--93d40d83-8500-4521-8fcb-c3a50e5236c1", "indicator--426a28ad-79ee-4b90-ac02-f8d9fab5a086", "indicator--6ee9faa8-6bab-4b40-ba94-3864056e6db2", "indicator--f55cf12c-0f2f-4d70-937c-6642dbf27e00", "indicator--aad984f8-bc81-4a4c-846f-1237635c40f3", "indicator--8269c8c3-02f5-47b9-b3bb-f6358133c357", "indicator--87aba3f2-ee9b-4b4e-9e9d-13048a3daa9d", "indicator--b5069520-8af5-42d1-aa62-045084e5ecc0", "indicator--16543db1-ee92-43ed-85b1-5c949d2cc0f6", "indicator--d3d1b99b-44e0-4aeb-856e-b1f6f11b9702", "indicator--c0c0fa36-6e96-440c-a820-e654076559bf", "indicator--028e6fc1-7f09-440b-a13d-dc083f6d02af", "indicator--f7a2ee08-6696-4537-9d93-60b5fe095cb3", "indicator--d9517ec0-5d9e-42fb-94d1-8822ed6fca96", "indicator--0fea27b0-ae5e-4e13-8b78-524f4c76461a", "indicator--8a11831f-0883-4f04-92ad-873619250059", "indicator--c589f69d-2bee-424a-990b-991d14c455eb", "indicator--c1787e9f-4265-4e2d-8b9a-a548a8ddfcb7", "indicator--c6897da5-a45c-47dd-b1c7-80d3e115ea09", "indicator--ea2d105f-d74d-4d99-b8d5-0792482aad75", "indicator--79404650-2e08-4406-958f-4f64087b118f", "indicator--fd2becb7-c63b-48cd-b669-2bd97a14e993", "indicator--c3708696-9941-40b9-aea9-8cbf79eb9bc9", "indicator--8bb1d0e5-0f93-446d-b216-9fa975801005", "indicator--43352ffe-4f28-4b60-b6e8-2da443850678", "indicator--30f07124-4c49-4e2f-bd73-c76cbd136899", "indicator--978df734-f670-4f6e-8fb3-a7565a3e1d9a", "indicator--186b3857-dfc7-48c2-9f36-b4226560e6b8", "indicator--2a18661a-befc-4867-a3b7-ab734a245ad4", "indicator--30aff6aa-b4b0-4147-bccc-996893d7649e", "indicator--303b7084-948b-41c5-b5a7-9f4c70163af5", "indicator--49d0b4ed-70d5-45b6-8bb1-d9c23d929d8b", "indicator--0f46225a-fab2-4ffc-9c04-91bc42badf9f", "indicator--8b2b2397-5be0-4c55-893e-9add0f96bc9a", "indicator--9aed43e1-49ec-4190-83cc-eaf27b6298a8", "indicator--037fc5b7-92af-4556-b9c6-544501e061ab", "indicator--156ba45e-1dda-4839-9614-077787068cdc", "indicator--255c7b4b-04b0-4ffb-acb5-24d1307a73b3", "indicator--50716375-3a9c-4e45-a47e-877688dde486", "indicator--b6f59bd1-c7fa-4f64-b781-b4160bc55caa", "indicator--bbfb274d-f9f3-48bd-be67-4bbc48cfa9fb", "indicator--42e24ed5-a36e-4891-8b9d-1258a26fb6cd", "indicator--ef708dfb-ad97-4286-9ee2-83b46db304d6", "indicator--a5a1f478-8cf7-45cf-9ba1-f3706e076d50", "indicator--f85b630c-7d80-4bd2-b0c6-91e906cac595", "indicator--2212acbe-e507-4028-9e23-bff16c95188f", "indicator--583e61d3-0c87-4582-a829-a143d6443aae", "indicator--4329b5e2-7190-4d1a-95b4-f21f52b8c769", "indicator--86c486b3-e042-46ca-bd7d-8739f318405b", "indicator--4bc4564a-4f0f-460c-97f6-b707ca5c921d", "indicator--02373c0b-be8a-40ac-a24a-4a147252cf95", "indicator--0860ebf4-bcb6-4258-8d0c-ff5d268dc708", "indicator--8fce5afe-ea88-4de6-862b-6f71bb8a264e", "indicator--fb41b221-b507-4f07-9554-c15c3d494ee8", "indicator--5b990a08-9ad3-4609-9d85-f89fdeedb712", "indicator--14a02868-d8cb-4153-b687-8e1ed1175154", "indicator--62ca012e-866f-48da-9e49-533835b46871", "indicator--abd80076-55cb-4cb6-b7dd-6cf880fd7aaa", "indicator--5998178f-3239-443c-8d84-d10938262876", "indicator--7f7fefa0-b63a-4e48-821e-a2230d88a529", "indicator--b64cd7ea-96ef-4b3b-bb9f-20d73ac68c4f", "indicator--f1025107-ab5f-421a-a2a7-9d45beb18e23", "indicator--d1a3a258-cb37-492a-a69b-1fd7886ba2f7", "indicator--921b6b16-6170-46ff-a1a4-992859bf3ac7", "indicator--7e7d409b-81a3-41a7-8f84-3eafc2ab3f64", "indicator--deb9c91d-b977-4f91-8f87-a35a36ffce0f", "indicator--45b24ea2-58f7-4160-af5e-eadcc531a1c7", "indicator--6fb7b416-9f07-4921-95bf-a1058d52f978", "indicator--3e2e9ad4-ed11-45af-a6ca-9c25338aef58", "indicator--dbb61a5e-86c4-4a9d-bf20-719828d0a151", "indicator--7441caf0-33d5-4b65-bdd6-c8d1505c3098", "indicator--8f53b65e-a4b6-4cd9-939c-172b367f66dc", "indicator--99088f40-5937-4144-9da6-f58dce18d52e", "indicator--b8dd6b8b-b231-4b8a-ab0f-17bbb7f5e82d", "indicator--d8f0d657-466b-45d9-a304-9e4a50e91583", "indicator--efcfcf01-7707-4759-8982-90272365ccd4", "indicator--e5a130e3-29df-4c6b-a3b9-28105128f135", "indicator--f02ea2ff-2445-4114-85ba-579939e8dfd3", "indicator--b1771fc0-a162-4f9a-8452-bc8a39bffa5e", "indicator--61dc9950-7104-4843-a5fd-e1f0e6a2fad3", "indicator--2cf63ed4-f9c1-4caf-a9b0-0056269a93ce", "indicator--02e5ab9a-fbf3-475d-9510-b7ae167d2794", "indicator--fd89ba52-2fe6-45c2-8768-9a757ad49323", "indicator--62a4c094-290c-4bc0-8a75-011bcfda55c2", "indicator--457aaf3a-1497-4a27-aec4-ff4a5d61c911", "indicator--a425bd0b-6199-43b5-9d63-5af9a3ef8a5a", "indicator--4d668ac5-8435-497b-8dec-2027facce167", "indicator--af83689f-6888-48d3-9c33-2bed4be3d82a", "indicator--cc4e3c32-3858-4b6b-b2e9-811838500d9c", "indicator--4c5b2f31-8031-4129-95d9-cf459c92f207", "indicator--df53e3d1-e995-4237-a6a0-806c2e9027c2", "indicator--bc357d44-a1f9-442a-9084-e6dbc1b18983", "indicator--a9cb5d2d-1074-4cac-b8b7-07f7b2352839", "indicator--e8fe922c-6331-4ebf-a99d-a2f459a19c4d", "indicator--31cca453-750b-4b86-aaae-a6fe3b0af140", "indicator--8470c482-b006-492b-952e-58e980ff149f", "indicator--095965a0-2cae-447a-b67a-e88e2f459930", "indicator--f92dc524-fe63-4089-bdc0-ab12c21e8c7f", "indicator--35b41abe-60b1-4031-8d34-1fbfd0b85499", "indicator--99f1b980-6b34-450f-9495-96ae5100db1c", "indicator--9f3727c0-7d11-407f-ae17-8cab189062ee", "indicator--3622741e-a43d-497e-933c-7c57b7c9b2d3", "indicator--b0401050-4b00-4536-bf9d-3b120d3ab585", "indicator--8cc3078f-15d3-4404-84bb-4a19a309251f", "indicator--e3e98f84-27b9-470c-bd9a-a6885e8a1947", "indicator--a72154a6-d308-4c89-a864-e1792226bb9c", "indicator--6830948c-0e0c-4c4f-8672-5454a12e3d89", "indicator--c55cb2d3-13f4-4699-9780-8657d9288d46", "indicator--bf1f1f82-0c93-44b4-bc85-57800f431e7f", "indicator--40cf5b99-9b40-47ae-9dd5-34d884c8d22b", "indicator--0f59baaa-905b-49c5-b632-df610faeeeba", "indicator--85170250-48bc-4581-9c57-2d0be6b3d25e", "indicator--7209ff5f-e24c-4ecc-9832-61c0f738fb10", "indicator--dd3f63cf-d770-419f-af74-843ae37cf621", "indicator--cbdcfa90-9f15-42d3-bf52-af44c1a8d499", "indicator--c8e5878e-911b-4877-8757-fb426c5c05df", "indicator--7bbd0636-63cc-470e-9843-bfdf92cff5a5", "indicator--681e39fe-c7f6-40df-88fd-d449c83c3955", "indicator--d1404d15-8488-4dae-9ad1-a2c59b58762a", "indicator--db51e712-5034-4f1e-b19c-3c4a51befbba", "indicator--ac4a058f-2ad9-4ae2-b9d1-d77356033a84", "indicator--160e8e39-239e-477d-a52d-6796034494ff", "indicator--7113c1e0-2baa-4b00-baab-09dfd6b6b55b", "indicator--b2728837-4721-495c-9b40-a2f097d9a6c5", "indicator--791feb42-b189-42d1-9d31-f68b7154b2ba", "indicator--a03039c0-775b-4755-87be-9a6d9011aa45", "indicator--0e82cfc9-0aed-42bc-8c6d-a540b42da72c", "indicator--6b2f81fc-6084-4a90-aa7e-31c72c8a6536", "indicator--0d7a5661-2708-4271-b9e9-c3560014e11f", "indicator--26d3f935-ea2d-4247-b65c-60e2cc7094c9", "indicator--ff60aecc-2a16-4ab8-93b6-2c93d8efffbd", "indicator--190f2734-4c5a-4458-b703-1d0a4ff30ba1", "indicator--9cdc4f34-9812-49f4-aa40-d3b939e5ecf5", "indicator--ce445456-c0a6-49c3-87a9-a0c37836699d", "indicator--e808a68f-e465-46bb-b0a6-1bae1a0d6587", "indicator--3b627b91-b14f-4036-9830-263751354819", "indicator--bb7d8f60-8862-4451-b2ec-9ac1513cecfa", "indicator--86e3c7b3-38b5-4d88-93be-c28ae0f62e94", "indicator--b8a794fa-14b5-4c40-88ab-53a0a09cb5be", "indicator--b22895f9-51d9-45dc-af29-5454ab81e5ab", "indicator--2e671d74-4fcd-4b46-ae96-bc3afd4582a0", "indicator--7a731dea-ec1b-4641-800a-78160d2b649e", "indicator--6bfc32d2-ef64-4b69-b08b-83fb1efa4164", "indicator--337be51a-83b4-4676-be87-d6d42a422d7b", "indicator--c121eb14-9d67-4f8b-ba7e-d27974c76b30", "indicator--b31b1159-99c2-4294-bb22-95a97011bdb5", "indicator--eb4eb73a-34a1-4bbd-b908-ddfc5ba25dbe", "indicator--6ea4d66a-a514-4bf2-abf7-f61cdae3d6d1", "indicator--2480c565-11a3-48f9-9ca6-074527b2c3ea", "indicator--ec82be44-5be3-4b72-bd1b-c5a94cc662e6", "indicator--871131cb-9d8c-4592-9b80-14697d33d08b", "indicator--998aebce-759f-4fb5-a529-151a57cf43fb", "indicator--b49b4950-3f56-4504-bb5b-39f8b6feb8e5", "indicator--1acf117e-236d-4f38-bce5-c68bc67a6ea2", "indicator--05498d01-bcaa-488e-a8cf-5b9c58be9c83", "indicator--8394bdb1-49c1-45ea-b819-17443b4f0d74", "indicator--1360f49f-b194-4daf-bf3d-5510631a554a", "indicator--85ab0648-a6c3-4cc9-b5f5-bfb42de764c3", "indicator--ce9cc0f8-c13c-4f62-86c6-63736a875eec", "indicator--02c01195-56f7-4de8-8053-9c24a0cac79f", "indicator--e4fa99ab-1328-45a4-9903-4a0469718089", "indicator--1ef405ab-b62d-4a93-a380-ce93a2c54004", "indicator--cd2f416c-a702-4702-a70d-e69b7fb21991", "indicator--37d7ad9a-aebd-4a73-87c9-8ac951e2e016", "indicator--ec2afa32-0200-477a-9cd1-175be498312b", "indicator--4bf68a8d-eb74-4871-8314-a47c6599afcb", "indicator--51ed93c1-4396-4fd3-bf31-609c8118ac18", "indicator--1896036b-d2a4-40a5-ae8a-378bc5739d49", "indicator--2781a016-01fd-44c6-9623-773a7a01e594", "indicator--178fcbf5-159c-4c28-866e-abf89091da6a", "indicator--3635892e-57ab-4824-a9e7-2c6a3fa48b93", "indicator--cec7043a-f3ec-4283-8621-cbede5d0e391", "indicator--f696e265-f5ab-41aa-95d7-56a72cfc0305", "indicator--298a3bc1-53a4-4123-921d-a62c893ab9d3", "indicator--36421c48-48cc-474c-8c1e-63f2043a0de3", "indicator--c6ae680b-509d-4252-8c62-306ac86c1f46", "indicator--fe692d88-fe14-489d-9385-98077b56b25d", "indicator--5338b1f1-418c-43ca-aa56-c7b6c95947aa", "indicator--9fa791c4-c86d-461f-97ab-064083efb75a", "indicator--ccbf3aca-e07a-4c79-9c6a-fe3182815aef", "indicator--2b16a0e2-c569-4916-a755-2a793e8ab754", "indicator--884288e3-b2c0-4fd1-ac5b-e8125ff3be76", "indicator--d974a938-164a-42ab-84b9-d2028e76c843", "indicator--6e16e5dc-b434-42ae-954d-96920a467cab", "indicator--e2fba0af-9fee-4ad1-96f4-68f93f590588", "indicator--d178df2b-8b89-4010-9a34-3a9fee436cb5", "indicator--e9438539-03a2-4f37-a6b3-e0e3c596294e", "indicator--f450e5e1-43c0-435a-bfc2-cc97e3c99604", "indicator--f9c69a68-0594-442a-afe7-cddfe953cdda", "indicator--a1b958f5-885e-408d-9883-b30f0ff29e56", "indicator--f4b53522-a336-4ceb-92e2-2dfb0209630f", "indicator--b9ef1beb-948e-495f-a82f-3f7ef9ae48a4", "indicator--0e353a87-6d89-4a38-baf4-e024a6e22c4d", "indicator--07232729-05ae-44e8-9212-a9b37620855a", "indicator--84bfd043-2e18-4387-bde5-e813639ff3d2", "indicator--7abd9b22-73d5-4d9c-b084-578d322f11fe", "indicator--a628d9ad-f3d7-4d05-8316-1734f428eb51", "indicator--bb9a75e2-c2bc-4b9e-9d9c-41792b4a9383", "indicator--ba52b5d3-3343-432f-90dd-7001368862fa", "indicator--86074574-bfb9-4d18-aef3-c22b7ab78f6c", "indicator--db40114c-94ad-417a-8339-e7900be20e63", "indicator--95169f16-f2ca-40ca-aa6d-7f0d0f40981a", "indicator--0cd2f637-0e1c-4c0c-a75c-f646b3fbe849", "indicator--184fddde-d4f0-4eba-884c-8af37c985773", "indicator--c3f8c1dd-72c9-4fc1-ada2-aba5d7264f9c", "indicator--2a7c692e-6fd1-4e25-b931-528728d9f80d", "indicator--dbaa7261-6ad5-4206-9ec8-3614d7eec759", "indicator--0c8a8afa-930a-47f4-9d90-1649a91fbe1a", "indicator--b70b9ee1-3f02-4a83-ace3-dfb4c196a19b", "indicator--e3b4af58-90ba-4f2a-a446-97e60814aa42", "indicator--311e2380-944c-4ab6-9297-5c24cf8b7e41", "indicator--d0a3aacf-7f33-45ea-9362-b0b37438e75e", "indicator--3d203e99-cfef-44da-b53b-5dfa418cb5a0", "indicator--f07fb89e-5948-4836-9cf4-2c7dd5524bd3", "indicator--b2bc79ee-81a2-47f1-856a-7bb8ef1fe76a", "indicator--43832cec-f77f-4c99-9359-1e4cd7e6d417", "indicator--a28f898b-ac61-443c-9d22-4df49847c1d0", "indicator--65bb8d3b-3dc5-46b4-ba4f-ef58de0f5bad", "indicator--dffb439e-f89f-46c0-a43f-aa3a6c7a44d2", "indicator--9544473d-6e30-4e2c-93db-a217eeb7ce6d", "indicator--f7282687-6781-43ec-a4ff-0eead0290bc0", "indicator--539209af-1a5b-48de-9e05-7871330a784a", "indicator--43beec70-0a4c-481e-a142-0395c40bbe9a", "indicator--e23ea316-a851-45cd-86b4-8276c6571fbd", "indicator--04fad9bc-5e0d-4690-8ea8-bee4b2c62839", "indicator--ebc0cf59-2c34-4cbe-bb9b-e1fe63d62f5c", "indicator--dbc3cb96-aadd-4fb0-a565-902d5549b4e7", "indicator--06f9dcd5-a232-48b9-8fc8-6a86e03ee8b3", "indicator--3f6da88a-0882-454f-af9f-0eebaa279cc1", "indicator--eeccf6ec-eb55-4b7f-9921-8203f433f181", "indicator--3a19eb2a-5b5d-4039-928e-929ee94d76bc", "indicator--d8634004-767a-4acc-8945-3f053ccbffad", "indicator--d2f8ef8f-7c99-4a35-ac8b-f460c85453a2", "indicator--17dc5879-c0aa-4cd9-8b7f-4523b960180c", "indicator--e4f435d8-48fc-4084-a7f9-dcff22e79308", "indicator--c52db1bd-fe17-4bf8-a8c5-3f86ac403ac6", "indicator--459fa3c8-904c-485a-892e-fbfe6e321577", "indicator--965df0cc-eb0e-4e47-89f2-935319a95b47", "indicator--bb8e557b-1e2b-4023-a4a5-bc2f2ebcc6d4", "indicator--0c27ce40-07d9-4e21-a716-8fe0ec039809", "indicator--b59a4df4-35eb-494b-8f1a-c63fac825fa6", "indicator--4d9f873b-3f8c-4aa1-89bd-283dde11a5c1", "indicator--d1fd98d6-bc9e-4f23-b6d2-bf0668cd38c4", "indicator--30ac2781-3258-438d-932c-d4e56748e0f6", "indicator--2c152b12-5a78-4f30-9917-953975f3507b", "indicator--9b47457f-d8ed-4df7-8ea8-58deb647ff79", "indicator--9dd94043-177f-4650-84de-9bb000bb1b6d", "indicator--a18b6cc8-2f26-4ee9-9bfa-d1fba661fe92", "indicator--974b6399-9777-41f1-a23d-3358de0386ab", "indicator--0e3aef1d-ce70-4aea-a600-b9af47b5e0c3", "indicator--6ab988f3-0145-420d-aafe-55f7f9b96eea", "indicator--ebfdf737-ec59-4450-b161-06e7ba1ed951", "indicator--90e26565-8694-4af0-ae03-99f70823c7cb", "indicator--c1474a23-66db-480e-bc94-3f73006db76e", "indicator--3a935c67-6e00-4e18-8ed2-3defaeb2471b", "indicator--5cde8b76-6f8d-4156-9681-af443f11889b", "indicator--cd41916c-9721-4be6-a84e-e2b241d5bed6", "indicator--9e85c658-762a-4ee8-a5d8-87b2fb9f25b6", "indicator--ceb70c2e-f490-46c8-81f0-307be3bd2399", "indicator--2c1e75d6-91be-40fc-b6d2-4de5f7862e38", "indicator--d2261330-d677-4fe2-a86d-6308e85c3a2f", "indicator--658cd1b6-947a-4885-bb24-25a188d34600", "indicator--e1ce6e38-03d6-46e2-b862-137ed546eb26", "indicator--1a84a0b8-9321-4f47-8afc-54ceac1643d4", "indicator--6cee6522-7f11-4225-9f16-1370bfe7d2c4", "indicator--1f745dd4-f4ad-4fb2-80ea-41de72f0cb40", "indicator--d4262a16-5eb0-48e0-83b1-8cbf791cfdda", "indicator--1c54c9bd-5f61-4b7c-bae7-5917c690720b", "indicator--c89569e1-45a5-45c5-bc0c-78dde67b078b", "indicator--2d1647d6-af79-4f40-994b-09e058621838", "indicator--c500501d-7677-451f-a8db-2a772b05cbfb", "indicator--503e99e9-cab2-4613-a774-50b301980f13", "indicator--11823e0e-e1bc-4ee2-a823-26c80f1989d9", "indicator--de9be558-7c83-48b3-8108-caac9eee4c07", "indicator--ad48a525-b1ea-4d67-9cd3-456b2f21139a", "indicator--56d92b2b-51bd-4bcb-b131-fc80b2d6abbb", "indicator--05c36203-334c-42d6-9c78-ba652a5359ad", "indicator--72a89f93-1df8-445b-95b8-65730024800e", "indicator--991eff25-7989-4d9b-ba73-02f224f585e9", "indicator--7a7868ac-dd57-42dc-ac38-87091fc0fd47", "indicator--9f2bfcfa-f981-4095-919e-1744ae3c8c54", "indicator--cbe9601a-0d8e-43ed-a47e-a944c147c655", "indicator--6204f165-efcc-4fc1-a429-7611e8a0e026", "indicator--3cff42b0-87e4-4da1-ba14-1d7f58cad3b0", "indicator--8121e5ca-d303-4fc1-a679-3b0708492e32", "indicator--942948b8-548b-456c-9b8e-1db7bdaa54ee", "indicator--7e1b0f39-00bc-494a-a4ad-19820cbf2939", "indicator--9b2c1cf9-d8dd-41d3-8660-a5297dd536eb", "indicator--5dbb3377-92c8-4383-8a65-334531678763", "indicator--98bbdde1-eb7d-4006-b5c5-e308dc1202a7", "indicator--0bf5bdd0-cc01-4b18-846d-a284c0cd08cf", "indicator--7f17f558-4758-4f6c-b291-754f8101aa07", "indicator--0206afb8-0c5d-4fe1-8d01-26b821854b57", "indicator--d8abc673-30fe-4c4c-adcb-452b50eee292", "indicator--115a135b-c74d-4062-b5f5-89cdfce65ec9", "indicator--35f01611-c36a-4067-b260-7589f707381f", "indicator--6bd2c712-a05e-42f9-ac99-4b15d11d7fe6", "indicator--910cce64-d009-401c-87a5-d9d27f1119af", "indicator--24cccf2e-6c81-440c-bbe1-a915eba2f291", "indicator--18842854-fc8d-41f3-a5d2-afd84717091b", "indicator--1512090d-9139-44e1-ad40-9ad6c5b03613", "indicator--477f6380-759d-4fa3-98d5-194093afa7b3", "indicator--a499a12a-278c-4482-853e-5a875a88bb16", "indicator--a42b8d50-a429-469d-8785-60649d7a7ec7", "indicator--1dc19b70-0ca3-443d-8b03-ecf399c51731", "indicator--8d8e4398-6de3-4774-9b57-221c3bd5fe51", "indicator--1beda6d2-e8e7-401f-bed1-7658959f3628", "indicator--26eba6c8-bb69-4440-9c30-e83f81f6f1ed", "indicator--608ed390-379e-4da2-9f20-113bfbbaf7c7", "indicator--c0b2f54d-8ead-4efd-9014-73b8fe89778b", "indicator--c33b34fc-3118-418c-9ec7-c8c6e1bf261e", "indicator--b772899a-c493-4676-9260-973818116a4b", "indicator--baad6035-add5-4c23-8654-49f0169ee0d1", "indicator--2ccfeba1-84dc-41aa-9ccc-72fe6f94de5b", "indicator--7fffbe57-dabb-433a-b83e-ea277aef6a01", "indicator--0e1315c2-4371-4761-b9ad-7f9367f29e36", "indicator--113ea91a-0800-4ab5-bd6d-6f3afdf2adb8", "indicator--4b993576-7fad-40ef-bedf-ea55b2d5699a", "indicator--554f66e9-a612-4fa9-ae8c-826a4193056e", "indicator--b652de25-cbc5-4934-bd22-cdd24e1baebf", "indicator--5db3e0b5-bfa4-457b-840b-d95683d45cb0", "indicator--7c03a1b7-ea41-4ba1-9a36-1f49c9798975", "indicator--bd08a540-5173-4235-b2d0-a2f55ad1ef11", "indicator--3b48ab0c-afc6-4ad5-a97f-a2c60b22ad01", "indicator--974c9fae-0301-41a7-a3fe-5f3d4326e287", "indicator--c40abc32-20b8-4d61-903e-8e46428a8b9c", "indicator--48575558-0ad2-41e4-813a-5cc3947cbea2", "indicator--e1fb1981-8ae8-4402-8e61-877072ad7ff8", "indicator--dc2663df-ef7c-48e3-9977-c5a087a77e57", "indicator--d23f0416-ac21-451c-b2ba-b726d1e83f63", "indicator--eaf74c33-6ae9-4154-8be7-4a4ea34a8b24", "indicator--6ddb1dd5-c23a-4f03-9b77-a889dfd0433e", "indicator--c0ca4b37-f430-49ec-a0e1-061793370cb9", "indicator--3e79213c-63a0-4aa5-9525-77afe7374c89", "indicator--c13de987-6b9f-431e-b2b8-4bd88fb61501", "indicator--f0e2863c-437a-45bf-a1d4-13c32e86cb2e", "indicator--14f40797-da55-4920-a1b5-a41394c0f360", "indicator--d1f28a8d-3a3a-4b31-83e5-a5cf79adda4e", "indicator--940d4f26-98a2-4c03-95ef-1c8561fbac7f", "indicator--3323dd2d-a66f-47b1-9386-73af33202ffa", "indicator--474bbaea-e7d4-486b-b510-41b7040fc7fb", "indicator--57483e4e-98e7-43a2-86d4-7841b9c9e44c", "indicator--35798a03-2d57-4b31-9ee1-bbe30bc8db9c", "indicator--06df89e4-c5b2-4f89-9790-bfbd98ddc4fc", "indicator--2ba2295e-c329-4c77-baf7-50dc5f7e3173", "indicator--b270b1f3-f4bf-413f-a8cd-5ab709669b97", "indicator--7786d643-aba6-4ac1-9465-e337579b3b87", "indicator--dbca0e21-6a29-4408-be95-79229a88832e", "indicator--1954c33d-9628-4b98-8211-2f516cc7be54", "indicator--f7e9b554-6a42-4f1a-80ec-4b84ef9a8c55", "indicator--4d38d67b-7372-4712-a9a4-a10d93b1737f", "indicator--6d50363c-abba-476c-b98a-a9cc5849bcb7", "indicator--b58360f4-bbd2-42a6-a8ca-775fe65e09b1", "indicator--b04ae7a8-71e7-494f-9f9c-cf72a690db85", "indicator--e7c4b7e7-5d48-4373-9cb2-8fd805c3058d", "indicator--6cbefc97-5414-4c9d-98de-08b3ed054fc7", "indicator--6aae84ea-e0b3-46ef-87d6-05e93f5ee739", "indicator--285a9483-84f4-40f9-ba37-8d1eae2e8192", "indicator--f33a3953-2a29-4b23-bbc9-826f17c108c9", "indicator--15b544c1-4123-43c1-b93c-f13a87f09be3", "indicator--ba40a8cd-e6e3-4d21-ba13-31afb9e8a0e4", "indicator--da84ec9a-4cc5-4fc7-bfa4-59a9a0840c71", "indicator--e897c00a-e461-4d06-be5d-be9411b20b52", "indicator--52db49e5-36ab-44a6-83c4-ee38866e5d86", "indicator--428345f7-c04f-4b8c-b6df-ce08ca17a423", "indicator--b2a26808-91a6-4ec5-89a4-7799d8c246ae", "indicator--a04bb6f4-bed7-429e-aa89-f7306912d5e0", "indicator--798fc52e-81bd-49f3-9ffe-4bc89a97bb0a", "indicator--592cafc8-40b2-4ad9-95cb-dea6914c9259", "indicator--1085709a-6a00-4b73-9259-d77ea243e45f", "indicator--9fe193d0-db9f-4cc5-b317-b8b6f8ee93c4", "indicator--6cd3d518-a073-4f13-9168-f16b5e401c76", "indicator--d091ba43-04d3-41bb-8221-cb985928acc2", "indicator--5b8c12c0-fc29-4e02-bb14-0512426d093a", "indicator--cbc453b4-8bba-4901-9d13-e9c9efcb152d", "indicator--3318ffeb-39c7-4efe-9c64-c56609dac99f", "indicator--51caa922-e01e-44c4-8dcd-485cea3b1580", "indicator--72146ec1-ca17-4d3d-8390-50c2c26e2f1f", "indicator--6ce71498-ba31-431c-b0c6-629b10fdfcbe", "indicator--82bc2695-1688-41de-a223-f6d2f7eb7ca5", "indicator--3a4b67d7-8c9c-4cb2-887d-98415ca0a7c4", "indicator--09818eaa-e5cb-4d75-8c96-7e2992c12508", "indicator--0b9d8925-d707-4403-a53a-1e737703409a", "indicator--ae172013-e8a8-410e-a18b-a0b4db91a42f", "indicator--1715652e-d575-4ca7-bf64-e32b0159c8df", "indicator--7a257f31-6cb4-47fd-8503-2feb7e013a66", "indicator--a514850f-587f-443a-9346-e7e746f0ca4b", "indicator--41265750-007c-4658-9452-dd612010c6ae", "indicator--7d52071d-786d-42e4-9522-bc82fe09d73c", "indicator--ed15112b-7831-4260-9e89-a1a7310f646a", "indicator--6b9f9bee-7ff1-43d6-8203-76e70bf7f5ec", "indicator--438d7d56-4c9e-4ab1-9153-4459d36c3a7c", "indicator--91228398-8f41-4347-a2a7-80b6a80cd5aa", "indicator--19d1f647-b4e9-4b80-9177-1658a11baf8c", "indicator--8e21da1a-c66a-4284-b92b-8abc7b488fc3", "indicator--543472f1-cf42-47bd-8d61-940cbf0a0bb3", "indicator--d89685db-844b-428b-a650-506f0379e786", "indicator--ff33e47c-b060-4d47-9836-91503b0d7425", "indicator--c686a266-d2ba-46ad-a77b-fe81fc38ba80", "indicator--2401bcf9-ae51-438e-8954-bf3088a6cd9c", "indicator--69e2c8dd-fcab-47ea-9bd9-2b325595e5db", "indicator--633b8272-14c0-4435-9c6b-051e2c5ee1ce", "indicator--f8bf89d0-5d17-43bd-8a93-7f3bddbe691a", "indicator--37d05a7a-7fbc-4a65-9713-51bc6d7e3903", "indicator--c4a845cd-625f-4791-8469-20d6e933cd35", "indicator--334bd739-f83f-4065-9b4c-ef7dac77883f", "indicator--f88830fa-0726-4003-b1f0-cd2205490e20", "indicator--c6c38b73-d793-4d56-99cb-6f3b9497b247", "indicator--927f18a4-bb69-43a6-9910-a9e6f42cd11b", "indicator--85f1b880-2270-4b0d-aae8-1c9a47c0dada", "indicator--7184677c-b065-46a6-b017-29e5ee1d6e9d", "indicator--79fb3983-ba67-46ef-a1f1-a96d44fa76b1", "indicator--2b36c868-2849-4954-b438-ef1295d350ad", "indicator--a9ae8f5c-84a9-47dd-81d0-bb3a3f80a97c", "indicator--b3998ca8-25fa-48d2-82ca-4a6acfa13a13", "indicator--ced2fe78-4eb9-4c30-b8a9-b8220fa77609", "indicator--6765969b-d383-45ad-aec2-5044fe06b300", "indicator--62a18c32-9119-4930-b11f-41abfde2fb56", "indicator--800cfe8c-01dd-4cb6-8105-1697f52257bd", "indicator--d3ed6929-0a0a-4f0a-ac56-b199ec8c76f5", "indicator--e1b5f8b0-64c5-4df7-9556-eac9694381d6", "indicator--343324be-fdce-474c-a4d9-7afcdb11f49e", "indicator--f43e3d58-d9e3-479e-8ac4-ae7d3e9891c5", "indicator--1794758d-93f0-4220-9544-b5c09a6cf2ce", "indicator--b5829921-7f52-41ea-bb9d-92f3a0976b37", "indicator--d345b5a3-6b1a-4663-bd1f-1a83a703aab2", "indicator--84f5ae8a-061e-44e8-a085-88388e06955e", "indicator--5e1f6e63-c269-4e90-bb57-522bb305a3e6", "indicator--04f7760f-54cc-40af-9eeb-8b788c041ecc", "indicator--281529f2-3257-4466-90bb-63073010f441", "indicator--89792a47-8228-4d04-ad47-9f78caa4e65a", "indicator--74df4237-b55f-40c0-aca7-f1280ca393a4", "indicator--858e586a-691a-46f0-b65b-da745bc85fe0", "indicator--02163162-1ab6-4b4f-af93-4f36250130fb", "indicator--04c971e1-2f79-4ae4-8f5f-44364ea6fe45", "indicator--871dbdf9-038a-4ee0-b456-65547ddbfe4b", "indicator--bb377238-6b0d-4feb-85c9-64961e3f588b", "indicator--6204eaf8-0b28-42a7-9e76-f4e5253b9be5", "indicator--b5b8ad0a-383a-4bc3-b38d-2dd9b40d24a5", "indicator--aa8fc104-2acd-402b-beba-ea6ecb752397", "indicator--5160c292-3ad3-4a51-a3df-769f81d89ff9", "indicator--3e860773-03c0-4ee1-bf14-bc10cfa408df", "indicator--61a13cdd-6fd7-4905-b976-5ab12b688535", "indicator--fc121fa5-c590-4edd-9b3d-6b7a69279617", "indicator--120758a8-ce5f-4b48-85b0-ab7c36d668f3", "indicator--7fa1db6b-d41c-40d0-bf2d-c162c2ab2db3", "indicator--7b2f360e-1cd4-4628-b7d6-45e44b6f8086", "indicator--85a3f8ce-6727-414c-ad15-d276054b19f9", "indicator--0acc8879-27e9-4585-9afe-ff47b10bf399", "indicator--4461d881-e69c-485e-92b9-1a9b67f33730", "indicator--7cb45c4f-7f1d-4624-9c22-67bc8d3a0651", "indicator--7d3c75ef-5127-41ff-9c1b-d8fa3fc400db", "indicator--dd23cafb-d0a1-454e-8d6f-3b12c842295a", "indicator--42e30b98-3fe8-4363-9d48-44e67aef268c", "indicator--0ee01a2f-e831-4f7e-9ced-87e3d7478852", "indicator--b8fc7304-1110-47c5-8b05-6b132706fe69", "indicator--444115d4-a115-4d7b-baf7-08e02561aff7", "indicator--a25497cc-d023-4e76-b72a-d8b4004ba211", "indicator--cc9cfe90-dd68-4893-8356-96a0b18e1f30", "indicator--fe1457ff-7ae2-49cd-aa5a-d21e0cc1c6be", "indicator--8db9145d-9971-4705-ae5a-03ceda3a0d71", "indicator--fa7ad939-6b97-440b-9850-60b8f6febc25", "indicator--da44b069-2112-4c82-bc35-7ed7cc9bf5d5", "indicator--0245dcdc-555e-43c1-888e-7737f3735a0e", "indicator--4b0c9bb3-bbce-436f-9a7e-81f67ee28b72", "indicator--0e3f6ad4-9c08-4faf-9d6a-797ff0a8704a", "indicator--b67c0573-eb1f-4657-b568-1438551da713", "indicator--c3171508-3708-4c51-8533-974021c82da6", "indicator--c6e14de1-44c7-4279-9966-8f77837c05cc", "indicator--a7d0c175-7f71-48c4-8c3b-0ec52209d8b6", "indicator--d92e8751-822f-44ee-8a81-1d6f502f71fb", "indicator--d92e187d-7155-4be9-9204-eb3a4070d77c", "indicator--eb4d294f-922e-45eb-82f8-b58d00c0cbdb", "indicator--1895af48-fa2e-4237-9901-97589311b852", "indicator--e7dc3d95-7c82-4288-9347-e3abda502f6e", "indicator--9c0af927-dc08-41b3-89c5-8fa94cdadf33", "indicator--b871571c-89d0-4beb-971f-ef3790551612", "indicator--387b50dc-22b1-4291-b1c3-ae63403cd056", "indicator--e3716339-e528-45b0-91c1-20ab222452e6", "indicator--f79404d2-21e5-4de6-bc32-1142a909aa14", "indicator--d0de2c6e-247d-4962-beb3-f41ce3bb394e", "indicator--97d327a5-2e16-4278-ae9c-2dade3262745", "indicator--ab5f7b8e-8002-4516-affe-01af5dad244b", "indicator--633c54d4-dcbb-4c85-b313-6bcabf4ba450", "indicator--a530a684-2586-488d-b299-31c2ea3665ea", "indicator--20f6c957-3623-4de5-9357-d8ba453c04f3", "indicator--fad9e28d-c82e-47a0-b9ef-8ae1b81dbc24", "indicator--606ec49d-46e2-4210-8012-f398f80db974", "indicator--a6f1fe60-2eb5-450b-8509-28693679e211", "indicator--e1d95ec5-0ae0-419e-8a78-fc37610675d3", "indicator--66c34b1a-5e1e-4342-87dc-df8bbae91d53", "indicator--56fdd101-8ae7-4e80-8abb-bc6b25c06951", "indicator--97d1a492-370a-4d9f-a52a-7e3c726ba242", "indicator--9406581e-5189-46ff-9d4e-e4a14e6fda31", "indicator--ea3c0aed-9737-468b-be76-6f700bb58ce7", "indicator--dd52a5f7-5741-484f-91bd-1ee818a473cd", "indicator--e120ad65-1dbf-45be-86b7-190cc9c7d004", "indicator--a1e4d64b-9f4d-48f5-ab3e-1177c456b064", "indicator--aba4c93b-d029-44dd-af27-74e09c94a356", "indicator--8bae19c7-3302-4de3-b7eb-e3ebbc111e3d", "indicator--5ad52b8f-b1dc-4676-8cd2-3618265739ad", "indicator--7fa17da3-831b-443b-a77c-732c5e313dc5", "indicator--cba7b117-38ce-45dc-bfd2-f9f8782b5b3a", "indicator--140ad19d-0ec3-4345-a4b9-ca1560c0fd0a", "indicator--86df9986-537c-4f04-b43e-1bebf7c397d5", "indicator--fb8666bd-c583-43bd-b06c-9b9a9b95cf5f", "indicator--208ad118-984b-477f-a392-37ded196ad10", "indicator--7e2c3d99-a528-4da2-a7af-60554c0c06a1", "indicator--f43dc263-0b73-43b8-b441-c93b385e1e6f", "indicator--924da547-7349-4638-b574-9d70d3f439d2", "indicator--cb20254e-c036-4afc-a189-0f263d325d3a", "indicator--8d796433-32f8-4a4f-99ee-bd99724c04dc", "indicator--fd722be8-06a8-404d-aefd-4b7781256357", "indicator--ef6869b5-fad4-4b00-a6b5-04857f1676b2", "indicator--2db89d67-7635-4f5f-a447-8201e455f931", "indicator--3bc3d1b9-79ae-44b6-8cb3-37b4af2e2699", "indicator--334a56f2-13c3-4522-ba16-6cd0f4550183", "indicator--2f3d0cf3-eefe-4d89-9a0b-090a59b89fe7", "indicator--780fec80-493f-4f93-912a-57714a5b9acf", "indicator--b2499b8e-1c30-4a9b-9099-05dda421aab2", "indicator--81515590-4585-407a-89ac-38f3ed31a0e4", "indicator--f175528d-ea2f-4b06-9a9d-aaf1bae258bf", "indicator--49925887-0a2d-443b-87b7-e0a89eb17e68", "indicator--4aa0391e-ec50-4e09-8b78-22fcee97387d", "indicator--a7b9f761-f7e8-49ec-a687-4212d58fb166", "indicator--6d029ac6-9bef-488f-8aa0-aa61c0a87758", "indicator--9805cb54-7d62-40b3-a1d8-ed88127f747b", "indicator--68fa13c8-af05-4b9a-9210-dad772527a23", "indicator--757b77e1-b663-4980-bf39-7eb8c46182a7", "indicator--c350bfe3-b1c4-4647-a904-3259a3a08437", "indicator--df924cbc-198e-44b8-bc2a-5d0ace2f1c19", "indicator--2849fcbb-514c-43c4-b295-be91697b3ac7", "indicator--47c83ea2-2bfb-420a-80fa-8bf5fc661454", "indicator--f9b1ea71-2c45-4b9e-b91a-79ef201df3b8", "indicator--ac4e869d-a4f1-4602-a69c-198ea89e5243", "indicator--1f7649b6-88fc-4c4c-b263-56e6090338a8", "indicator--0eb9887a-a3dd-4551-a12e-1975e53e265f", "indicator--f0c56432-95cc-4e31-b9a0-a02255a36c91", "indicator--986bffdd-b91d-40de-8f23-7563d587a57d", "indicator--4a861b9e-95fc-4dbe-a2bd-f1b4d8497e91", "indicator--7d0358ca-4724-4f87-b5b6-5585510e93ce", "indicator--7800c1c7-d8e0-4bbc-9b94-fbcd2d0a3569", "indicator--2712e012-9fa9-49b0-b7f3-5bce8f528335", "indicator--44ca4749-cad5-4dcf-83d5-9f3e328ab158", "indicator--e69912b5-a59e-4282-91f0-fdb57e7bc1ca", "indicator--37954d19-a6bd-42b8-8098-a16a801f7d57", "indicator--7ca256a7-6778-4a37-bf3a-40f1bafecdb5", "indicator--cafbc915-e59e-4bf0-8c38-db67e567a7b6", "indicator--e1702d4f-2e68-4778-878f-c2c1c9516e11", "indicator--d94dbda9-c895-4217-a638-333b3b3194f8", "indicator--407101ec-99cb-48d4-afd7-cc0fe6a36030", "indicator--d570d40f-9350-4385-b706-12cf13d213be", "indicator--c361a078-632a-43f1-9325-943f093a5b77", "indicator--1e998a43-583f-4d29-9085-b6d8a55924a7", "indicator--aecdcf9e-d291-4784-8c46-936f00d25d26", "indicator--5e8b7ca4-3323-4a58-9d50-8db5b5d45d2e", "indicator--505c21c1-4395-41f0-a74d-b3ae5b8c751f", "indicator--38571054-8df8-4887-a8ee-6714547d363b", "indicator--e5c3490a-bf12-4111-b6f6-de35982ca7fd", "indicator--85727cb9-75ab-4724-b4ef-9659c05470cc", "indicator--2152c6fc-aea2-40e9-bc74-1f04e05c3d49", "indicator--1bfe5e0f-3651-4ef9-ad09-66a7bacb8073", "indicator--27c21caf-4147-43d9-87eb-c1266bfac051", "indicator--5a95f50c-164c-434d-b5ea-e0c05de9e3cc", "indicator--451248d7-d6d3-4a58-9af4-ea88d79913a8", "indicator--a1eaf63c-0c30-4e6a-819a-60797e2bbddf", "indicator--a1ec92d0-5788-4d12-972a-24a36388dbb6", "indicator--5ba1d9ca-abe2-4d69-8fc6-6cdd16c88e46", "indicator--7d4b1886-3096-4e48-a243-a0447907f5a9", "indicator--c75551ac-dbfd-4224-be29-484792673ae5", "indicator--c04a9304-5a39-4b66-af01-6e19e669d8c9", "indicator--e7c955e8-92f3-4bd4-bd28-b059ec7580d3", "indicator--33bc810d-0b6b-46ce-a3b0-97c107c6a356", "indicator--69a0e4f8-7dee-4be5-b74b-8a8d9a568f6b", "indicator--9163a292-8e7d-4155-aef3-5285ed3b3876", "indicator--c404039b-ed70-41ee-a9ce-85c3f2978cfa", "indicator--a6d58bab-8acb-44d4-bb43-429dd0162c55", "indicator--76934e55-b928-4de0-8662-3ef1378cbc97", "indicator--7d43188d-5dd8-4ba0-9e15-0aa86825d3c0", "indicator--fc97b9b5-86a2-4f6b-bf60-1ae5b0f2a059", "indicator--ac11f3d3-e9bb-4846-aded-e3f941ae23b0", "indicator--22c99475-7adc-4995-a090-bceb5702169a", "indicator--76aefdb2-acd3-4287-b096-b4d35369d388", "indicator--ccbb1548-e7b8-435d-a164-fca86cf5aeee", "indicator--69ad9cb7-9259-4166-bf76-87363842405a", "indicator--1ce304d0-1990-489b-83d5-5906d182f001", "indicator--6e46a9b9-adec-4b66-b738-de0060967ca1", "indicator--c28b111c-55b6-4f4e-80c6-4107a4d17982", "indicator--c7d720a9-fdd1-4ef8-a7e0-6a7632c2c746", "indicator--3ef4e2ec-6554-46f2-b346-56a68238db5a", "indicator--a3f2f104-085b-491f-9f3c-070363d0816f", "indicator--67d5e9d9-0f08-489c-a4ec-2eecdea57fec", "indicator--33918211-62fd-4ff6-a57a-4c014e1da7e6", "indicator--b2d3d285-b144-4e42-bb6d-770816aac88a", "indicator--ed91b606-64c0-4113-888f-128bd4be2148", "indicator--c571db6b-ddff-4d2c-a0ce-ee2521f84e5a", "indicator--bae8124c-7ebc-45d8-859e-58702da553e0", "indicator--8d84fb3a-36c2-450b-b8a0-b3d9b02f388f", "indicator--7dd5bb2c-c10a-4c6a-a01d-b57ab3880deb", "indicator--0836b4f5-bd2d-4149-a33b-b7668abfbb2e", "indicator--01900777-c9ae-484f-8a73-89b3f5e5bd20", "indicator--2196b008-2c2c-4f93-8133-939d8a185482", "indicator--0fd7478e-41cc-4a11-8cea-17bcf898c56f", "indicator--c068e1f1-b5df-48f9-b983-1c5a9a1258ba", "indicator--b58e76ea-f2ab-4108-be33-95e31fd9b1c5", "indicator--4d85fd8e-8ff3-4308-8fb6-d000b18bc193", "indicator--c40bba76-76dc-4546-963d-596fb5d42404", "indicator--2e9c2fde-9950-4e6c-807f-6f6160d36d8e", "indicator--9ad741a5-cb63-49b3-825b-95ce4255e706", "indicator--ef43cb92-ff8e-430d-8223-a1d4e150430e", "indicator--7c7c9feb-ed4e-41a0-8e75-5874b063113f", "indicator--7f784d49-ae9c-4128-9739-a7d38420730d", "indicator--29a52adf-fa65-4980-a605-20cb06599424", "indicator--b87fc628-a74c-4e9c-9506-f72aa42b0ea3", "indicator--58d2a8a5-542f-486c-9e1b-6c3c08fabac9", "indicator--c09480b2-caed-41b5-a216-e0a0fe4aac6c", "indicator--73cc6a37-bfc1-4766-bd4a-684b1d3b96b1", "indicator--c1319d7e-76c5-4d11-baec-d3ba2f65bdc9", "indicator--a40d3b67-147f-48cd-ad84-4845d5117fe2", "indicator--43c6ba80-2394-469f-8bf8-5f66ee079301", "indicator--fd39a26a-adf8-438f-95c7-40b8bdc766a8", "indicator--4d0e0e8a-cc66-4fe0-a9b4-47cde94fc4a7", "indicator--0884995b-2a74-4157-aa35-1130649c588f", "indicator--f6accac8-39d0-490b-8f99-d366db0527a6", "indicator--2a338a81-780c-4ef9-b276-27a28df66e67", "indicator--ecec4bed-322d-492a-b8e6-bf83e337d63b", "indicator--86747af4-d31f-4d9f-9911-0f6f5c11dc8f", "indicator--216f7285-3d5c-4ac7-88ff-b3d054c6ceff", "indicator--134b52da-07f8-4ef5-9567-6041030f1279", "indicator--0697d247-b451-41c0-b3c9-524cd3dbe045", "indicator--69a8242b-203b-4bd7-8352-aa78764d5c3a", "indicator--8e2c53bc-ab47-40ae-a4cc-a142663ba38e", "indicator--9cd7eec5-769c-4694-a592-deea76a06c3d", "indicator--4815364c-0d08-4e6f-85db-0efa07de56fc", "indicator--506aac5c-442b-4717-8e65-072765e436b4", "indicator--8a568561-6672-4455-b56e-f6b5b175f844", "indicator--199955d7-e64f-4890-a764-9e5b36926531", "indicator--a9aefb7e-e31c-4b64-94e8-c6163fee7d7e", "indicator--022cbba7-4430-478e-8b1b-88b722e09934", "indicator--d8386378-164d-4677-b4ea-5054507ae281", "indicator--e08bb294-dd79-45d4-adb7-22540343881d", "indicator--247ce0dd-3017-4fc3-b93d-04a34cd5b1fe", "indicator--7a617d91-eb8a-459f-90fc-cd671ba676aa", "indicator--7a3a2a18-7eb0-46db-9ff8-657b17f6fc8d", "indicator--7b5d3d9e-b34b-40de-989f-9d797023203e", "indicator--0d018f5c-06b8-432b-898f-abb20f20b565", "indicator--e61767ba-aa37-4836-8e4b-78ff6f4083ca", "indicator--c9269b65-6e3c-4a68-8af7-36f25436dafd", "indicator--d271c2ed-af61-47f2-87af-3981cf5bfe36", "indicator--1281ba2d-ae13-4b49-9339-ee1035302464", "indicator--fa09a374-5296-48cc-abec-3949e8e669bb", "indicator--265b892b-1dc6-4907-b621-ab9c292bec90", "indicator--e5e42261-9836-4764-bd6c-9ded248629c8", "indicator--2d47fbdb-7004-46a6-8464-bb382853e47d", "indicator--263d687f-5336-4503-8b8d-68eb6565a564", "indicator--44bbabd1-0f84-4099-ba33-e2d326795364", "indicator--629756fb-270f-4ba7-873e-de49465435b1", "indicator--95386ea9-e84e-46fc-9fb2-7e3453181173", "indicator--d761193d-96fd-478e-b304-2a975f3921d6", "indicator--2b239d23-b783-4f09-8363-2ba589e46320", "indicator--ffc4802f-858e-424b-a436-e117b0f41189", "indicator--80c76957-d42d-470b-bcad-ef40976209cf", "indicator--72b1599b-a724-41e5-a50b-6fd8244e375f", "indicator--ff1cbb48-7f95-4bbc-aac3-8c996fef904a", "indicator--3db273a3-7343-4bcc-9eea-a81b81432b15", "indicator--06e64854-05ae-43f2-b0c3-8aaf43cab986", "indicator--ed9dc985-ed68-4aec-aa95-c623284ea0bb", "indicator--251fc9ff-05a6-4543-93fa-9824460bcef6", "indicator--282cdbdb-959d-4f34-a682-cb1f5c63e347", "indicator--981f8709-8671-460f-8d96-95a31055d0ee", "indicator--3889772d-0841-4f1d-a174-e2e927b3df56", "indicator--cf5de54d-d882-40f5-81e8-ba08eac07ed8", "indicator--0df587e7-8357-41fc-8333-83fc9147869d", "indicator--f5ed4277-0862-4248-9d7e-3184e45c0107", "indicator--4e02e4c6-4b25-4079-923d-8d3ec527c146", "indicator--7672e8b3-8564-452b-b3d0-3a7e84d302f5", "indicator--80cc8acf-08dd-41cd-9ae0-8d6c090305f4", "indicator--77fc17b7-4ae6-43f9-8957-0e8a8b4caafc", "indicator--006d6757-2134-4af8-bdb5-119dbf694934", "indicator--47808f36-f528-40e0-83f1-450f283f3107", "indicator--b06675cc-7521-48f8-83c6-3b4bd9f305f5", "indicator--00b0e086-bb35-4126-8684-f56cf2f0c737", "indicator--542eefc8-2e36-4fbc-aa32-f56b09752bd6", "indicator--346b6b8c-168a-41fb-9d8c-0f50a9bf87d2", "indicator--656d88fc-1ef2-4c8b-8d3e-d3315159f017", "indicator--3dae4363-a1f8-4528-ab73-27530432f4b6", "indicator--89e2a970-0650-4636-a90e-749cb9b6aaf8", "indicator--8805d590-435a-49ab-9102-a8991f38fe08", "indicator--ec142e96-247d-4bbc-9916-0a9ef5fa1270", "indicator--6ece971e-c3c3-4232-93bf-7d8263ec039a", "indicator--2f535be5-f326-4230-b79e-8e4e278a9ee8", "indicator--5ec2e5ec-fc06-46d0-9f2d-56cb286c8ba2", "indicator--ee005d8c-3521-4a96-9f69-4e8726d05ea1", "indicator--b405b0f1-0fa8-4c87-b4a3-abc9132326e1", "indicator--729b4530-f12c-436d-8351-dfbc3801e46e", "indicator--2e3264df-806f-4f03-b6a0-60fa66097429", "indicator--6ffad952-0b4e-4b3a-93fe-d3ccbf1df590", "indicator--ea6d31f9-11e0-4216-8317-13e4de82b430", "indicator--a1664a2c-f1b7-4949-97cf-e9793e6b05a7", "indicator--30b13d7d-9378-4b2f-aa3d-a5ed7f574d03", "indicator--a76c4328-80c6-4504-a4cb-51f08211e74d", "indicator--9f152107-03d1-49f6-9d1c-160ba5775f9b", "indicator--a89d084a-f5f0-44ad-b3c4-0f291180c168", "indicator--1c61aff2-c31c-4256-ba7f-c4ce6fe3a6f9", "indicator--9fc52169-f711-4e17-abcc-a5cb399caff7", "indicator--1ceedf24-b8f1-4f6d-8fb5-bb331002d8e8", "indicator--cfa11ed6-a6fb-4a18-b646-79b4045ae1b1", "indicator--f27493ee-6460-4154-b9c5-5e300bcb2541", "indicator--5f8f3348-c5fa-4539-a404-3346c64b2d57", "indicator--2c45d00b-6e97-40e2-9488-267ff604e159", "indicator--4703c277-34dc-4900-945a-4f37d7f6e97e", "indicator--eff47f9e-c5c9-4d41-86e2-5899473a0fd0", "indicator--b34a3a60-4590-4111-a587-652acd32e114", "indicator--35e36587-61fa-47b8-ade6-a08b56068236", "indicator--f38f8674-8057-4bca-8a7a-1ce0da0fa693", "indicator--d5691a76-525c-4173-9171-2802c5071612", "indicator--965b5876-d63e-47b9-8e71-7559b20ab095", "indicator--c0a84ff6-fae1-4eaf-b187-723f3c0738c0", "indicator--fe57ca7f-669d-4e65-882b-786135b7ce47", "indicator--526d750f-9e02-43fd-befb-6c56e420b047", "indicator--9cfe4684-2f5c-4fe8-97e9-cc494580a6d4", "indicator--f2306b97-e876-4706-a3a7-a8792b1e2a07", "indicator--5482c335-1e72-4fe1-a814-d12636ae00d9", "indicator--0b683fc3-dc93-439e-90e6-5f0876aa41fe", "indicator--5288a659-a77d-43a3-bd8f-0da6a9417e93", "relationship--4a8d9c59-cbb2-4eff-83cc-d5b5e2b7c794", "relationship--2b217fb8-1e49-49e0-a21c-faddb44b9586", "relationship--30b93831-1668-4914-8e1b-d12d21a8b603", "indicator--484f10f6-ab10-4603-a13c-13767ea37add", "indicator--172cc92e-7495-4cef-ab85-0470f52b39d5", "indicator--07bc6e87-8365-4372-8c5d-0c5a2607c8c5", "indicator--1eb0e9c5-4d4e-4dc1-ba5d-458bafd5346e", "indicator--367a1ad5-24db-4ad1-83ee-a90ed5bd3f79", "indicator--3f7f92b8-9815-483f-89cd-cec4c4ce92f9", "indicator--2f5ce132-fdfc-4222-9d69-baee5936d4f4", "indicator--3cf5f38a-31ee-405b-b1e3-c160b1ceecfc", "indicator--2d0fbafd-5ff0-4366-a958-ec1c8a644e6d", "indicator--4dd47ab8-8b9f-465a-aea5-69477adcfa2a", "indicator--80ad21d9-748a-496b-9208-d6dd99bf40e3", "indicator--fb81598c-7502-41ca-bfe8-7bf45d8ea166", "indicator--49fca922-0eb5-47ab-ad99-9c5ee21249ae", "indicator--b3273ae7-d5a3-4d8e-80b7-cb7304c710f7", "indicator--62c1a819-03b9-4cf8-849b-0fe35b288d1a", "indicator--30806b04-e03e-4c03-bf38-d2276b6249ee", "indicator--8541459d-2e55-4de9-aeda-9d39e8f727fa", "indicator--bc4fa5b9-ab55-44b1-b945-ec8e44df0101", "indicator--d7453ed2-b28c-488e-895b-10c65dcbac81", "indicator--1f4cf78c-7d04-4ebb-88bb-96caf3f504e2", "indicator--555dc88b-88ea-4cb5-93ee-e529fd5607ac", "indicator--28d1e78d-e4c4-4de4-b32c-d12197219aa9", "indicator--01dda914-8ce2-43ce-9815-41061d29f15b", "indicator--db50c19b-ea6c-48e7-8133-39b6b3cd9fcd", "indicator--49c19359-022a-4ef1-b309-7bbf564f8fd0", "indicator--9319c108-81ea-4a81-9d7d-d88457db0356", "indicator--3c273286-60dc-4eaa-b413-1905ff54e6a7", "indicator--1522e9b2-15da-4a22-99f4-bcfad590fcd5", "indicator--25b7ae8e-ab5e-4be4-b76e-ff54f2af9525", "indicator--9ee3417d-bff7-4382-9f02-d0e28eb542b1", "indicator--7c614f5f-7be5-4f85-ad0d-714893dca94e", "indicator--c78f9cbe-244e-4973-ab7e-ef43ac4a8fa2", "indicator--dd1ab5fb-4c41-4904-aab8-60f605d665ae", "indicator--9d78a007-79c5-452d-ade1-fd528ecfe9e0", "indicator--3f1ea1e2-6fa4-4cd3-b60c-06d3e6730954", "indicator--62f4d035-8430-4f2c-bca9-83c67feaee2f", "indicator--d1dcf929-569c-43b7-a536-1df5a6278703", "indicator--92133383-571a-49f4-9f9d-92cb80f3748f", "indicator--1a838f33-0d2a-439d-a11b-498d333acd1f", "indicator--6cd2a22a-3eb0-4c35-9914-42bf0d3e618c", "indicator--ef068a61-ecef-4f73-96fc-23018b036662", "indicator--ba5a4ed4-1189-4124-8add-e529f75ad3b0", "indicator--74601e47-57a7-400f-9896-93567a52d7a0", "indicator--34a4695d-ad86-49c2-bd0f-cdcdd7e1b86b", "indicator--0a3f304a-750f-4843-8c02-914ceda3ff87", "indicator--a4ec51fe-cc4a-4e28-9630-ead798a0aff8", "indicator--6a6bc57b-1002-491d-b4a5-cdd55af5e9c3", "indicator--5b8f2e74-beb5-4f58-831b-a63c7e7e63ae", "indicator--0de8d8db-eeed-4285-9aee-5c8fad7db3c5", "indicator--92bf6ba1-7bb0-497c-8cee-6de8a0e86900", "indicator--012c9632-fe40-4f4f-b799-52675020e1df", "indicator--9bef5d37-771b-4f08-96f4-72aed42273fe", "indicator--80b5df23-5587-4b4b-b32f-d9f9247fa9a8", "indicator--608b356c-5696-47fc-b89e-7e9828061ca8", "indicator--3bdbe6a9-2799-40c4-95ee-7fece92d6413", "indicator--522df16a-4839-437e-a104-586aed515330", "indicator--9c7ea488-b3a3-4a52-bdf7-3e3600c4bff7", "indicator--a7628a29-ec1e-4d64-b51d-dc9325ad60e1", "indicator--5ee9c3ae-47b3-41b7-80e3-60fd579d3b99", "indicator--149555b4-c367-41c4-8252-bda9ca7a69e4", "indicator--aa3570b5-e3c6-4f21-b6e3-7f7235ad11e3", "indicator--ed88a541-d5c7-434a-90d5-d3117091a271", "indicator--dd2dcaa3-1aa3-4841-8b2d-5ebffb7343c9", "indicator--77840efa-9f66-4699-9031-fa697479dec2", "indicator--5f3309e3-06f6-4a78-854f-b3b2a7d62edf", "indicator--9b45c365-4477-4761-b1da-f0d4986578e3", "indicator--126babe3-adf4-4937-88e9-3c89da0bcb6d", "indicator--afc1bfe9-47e1-4614-bfb0-273417d773bf", "indicator--63c3c7f7-49c6-4e5e-95d1-e0fedb3982db", "indicator--affc519e-4363-480f-b2d2-3e6137c1b1c9", "indicator--0441a070-1ecc-4465-979f-2b951957f14e", "indicator--82a6365e-0fe6-49d1-8285-4355a779ffd6", "indicator--d14214b2-957e-4bf2-bc15-d00d50ba6331", "indicator--7e06e6ca-27d4-495e-8634-acd34b516f92", "indicator--813a2e3c-02a5-4bd5-82db-2f3f4a775606", "indicator--ef8728d8-c309-47d9-8e7b-cc942f8c07ee", "indicator--ae4bdef5-95b5-4894-a659-cf3574780563", "indicator--c57d3f57-1a45-40a6-858a-bb9d21169e63", "indicator--fa6fb5f6-1c6f-44df-b5a6-12be0a3f5c0c", "indicator--295e573d-5b18-4266-a9bc-99ed7f40639b", "indicator--fe9127dc-4dc6-40ca-966a-2e57738ee2f0", "indicator--111e640f-7b89-42b6-8b79-22bbcd5f112f", "indicator--48a36159-99a8-42f6-98aa-d3f4b4198309", "indicator--6dfe3cc5-efb1-4d69-9ce5-d8bfbe5c9941", "indicator--0f1ae4b9-acb4-45de-bf43-f0d64993defa", "indicator--eeff2056-1c1e-4906-a61d-c35f0c42c5b5", "indicator--92f67d63-1d1a-456c-918b-9cebf2af5d27", "indicator--a46388e5-877f-46dc-8925-1c802fc7e7a1", "indicator--aff8774f-aaec-4184-82a0-4a0de6eef7fd", "indicator--c6cb1584-d1a9-4ccd-b6e8-8cd6e29a4826", "indicator--512267b0-e0ac-43fe-9a42-b92a908dce6a", "indicator--5c8b6af2-d26e-4fbc-9142-f19722b9fa03", "indicator--39a9bd02-e6be-4019-afd9-5a891d07b025", "indicator--98d322e3-1f1e-485d-9f32-3740cc8b2def", "indicator--cc54e36a-4363-4271-9d51-b82f3c70a079", "indicator--d6486c66-2a2e-4a05-9c87-6891ecd4badd", "indicator--79940c69-ae18-4077-b7b2-927b7fd3b935", "indicator--15e53c96-8e85-4498-920e-9ed26df1fb16", "indicator--3c64b213-a338-482a-8551-6fb7f0758730", "indicator--ed2bdc83-cac0-4fce-a71f-4f4479991d21", "indicator--b335a059-aaae-464b-b715-1509afefea3b", "indicator--f110b3da-d6b9-4641-95f1-ec0ea4448ecc", "indicator--1e217e47-1e5c-483f-b99c-df4fd16b1686", "indicator--18cdc73d-8c08-4923-86d3-a7af56e73e1c", "indicator--570fe2f3-5c46-4039-9883-fea062920573", "indicator--d846dfa6-4ae5-4688-9f84-285013fa9d3b", "indicator--4b0b79f4-9223-468a-9fdf-b540c889ade2", "indicator--969841bf-5c86-4d5e-8498-ae3cd4cd77fc", "indicator--ffedb64d-2314-46d8-bb83-518fc8184b26", "indicator--5a5efb67-c711-4df0-adc6-679bae8d56cc", "indicator--3cb16d49-7da9-4657-85ed-d51be65a5cdb", "indicator--5c972c01-0936-49f9-b8ef-e1976ebaefb7", "indicator--7fd2d6c9-f405-4514-8251-619b25b5b66e", "indicator--851e6c73-892a-4ad3-8511-7a22eaf704f6", "indicator--40fc1179-8a1a-4bc6-b3b6-3bf4ac0ceed1", "indicator--0dda592f-c5b5-4466-851d-bce6cc7163ae", "indicator--330c5694-2374-4b33-b781-7d25d27f54ad", "indicator--48b5abf6-1bba-42b5-b718-5f6f28af4eec", "indicator--0764385d-9ef5-48fa-abe8-2cdd7127c939", "indicator--da87befa-ea08-4ade-949e-45b9eb6e09ac", "indicator--bfe74d77-d686-4178-877a-ed550effe7d5", "indicator--b9e319d8-90a6-4ce1-98c8-3594ae95d89d", "indicator--889e3c35-7d8f-4865-a01c-ef6d4115d63d", "indicator--eb817212-19b7-43ea-9841-c095f819fd9b", "indicator--5885b802-3800-44f9-bd54-27fa0d390413", "indicator--6e30d5d1-a913-4cda-bd2b-d07be67637df", "indicator--407a6425-6501-460f-b487-abdfa8d0b269", "indicator--45e600c0-cc13-4ed2-ad61-e122ddda936c", "indicator--857b1ca8-0b18-4f93-a701-49865d6e1597", "indicator--d827a124-c976-464b-8000-1af6ad7a3775", "indicator--893242db-97df-4a61-8135-8e2fd942db45", "indicator--accbaead-968e-4502-980a-eac40e710c53", "indicator--cbd6b79e-3869-4c9d-affa-ef68549e3cb7", "indicator--fb617c8b-9d53-4827-b794-191ebc387660", "indicator--b58f26ca-275e-4fb0-b3ee-bfb6e52b321b", "indicator--935e087a-23e0-497a-91cd-a41e494dd5b4", "indicator--a01e204b-96bf-42d9-9365-9089c0849c72", "indicator--79d1e769-7373-4643-b82c-76bf3263fe4e", "indicator--db664695-5460-4805-ad46-865ba4c73a29", "indicator--6c7c5e34-03d3-44a3-8c23-f2b9326edc67", "indicator--541490f7-4321-4647-9e45-beec9d72f522", "indicator--84ae30b5-d4a4-4a7d-9fd2-f3eeac7f061f", "indicator--f3b2bc59-b1cc-4868-bc86-ea9b52ae7888", "indicator--accd079e-0b75-4c15-a790-c5ad576dda87", "indicator--99eab437-b5ad-4bf8-9cbd-bdb00a50169c", "indicator--4cd8e919-2150-4f14-aa28-6ba8874b2e15", "indicator--89637a4e-61e0-479a-aff8-8634957afacf", "indicator--39395463-f8cc-419d-84dd-7a96210f54c5", "indicator--ae4a007c-8730-4f01-9ee0-78f517fff970", "indicator--99d703be-5bac-406f-bec2-40b2e1ca8f37", "indicator--b72a26b1-2b62-4ec7-b5f0-f68c1c06038a", "indicator--ca1ba4c5-6d83-4fba-bc88-7bbc6abe54e8", "indicator--3a4f13ab-51c8-4dfa-b086-e35a62b4217f", "indicator--3c50dbed-4eb9-417d-99a1-a69127439e8e", "indicator--6efef18c-1468-4ae4-b0fb-c7396b299143", "indicator--86551668-87ba-4297-b6b1-7ad1dc776d69", "indicator--1f927259-da3e-4064-8c47-e70c74dac246", "indicator--189e2690-b9be-408c-abf9-12249b570b73", "indicator--f2769194-df5d-44aa-a2c8-a55f6bd7482f", "indicator--08e68c41-7215-4174-baad-35865fc9f796", "indicator--a2de3d73-8029-47cb-91b5-782e82fc0f01", "indicator--82b26a74-f38f-467f-b7c7-3134dadaaf26", "indicator--960c9d09-ec1d-4a4b-a80c-432f60f48613", "indicator--7ea05163-182c-40f9-a882-fe1e9dbb48e3", "indicator--40ef18b8-6b3e-4b96-a1b3-23e6ff071cf3", "indicator--84250ee9-32b2-4752-9236-78c5bb03d312", "indicator--5b0a38f2-3077-4baa-ab0a-22cb2a1b9915", "indicator--efea248a-534b-4d6d-9fcb-09b174f852d3", "indicator--97fb558d-bfc0-4c8e-99e9-41131c490879", "indicator--6fec461a-46d9-4535-a290-a3b929dd2826", "indicator--f52561b2-09ee-481a-a277-7c6e7fd95324", "indicator--244df089-af3a-4aa1-82e0-ab7794e99f9d", "indicator--f767ce28-0b8c-41a5-9a80-a33be178b213", "indicator--151694cc-0b17-45dc-9766-c42f6eb6e709", "indicator--bced32af-83cb-440c-a74f-5de984c5b50a", "indicator--1f081200-776e-4ef6-8c86-63c841c576fd", "indicator--870166d9-f11d-4ee4-86fc-41e9592f86a1", "indicator--bd758fce-3434-4726-b406-0080847db280", "indicator--7e3d3d1c-37c7-4195-b9f9-633156faeab7", "indicator--82c5675a-0322-45d0-b45e-c5221a1ab7fa", "indicator--20d0d025-7e17-4f76-a584-3eaee5d17390", "indicator--a39ad940-bedf-4d6f-bbf9-c2e083ee961f", "indicator--5044098a-4615-4c30-9436-421951571506", "indicator--e31cd8b9-8a27-4534-a84e-7c2cd1a13bb5", "indicator--e02caa72-c67d-4ebb-a597-3b8394671f80", "indicator--da616d8f-6896-4d98-b219-6b299fbb94ba", "indicator--642de111-5df7-4c90-acee-75ba3dd9d744", "indicator--88429a56-fb2c-4da6-99a1-9a3a5255be2e", "indicator--6602d785-fcff-40f0-b2b3-25a0d534196b", "indicator--b1dd55d1-c122-4afb-8a8d-14345c9b1199", "indicator--d8f342c4-c36d-4c7c-bc73-f6a329767b45", "indicator--d3c40a45-33db-4fa1-bef9-3cc50044835b", "indicator--e3e42143-13a6-4622-8914-48791e98013d", "indicator--8461173c-13e9-4bcc-9cd4-7517da56bbd4", "indicator--44194edb-d924-43ed-82a9-d3c0b4b380d1", "indicator--d126fb37-d76d-4f09-8def-e3ac26a3c39d", "indicator--0f267a11-4974-42e9-bef7-dda563e580d1", "indicator--99728887-a90d-414b-8f51-8d43cc9b2be4", "indicator--9bfc3b7c-d8a8-4d2e-9119-646a290ea075", "indicator--7d2ccff5-9e39-45c1-859f-194e59966130", "indicator--2f0ecf27-ae01-4c9a-abea-d0000f9ab9b0", "indicator--a84245c4-a8e4-41e3-8731-178ad8512995", "indicator--2f903439-b08e-48a2-aba2-9e6b5138b902", "indicator--7f5bbb2a-afa8-4193-9207-7ab61ab380cd", "indicator--f00e0384-28bc-4de1-874c-4bcb200003ca", "indicator--218fcb36-8f31-41e8-92fa-1db11b2cce83", "indicator--36fb2269-e9ba-4995-9dfd-265383e5ddf5", "indicator--63333d26-69d6-4d06-aa9d-8bf44fceef83", "indicator--c81ec0cb-7824-4479-af1b-29f546cacae1", "indicator--dccbcf21-fc17-42bd-a22e-11abcb1c04d3", "indicator--8c637205-aa74-4cb8-8fa7-efb798cb9e09", "indicator--576b1d16-b763-4097-8a10-7793220ff8a3", "indicator--7d39e019-578c-4abc-a25c-89c8398ffd36", "indicator--dfa93a48-6431-4078-be41-ba72113648b3", "indicator--3729f6fc-9fb2-47f6-8da4-01b75ec73f03", "indicator--fd491ad4-75c8-406c-a30e-b6de25174038", "indicator--a09004c7-a273-4014-8c14-186a2e849c7e", "indicator--3c4c93da-79d9-47b5-890c-4c29628cc851", "indicator--f11ba8d0-6517-4b80-a92d-fe6153833afa", "indicator--d235583d-7f01-416c-8c4e-b9e491efe685", "indicator--760c4102-7999-4fce-8d05-ee305222da5d", "indicator--be908874-57cd-4e08-8401-79640d499814", "indicator--cee3a0e2-73c5-4a76-b996-d7f03ed6244d", "indicator--10430066-d7c1-4903-8317-d686a96c1043", "indicator--ccece0e5-776a-426a-8532-e8e32de0c94b", "indicator--06205deb-9642-4cb3-b35b-f5ba6061e941", "indicator--b4662ef7-9258-435a-9e9c-45a73e9e59d8", "indicator--f0388cb5-c4d5-4a9c-9261-bb55ff501d60", "indicator--a0aa27fe-d3c4-484a-9644-89c1bd7ddb59", "indicator--b96677a5-f453-4a5e-b633-beabde4add0e", "indicator--b1ba79e1-2440-44ee-9b48-0f3e25512084", "indicator--a20867dc-346a-4440-a057-a7b3ddf9cd41", "indicator--14d2dc9b-0aa5-40ce-a33d-e06ca549ccc2", "indicator--b5f881af-16ff-4af0-85c4-9d98c425cafd", "indicator--bca76df6-9847-4417-84cf-871b8933ca8e", "indicator--7f68487b-8cea-42b4-8e23-75a007c39cc6", "indicator--83ef1db1-e946-4dd6-91a3-158df1eafe54", "indicator--f922dcad-7552-4d2c-b0c0-9792addd8d74", "indicator--1fed36b7-5449-4587-9a0f-0d0ae6a30ea7", "indicator--776ba51d-0314-450c-99c5-3787c52baecb", "indicator--0ca71610-947a-41cd-b7de-050d681b7aba", "indicator--406c0e20-dadf-4728-9a0c-5bddbfc432ff", "indicator--c4d2f5dc-0cb8-457a-bb94-79e829d9b4b8", "indicator--8a35a00c-4b48-4c7c-95f0-5147658ec4ed", "indicator--60ac0727-665d-4fb1-950d-adddb3d25341", "indicator--eb59644a-7778-43b0-b7c3-2174234b4b01", "indicator--53633bb3-71ae-44d2-8ad2-8e1ae81420fd", "indicator--be19f3d8-9603-4236-bfa7-ea44ab440350", "indicator--28bfa3d1-4547-4559-afc8-0c25e9101070", "indicator--aa0526aa-d175-43cd-8531-8eb9df9d71c8", "indicator--3aadfe04-d555-417d-8cac-5e2a8acc37db", "indicator--842c213c-65b1-43ad-be59-55af33f3dd63", "indicator--08c5bfbf-14ce-4b58-9e55-5ae7af96db98", "indicator--836d57c1-ba1f-475d-aaea-19a1666ef738", "indicator--54f7ee2d-a2fe-406b-94cb-3f706d6ccdba", "indicator--d2724b75-31ea-45f4-a3ac-8eba5ad0f119", "indicator--322943c3-1a2b-4356-8fd2-4937ee138a50", "indicator--1f26e93b-4011-43db-956d-f4935e148329", "indicator--7d89c882-1681-4d9f-a17a-8a5e5f80fd76", "indicator--fe78749a-e6c8-4d96-a127-3e00a3806aaa", "indicator--004263bd-38b4-49a1-9f46-048032b0bf14", "indicator--b78b7425-5a23-4904-8ed5-05d3ab4b5206", "indicator--798da572-a2a1-400e-8bcd-ad95d4647fa7", "indicator--a544d7fe-75c5-4da4-b8e2-6cb91d2925ac", "indicator--e94779ad-d0b5-4361-b8f8-f66fc773740c", "indicator--fc2abd42-74e7-4bbf-b1c6-b8f687b76bdf", "indicator--095585c0-7997-4e12-b83c-6e7513a9c128", "indicator--ef261307-2eb0-4c4e-bfc8-611c85c14454", "indicator--714bb58f-cff8-4d27-86f1-0c8e61ef0cbe", "indicator--bebccdff-ce27-47ef-9cc1-467d8628346a", "indicator--4792089f-1c88-4778-91d4-fb8d7f70ab6f", "indicator--cff136e0-0cc2-4e5c-8259-42aa0d620ebe", "indicator--1686f163-b935-4a53-985f-9bfc67224393", "indicator--cae49a9c-44f6-414a-9da0-61b542dbde6a", "indicator--3bf6175a-642e-4078-bd46-b841f83d5074", "indicator--5b3fe39c-9426-4910-952b-a00ca89e4670", "indicator--c83e64a1-ccb4-410f-972f-78a7b49fcfe1", "indicator--c1a562b9-fbb0-407a-bfdd-c62335db1ddb", "indicator--cf5fbb4d-519b-4bdb-b8a2-4a5a3c023a4b", "indicator--f4440268-5649-4648-8036-4593e6d1b06d", "indicator--932deaf6-21f9-47ee-a3f7-818b481b8c6c", "indicator--e7f0304d-5a72-4029-8cae-14e77ec822be", "indicator--c9edd6cf-cef5-45fc-98e2-675cf1e85405", "indicator--5f10ca0b-3aee-421a-b1e8-0dee20629e27", "indicator--bb9eb8b3-0651-4c1b-b2fc-48cd38200268", "indicator--d3469d23-250a-4d78-973d-90974b59748b", "indicator--e9642044-02f8-4097-8afe-fe4a53d5eb34", "indicator--0ffc0969-9fc4-45a0-aa37-db7ecb1e91e7", "indicator--11ddf16c-05b0-451d-a460-e4138f27f488", "indicator--7557ca73-8ff8-42b3-a189-0134d2aacdad", "indicator--5bb883de-5401-45c5-a3a7-7ecaab37fb43", "indicator--cb360093-9376-4b33-8ef8-cb248666e4e5", "indicator--1f499224-0616-47ef-8004-227201e22a75", "indicator--d2aa1926-b783-4445-9f64-1a6ec2805f65", "indicator--79716db1-9447-46aa-afaa-e0fda00eed7f", "indicator--2dc4c8f5-f356-4416-91be-819784900df4", "indicator--4b552919-1b47-4cb0-9b9b-09f2b9b396a6", "indicator--7b18d9e9-6095-4201-9c5b-96b05c6b1f20", "indicator--65cff443-c555-4fcf-9cc6-b608426e08e4", "indicator--7a581f6e-475e-48cd-a71b-6b1326ecebb2", "indicator--ea943d74-d33e-4f87-b559-3f22da69bccb", "indicator--a8131015-555c-4ab7-9066-be6101ded9d8", "indicator--cd2fd7bd-8b5b-4b1d-9579-68c7b2ef8465", "indicator--3d3419e3-383c-45ad-9bd4-ddd67008aa05", "indicator--c2ebab92-729d-4c6b-a4d9-26ddb750cb1b", "indicator--fb49d1e8-8a31-4422-9f90-9164e489cd5e", "indicator--a94a8566-0c31-4098-9d45-0576a80dca4c", "indicator--3a435579-e3fb-43f6-bc1d-510b5cb35dd0", "indicator--c56c49c9-5f02-449f-820e-38e98cd2d1c9", "indicator--b263b388-f1a7-4ec4-9737-9af9018a0e3c", "indicator--45d4f4fd-704a-4728-bbc9-1b1e6acf8db1", "indicator--d8916a01-693f-4783-8c50-a41b08301984", "indicator--19e30a23-f1db-49d3-be3d-2651e7472ef5", "indicator--d142705b-92db-4451-9d20-c169dee5d4b9", "indicator--2fd0bbe8-6edd-465d-9faa-774424ee38d8", "indicator--742bc0e3-dbfe-4e48-b9ab-ea74ccd67825", "indicator--ec4061f4-e3e8-4d92-88de-10947a0aadb8", "indicator--04f62b12-dd94-4270-8747-56e6266fd8d2", "indicator--a29b208e-3e6c-48e7-b653-a97e4b4a45ab", "indicator--81eec8c6-9796-4310-ac7b-1acc96fd6a20", "indicator--35b909ce-2e19-469b-8ab2-e78409d2d33a", "indicator--decb2669-b82a-48fb-96c7-c73bcb924454", "indicator--e7f97458-912f-4acc-83ec-8f88448e56f7", "indicator--d4d24c8d-15e8-4d4e-af39-38014154910a", "indicator--bca234b2-73f8-4fbe-b620-9d44092c77f5", "indicator--73301664-a488-42d4-8724-5650f83d090b", "indicator--22e84d8b-f086-447a-88ed-c63fbca685b7", "indicator--c35cc970-89d0-4f0b-b071-f3e4df7ceb3b", "indicator--13391344-d552-4042-89e1-a9ce03ccc9c6", "indicator--8b9905f6-d1a6-4b99-b46b-e9de372e20ea", "indicator--d4bcb0dc-2d2e-4eed-b416-26cab3dc95f2", "indicator--bfb62db7-4a4f-47c6-936e-c51af1a34e0d", "indicator--2c4694dc-b8fa-4c81-892a-2dd692f26e82", "indicator--b7af8dfe-a379-4c6e-8c40-7966b879d2ea", "indicator--3ac3c071-efe3-4b6f-b5e5-87944b1c05b3", "indicator--e7ceeb9f-9f29-46ad-adfd-daf1f2416c12", "indicator--8fcccd01-edaf-4b48-8dfe-37de0d5eaad0", "indicator--bbee6cfa-3d02-4135-93e8-8b9bd46e9832", "indicator--594a2d29-9590-4f73-b555-ee7ff031feed", "indicator--f892cbce-3868-440a-bc8e-d89392dc33af", "indicator--1f53aa6a-7b51-4620-9450-b0329b010bdc", "indicator--5edb53d2-57d8-42d4-8a12-36ba35272430", "indicator--46ca8b19-9c28-4a05-971e-a60705b3ce59", "indicator--115747e6-4265-4c43-844e-ac3d53fe2c9f", "indicator--4cadbc57-cb09-40b1-8b44-b149ab549f87", "indicator--7d794f13-2e36-4f06-bff5-7676e236c21b", "indicator--b09f8696-c4f3-4580-8e02-ad162ab258f9", "indicator--b1f2e18e-27a4-4c50-992d-20c74eaf5acc", "indicator--a983d4f1-2c3f-4678-bf06-5fc44bc89ec5", "indicator--c5b3fb84-2ab8-4580-8a40-06fef4eaba59", "indicator--43fcafec-13e5-4f8a-891f-5a8e58e994f8", "indicator--2be86627-379c-47d9-b14b-21bcb85fd414", "indicator--319b299e-4ba0-4d5e-8c0e-ec0f64b18782", "indicator--829c15e6-a2e4-4fb2-8054-444dca70fdb9", "indicator--30451dd2-057d-4ddf-90d5-e7174bf8adbd", "indicator--3a361ab4-a806-4cab-9f47-2500e789f29e", "indicator--54d2de19-aa30-4e17-8bf2-f7c2b1cc0ff6", "indicator--be520698-abb2-47bc-bf56-32260509d05a", "indicator--8d823316-ce62-495d-84f6-9741a3607656", "indicator--7f6716e0-0b47-4455-8c9e-8a3aa8003aa0", "indicator--c33b8d6a-c9dd-4f94-b316-ca2d83616079", "indicator--0cc4e830-d73b-4d11-8768-23cb211fbeab", "indicator--8ae4b642-4fbc-4043-8ece-fd6c945e7977", "indicator--61577a0b-ae5a-4383-b8db-1419e2f8cedd", "indicator--51c35d6b-d0ad-4e01-bb28-14a5b28384d3", "indicator--231d46ab-0755-43e1-ad0f-fe2a26f7fdaa", "indicator--f176e8b2-1132-40c8-ba17-967850a354ed", "indicator--d2c9a2d6-59bd-45a4-84f4-5ea2c09733de", "indicator--471b8b9f-68ea-44fa-acd0-59dcb572a74e", "indicator--b3a917e0-02d4-499d-90e1-ccb11cc718b2", "indicator--b6002541-ddb2-4915-a506-99c030fbdbe7", "indicator--32cc7b15-0924-4f1e-bb17-ca711aae1d17", "indicator--1e9ec12e-d272-46aa-95bb-1629990415c8", "indicator--e2d43eaf-98c2-46ae-b636-4c32c34ee4c0", "indicator--ca50c6a9-0116-4d17-b176-2394e28e9422", "indicator--d4a7c6db-3a55-4ddb-a84c-8f335ff0d282", "indicator--f5537e41-2b9f-4f86-b979-36ede556d81e", "indicator--f09819d3-59d9-49c3-9609-8c52926d38a2", "indicator--c3a29bdb-c9e9-4e12-bb65-eb981bd85a24", "indicator--59195479-11e2-4451-a446-ad716fc9bda1", "indicator--0ffa9b85-8c8c-4e6d-8fdb-d1636a568d7e", "indicator--6c2f3c97-fead-4efd-8fd8-e5f80682ceb8", "indicator--e10f8603-15cb-4db7-b7a9-69017b9a5534", "indicator--f904d9c5-5853-41c0-aed2-489008fd0f9f", "indicator--2fea708a-31da-457b-aab9-13bef1cddca9", "indicator--a4e3aa17-ae9d-4586-ae19-dd35c6be101a", "indicator--eda8582e-339a-4187-a619-10361abf17c1", "indicator--db980f11-f22e-44f5-a692-3459f37ffea4", "indicator--1fc2fe80-1049-4dbb-8229-9fec7de3ea84", "indicator--b204c33d-5cbd-4067-bdcb-76c6026d4240", "indicator--11089398-95c1-4451-b257-1716c0d75168", "indicator--922d14f4-1b41-4356-9709-1d4ae6cd8670", "indicator--c76cd196-ad94-4ad7-bee7-bf7a1ac3689b", "indicator--77dc7460-9f22-4933-b38c-f3a711ec8506", "indicator--3259e427-a5fd-46ba-8d38-1d5883869096", "indicator--d01a2f10-699a-435a-abf3-437c8ed92f15", "indicator--d65c5843-0265-4944-8e95-4a7323348f05", "indicator--184894b8-87ac-49ad-87c1-65cf3a7ea4e8", "indicator--e2d5deed-9647-48bd-9bd8-ae15a1f98880", "indicator--7254d0ad-8b0e-4148-931f-c9a9003a516e", "indicator--b1014083-77e3-4269-983f-691ad414f135", "indicator--e21fc5a7-bef0-40ab-8fee-f3d52f60fd3d", "indicator--3bbfb944-4a2f-425f-8d8b-98038eec3766", "indicator--e0d22211-0ca6-4b38-99e9-f458ef1c35aa", "indicator--dc2da698-42ce-4572-a013-66cdef3ff419", "indicator--b3bba718-7c22-4420-b2f8-eeee90f293f2", "indicator--70627d14-a2b7-4a08-a188-03112aeeeb50", "indicator--8b6e80fd-ecf8-4146-a0a4-16da1b8820b2", "indicator--85ee243e-826f-453d-8e78-67c33252a3a0", "indicator--4168122b-7048-4bf8-a2ca-34bf439c87df", "indicator--4d7aeea5-6d60-439b-aafa-88c280b8e04b", "indicator--c70a430d-41c9-48a7-8bd7-bc85b77a4304", "indicator--d0afe1a1-74a3-4ba1-b07b-20673176d0b1", "indicator--7f247e84-a7bc-4525-8df9-e070b4acc45d", "indicator--8648c35f-b5ea-4d10-869a-bcfcbb4f6e3b", "indicator--07ede20a-fb0a-47d6-ab62-8691e7f65992", "indicator--a546e3cb-8546-424f-a2ff-33b23d14fee5", "indicator--76663423-29f4-4c6f-93ba-e4163c141484", "indicator--445b0e57-3f57-4ee6-805b-eff5f44cbba1", "indicator--6790a805-5214-4493-9fb7-c221406c0256", "indicator--481cc7df-c487-485c-838b-e35d46bd74e3", "indicator--8b241fba-e5e0-4617-b361-f597308c0d75", "indicator--81f1b10c-4c19-43b9-b458-f57773303e8a", "indicator--62e4dc95-20e0-464e-9011-afd287ffd680", "indicator--cc163e0c-9b33-45c5-bb06-0b04a3ddca88", "indicator--c74d79dd-682a-4be4-b550-f524f5866451", "indicator--b36e327c-67b8-4da7-8939-a67d00e20cff", "indicator--c17d657f-0f49-4dcf-b180-b18e47b0a4f0", "indicator--cbb99aeb-e041-43ff-aa0e-3d0e511a4a96", "indicator--8baa7409-7063-45cc-b5c0-42b46dc3c3cc", "indicator--aa2546da-218f-4814-b33a-0dbf479e8949", "indicator--0bc7245c-4087-4a60-8e75-f40f13e16999", "indicator--2a77aa53-5515-4091-bd70-73c3e01e90c4", "indicator--75806c52-d2e9-44a0-a232-1562287e7e9a", "indicator--3a5f617f-429e-4543-975b-a70c8bc46f42", "indicator--a6ed0924-4fb9-4b9d-919c-6b162b2e10c3", "indicator--20f8a463-67cb-4c77-809a-3ea2c0fe4f99", "indicator--79f241db-5669-4bef-96be-05a92004afc6", "indicator--b4a59f69-490b-4bf1-aca9-6d3b240290a3", "indicator--aa971b92-6401-4ad3-8e91-cb82d43500cc", "indicator--fa80d088-221d-4da3-b2c6-33f3e47a2bd4", "indicator--5e644c84-8615-45e7-ad89-401afe1ff051", "indicator--a63df2e6-5c76-43b7-9547-52684750958d", "indicator--0fda292a-b8fb-424e-ac1d-9ca2969d9e10", "indicator--a8c8c1ee-457a-48c5-bc34-fc1db2c36d37", "indicator--5b1ae5cb-1e7b-4d20-b4ed-1aecdbb6ba00", "indicator--640f93e1-7c72-48a8-b5a8-00d39f6d5105", "indicator--2c2c00b8-f440-4d2c-9eb3-4abcb6819e62", "indicator--c13f480a-f5b2-4b87-bf7a-ad9e84c142b5", "indicator--35dccec4-94ad-4bc8-8355-fc55443fd50e", "indicator--94ad9235-c091-43b8-87cc-e1e908ffe143", "indicator--01a5cd4d-f139-4979-8fbd-5a76a85833a6", "indicator--4a6fe838-386a-4942-9236-f0aaf6193e50", "indicator--afa9d925-4c9c-4bc4-aeaa-8ca7565a7b0c", "indicator--2a2108d8-8c80-4b2e-b62f-87c7eba77f12", "indicator--41c3be76-e5c7-4cbc-81ad-11673fa5b8d8", "indicator--afcf6172-5cd0-45d0-b22a-f59df152c38b", "indicator--bfeda439-e491-494b-b669-bb65ed00f5ac", "indicator--a555d60b-4710-4d19-9201-989fde77c915", "indicator--f617e8df-11f3-4176-95b1-0449f9353109", "indicator--9c98aca1-9679-42a5-90ed-6726e89f5603", "indicator--f5b685a0-9c1f-4e43-ad79-1f4d2c29e264", "indicator--01deaa99-240d-4de6-a874-ca9cd20ebd38", "indicator--127a5a2c-8bdc-4908-96f9-43a74c74e5fb", "indicator--60d4b175-37d8-4e97-bc6a-99587deca4cb", "indicator--69836211-1917-4398-b255-580c93488f30", "indicator--cb600def-32f0-486c-ac14-4f836d7a80f8", "indicator--404e5a3b-168d-4786-af40-86b7775406d5", "indicator--e7b2dcb3-704d-4c31-b2e0-091e2c77061a", "indicator--082ac93e-95c3-47be-be0c-ee702e8ecff0", "indicator--40623d16-7eeb-4b30-9a9e-7e263580539e", "indicator--6e48f69d-b836-41b0-baa3-e2a38a6dd3d5", "indicator--d050acb2-6cca-4125-b1a1-b287986b81cd", "indicator--d06a8be2-d7d5-4809-b1b9-09c1bcfc9f0d", "indicator--78996ca4-ea43-4790-9ad8-fdb1ccd02e89", "indicator--d2f82efe-853f-470c-85ad-29ae3b9f5111", "indicator--e69f27ce-20cc-457e-8c03-4cd6ee659bca", "indicator--45aa0fbd-19c7-4338-83b1-fe8073bad764", "indicator--436cfa22-41b2-4fdb-84d6-30a42cd73228", "indicator--74b50f8a-e701-43f3-93cf-0d7efe9b8aa6", "indicator--c4395dcc-1324-4cb5-9c7c-33b41bf81133", "indicator--67e02001-c951-44b5-9eab-db6fcd5bafce", "indicator--a9fae0df-2d03-4029-a44d-bb5469596212", "indicator--9ffcee27-8ea8-46f3-8b64-589754d9ddd9", "indicator--8e6f1893-fe11-45f0-8476-80555def2653", "indicator--8d0348a5-b7c5-47e7-bb3a-1309ee1dcffd", "indicator--b4a43506-e44b-473d-b87b-3c2d69eaa4c3", "indicator--3c88fc70-5ff2-46c0-a30a-ed77924fad5f", "indicator--b19e96cb-5b25-48a2-978e-82af1ce0d1c3", "indicator--666141a8-be06-4833-b8cf-894964065c67", "indicator--b5647a8a-ac82-4bef-9cad-13a2aee61832", "indicator--a601185e-afa5-485e-b83d-08ced7b7fb08", "indicator--31884f56-cb09-4a5d-91b8-c6a47cafa983", "indicator--f8c4e0c7-f317-4607-8423-77da46ad583c", "indicator--099c9efc-1f40-4f1c-b631-51190c6fce64", "indicator--1997be88-b6c2-4f25-b0db-1a88106718d4", "indicator--d7687350-4bde-475b-81b9-663566d7db91", "indicator--bb87bc79-deb7-456d-9883-b7c28048e7fd", "indicator--95c7d911-fe98-43dd-ab3a-fe4388350b3a", "indicator--e98edb48-425c-4b7f-a7af-d1e086d11425", "indicator--e6832d52-5dfd-4fa4-9a09-1afbb0854316", "indicator--c6c67c02-0586-484f-ae6d-b0dd1b28151e", "indicator--0589b04f-d631-458d-bbdc-fe6a86ece37e", "indicator--a8a1342e-9471-472b-ba8a-6e4fa317550e", "indicator--9dd90a95-3894-46cc-b3e7-5c3fd77ca5ba", "indicator--5acaa187-e214-405d-94ed-42069acf49e4", "indicator--f8113865-90a7-4714-9127-af587a942203", "indicator--67681dcb-888f-45aa-925e-7d59e5ea4829", "indicator--dedbdf79-925f-4d83-b521-45c8fb1b817b", "indicator--a75bc221-0cac-4d43-be4a-3d83ccc81ed1", "indicator--c3f9a621-f938-4ec5-8f78-207dafdad6fc", "indicator--143437fa-3f4b-4f0f-9ea8-8d521518ae8a", "indicator--d4aa5bf3-2c3f-4dc3-995c-baccc6c3695f", "indicator--1a7a8e42-67e2-416d-88e2-5c9d79e648ba", "indicator--a960a7c6-928e-4e9d-9454-3496512e88ea", "indicator--85392065-866e-432b-8a50-46ae6537d098", "indicator--709beca6-fa46-4905-9806-f6d60591cf64", "indicator--d293a9ea-a30e-4645-8f78-1709bf777a83", "indicator--a876369e-83f7-4e36-b0e8-e605c7dae17b", "indicator--950bcb87-3f68-4fbf-965c-da9d2052d476", "indicator--8564c3ca-84bd-4fde-b68a-b949dc2b5dd6", "indicator--492b83b9-db01-470d-a262-9a2a00b92e1f", "indicator--6397f23f-b18d-4ebd-84e5-3283d6003c71", "indicator--8ec74c8c-7c3e-4de0-a8f6-004d62f6ae8f", "indicator--7d72a66f-c828-4c5c-887c-b094a3a54bdc", "indicator--89e8da6d-8e7c-43d5-bd19-dc73a48d1a83", "indicator--23efe016-fbfe-4ef3-8182-e082315bd17e", "indicator--293639a5-8b2f-4904-8ad5-a3e7248f03dd", "indicator--b54990d3-1337-4aef-9478-7554a0d456fe", "indicator--5d09526e-2746-4e05-9db4-f54930757f80", "indicator--da63fb9d-2014-4b7c-be6d-1eb196d16bf1", "indicator--1f0331ff-856b-44fc-9df1-e1c124384539", "indicator--56cf5479-7f1f-4232-b241-177b45b7ced7", "indicator--c05e5235-cb1e-46c0-b48f-9b439750e9a8", "indicator--b3226cdd-39c8-442f-8a2e-0a81098dd8bf", "indicator--15f7c887-cfbd-42b3-96b6-9ca1d23257c8", "indicator--09ffb862-515a-428a-8a82-b600d4253855", "indicator--4e9e4fd3-d019-4340-a2f3-69bb7ef61465", "indicator--cdbeacd9-513e-44e7-b325-0647ed8aa6ce", "indicator--5c61a89f-53f9-4cbb-b05a-e7dd95da4234", "indicator--caa73c4f-8448-429d-bd67-568bfcc73686", "indicator--2b05e16e-fc0a-475e-aa5e-cfbb7764827b", "indicator--ceb21687-d4e3-4d4c-a47f-e14af143429d", "indicator--68877b88-424b-4f92-801b-63938a8adc09", "indicator--9ec3acc7-56c7-4928-b427-68b41017f24a", "indicator--756670f1-3076-4e11-a919-d088b6edefbd", "indicator--f9ac02c6-d5b9-42cf-abec-e5a811f905d3", "indicator--b6172ce3-aee4-4814-b0c3-a2dac0ac5f30", "indicator--54b5cf7d-10d6-447b-b157-dae67b336b20", "indicator--cc5dd373-9436-42df-a62a-fd998987b623", "indicator--9e987ac2-2789-4db4-b753-25cca5a12ff5", "indicator--acb8606d-9ab7-47ec-a79c-36f08e569797", "indicator--c3523404-7989-4902-868a-ca1d2a96375c", "indicator--0b1062a0-9603-48fe-ac70-76813a234b29", "indicator--03fe6dcc-f349-4ee1-95f7-4c8e77f5556f", "indicator--3e68a5f2-4d81-4198-9b65-356c1953f0c6", "indicator--0f280318-2268-4b4e-89ef-a3910ea3dd5e", "indicator--36a26da2-2cb3-48e0-a01e-413f81e6ebb0", "indicator--5c6607ab-e87a-4977-8e4d-5d213b155be5", "indicator--97a5a2eb-2488-4254-b144-0b41afa9b4d4", "indicator--d2a8f8f7-c251-4f37-9ac6-e3ed73833a28", "indicator--d38b69dc-adc1-4fea-a6f3-f5f92df2d5be", "indicator--5f1f05ee-93ee-4f03-8921-c406e541b756", "indicator--6cd9f1e5-9be7-4464-a8bf-2924f3c430cb", "indicator--41eed438-b815-4f53-95ef-1b3d98cc23be", "indicator--52acae14-8577-4c69-bb0c-901bbd550627", "indicator--77417390-4c89-4ab6-b85a-d65f132ede38", "indicator--4867e3b4-66ec-4e6c-96f5-75c3fa4858a9", "indicator--a03fe69c-5cfd-48ff-8259-f43b2c724385", "indicator--d279205b-7f44-4811-85ed-ac6ee3bd4ebd", "indicator--45ef304d-a189-4bfb-bb51-e4e18e7f4f0e", "indicator--4424bc70-02ef-43d1-bb4c-92d45acceead", "indicator--8c776110-4355-4117-8b3c-1d92cef027f6", "indicator--05e963de-e0a8-49c4-9a04-f22fd0dcbadc", "indicator--6daddaca-2a55-4088-8f84-56c82f43fadc", "indicator--a3e9e0cd-4282-417b-9578-ceeb4c214517", "indicator--b680b2bf-30ee-4b1a-8f2c-e78612567b49", "indicator--f8836ba2-11eb-442c-a6f0-e8ca7cc68979", "indicator--41dd3512-f55c-478b-b012-17fa5cdb6806", "indicator--9226fd6f-32ea-4350-899f-4e45e5b1494d", "indicator--e6a781b5-1461-4808-a47b-a6e07f997fbe", "indicator--e8a23113-8d9f-4ecd-b403-400fccd98d40", "indicator--2bc0fbd2-a3ed-4c8a-9902-9d7a0b72301f", "indicator--08a66f20-9c66-4534-bc3c-d400c8bbda80", "indicator--6b06c0f8-29c6-4269-a3ea-4de0a2249e7b", "indicator--3e2f0fbf-b735-4d43-9f77-6ee2ec72398d", "indicator--24135bff-39f9-4f5e-819d-8c877db5818b", "indicator--6c3b385c-e979-4bc0-b74b-fa2c21276dee", "indicator--8dbe1bbe-67ba-4dfe-bd18-bd95b416219a", "indicator--11ba839b-9893-44fa-9a86-2fbe98f9f2fa", "indicator--64096c6a-db54-42ee-8c26-2df768c03cf3", "indicator--3a51c561-283d-4bc3-b7ae-fdd95bb38b31", "indicator--31310236-ba7c-414c-9e9a-fa45a5036a6e", "indicator--0ebb4f80-14c5-439b-9f63-e3d1af1a91fb", "indicator--05bbb4bf-a686-4ee0-a7d0-e003889088c9", "indicator--d31dd6aa-416b-40d0-9f90-4e1bb4411ee8", "indicator--c32c5af1-22b1-49b3-a637-82ddf091e253", "indicator--c1ed6983-8df7-42e2-8ba6-d6d96f60ecc3", "indicator--2518032c-0b6a-42b7-956e-79a5f503c713", "indicator--f63ccc94-3ee5-46a8-b2c0-a4829c812563", "sighting--7aac9fdf-84f7-4a16-9eb8-3b7b30bca68b", "sighting--0e5223aa-0828-4457-8b0c-1f4238c31cea", "sighting--356c0ff4-6dfa-4e85-a1b4-ddb00ad6db92", "sighting--97a035a0-fa34-4823-a182-a88b41dee6cf", "sighting--27c7fd8f-af91-4540-921e-1c25df108488", "sighting--2ddfe37e-573d-43ef-9a32-0a67fb063574", "sighting--167b0c9d-e287-4b62-bb8c-431be40f5e5c", "sighting--03c1c5b6-6353-4752-8e75-50cf63e81496", "sighting--4ace7bc0-bda1-4a5a-9027-7b225ad693b7", "sighting--b34b1c4d-bd5b-42ab-9765-71f6a1fb7596", "sighting--834a6fce-d157-4732-a816-fe6a12eaae5f", "sighting--287f4c1d-cf08-470f-a330-beccd88b2025", "sighting--597359db-6dd0-40a3-9bf4-f29ce679f814", "sighting--a43fcd94-be75-4c41-8051-d83c83e1abdf", "sighting--7be363d2-ff42-4afb-ac98-852aaa5f9de8", "sighting--a9e61a8b-fb48-41f5-ace4-455582e93e99", "sighting--fdb1c7d3-8608-4a1b-967d-38d06662cb47", "sighting--d47851ae-0538-4c7b-b416-ec69e32030ca", "sighting--38c39b90-cea3-4606-98fe-dc80c70b65a1", "sighting--1e5892df-9256-44ce-bc37-a16657175253", "sighting--f556cb57-e381-40e7-84cb-001ba79b49f2", "sighting--a377d40f-ffcf-47fd-ab8b-cd429aee54b9", "sighting--e9df59e3-e5fb-40e8-8a6d-f89fb66f6cfb", "sighting--37a40c06-08f7-4c41-a5bd-596bbfcdd327", "sighting--a89cc54e-7c65-44c4-8664-225d66665d91", "sighting--89bf1fc2-2d3c-482c-8df7-0b3a2f51fd86", "sighting--be593418-b051-4463-99c3-d45e8d4cb3ab", "sighting--caeba53d-399f-4432-9c0a-51c0371a21e1", "sighting--387cbf30-cc01-4f07-aef2-1aa5d1e5bb30", "sighting--b845c15d-90cb-4f05-8e39-21e755562627", "sighting--80173f84-2b6b-45f1-9196-b0469daca16e", "sighting--bb2f220e-8064-4889-a40e-21ab32e6ef54", "sighting--87feaef4-ad0b-48de-b1b2-8a1fa58ea2af", "sighting--827831f1-2fd4-498c-a905-ce9be4385d7e", "sighting--8edef428-1226-4f93-87be-3dd743cbb587", "sighting--cb2b1d17-5bab-4789-9fc0-2e2bb101ad44", "sighting--32a3ef41-135d-4532-9e5c-64d16c623273", "sighting--379a55dd-c489-4d9b-8abd-19869426e25a", "sighting--bc914954-ba03-49a5-be88-1e6bc603d731", "sighting--ed09cc5c-01d9-4a1b-9f30-320a59fdfe63", "sighting--ebed1e4f-e06b-47cd-b286-7f915b9525c5", "sighting--d6d326b9-81cc-44e1-8f54-eeb6f168b97d", "sighting--82f59f6c-a809-4d0d-bddb-c933c0138e7b", "sighting--e5df7bde-f9f0-4ac8-88ca-5588138c353c", "sighting--c62714cc-4912-46d0-a91c-9dcc30050339", "sighting--cdfa6a51-e3e8-48ee-b5e2-2ce5be05e440", "sighting--210917a9-c839-417f-9d18-ddd35723a464", "sighting--1870b43c-4c14-45c4-8969-11b478a702c8", "sighting--74647a77-0517-4dd3-b8c2-b8c63ec1e392", "sighting--8a8ed934-071f-4f21-a1e5-ea8c6c2e0c59", "sighting--e573cf8c-f4c7-41b0-a811-8b164c76ab15", "sighting--2a4eb6e0-8b25-4d16-9464-163241c62dca", "sighting--70a454c4-70ed-4ce6-8bf1-2e66f21bbeaf", "sighting--d52c0107-e7c9-4e7e-b83d-2aa6eeebd36c", "sighting--84b74260-d458-4124-9d07-b98247a3de2c", "sighting--ffe8dea3-7436-4934-852a-7dd915007139", "sighting--1ba3302a-d358-45ca-bed9-c2d35a2a7a40", "sighting--a83e4c40-cd26-4ed3-9494-c1eea6e1fc8f", "sighting--4b45f8ee-be83-498a-b91c-ec33b867cf5d", "sighting--74ceb824-a54b-4f3a-b27d-6f9b3b6c1f12", "sighting--da6c429a-7047-4177-97a6-a35b43e8e236", "sighting--3a49b78b-8afb-4a23-a42e-b9833696f96d", "sighting--6adc2065-e85e-4ab4-871a-5c9d35842d1c", "sighting--cbc64f19-be2c-4451-a901-c40554ecc633", "sighting--59652595-a7dc-43d0-9dc3-7f38e866309b", "sighting--7c56e5b6-fdbe-4e68-950f-ecb863d9b7ef", "sighting--77f695e7-faeb-423f-aefc-635dcde8cf0a", "sighting--6a40f696-e46f-4cf9-8c70-e8701374adb9", "sighting--22aaff1f-a096-43a0-bc26-d2ab3b21a167", "sighting--4e8ba35b-a9e1-49b5-85a7-cd7bf630865b", "sighting--9e1bec8c-b9dd-4333-8525-6b135e92ee33", "sighting--a7fc27b1-8097-4b15-ae6a-77c6310ce964", "sighting--3ad65703-c0f6-4007-92cd-07085e3816a9", "sighting--69299239-c4be-4a73-b9a9-5bc3909b9cf0", "sighting--58de76a7-7942-4e5c-9b3d-433c1dcd3458", "sighting--86415728-92cd-4e8f-8ffd-63e72ca22c7f", "sighting--a122a33a-736d-4517-be06-06117d66c06c", "sighting--08644ba7-4dcf-4211-9578-c07590747275", "sighting--bcfb362b-ce37-4eb2-9f7c-adcabe2dbe94", "sighting--72bf42c7-a7e2-4812-865e-c21b8c88543e", "sighting--2ec36bb7-e5ca-410e-aa87-916a5a12f722", "sighting--87ff8c7a-dcd4-490b-adfd-04b7468b4643", "sighting--1fdcaf4a-1369-4f5c-916a-9f33565be36d", "sighting--52f8ce4f-174a-4a37-86c0-4343c3d5763c", "sighting--a1243727-7cd7-402a-b14b-a6b1aae8b5ac", "sighting--a947f194-44ca-4ceb-9b20-639555d437ab", "sighting--0c44f6f2-9df7-49dd-90c2-922fa8cf2d11", "sighting--fffe2170-a896-46c1-abc3-dac5e4032516", "sighting--c3f8d647-93e0-4123-9b82-e22cdc71fbfa", "sighting--f0753bf7-4f84-4958-9c84-d85305ac6830", "sighting--5ee31058-23c1-464f-b761-57a18a97e12a", "sighting--fe266a12-4119-47fd-bc3d-82224d51b642", "sighting--f578c08b-5b47-4b78-9ddf-2e075df3284f", "sighting--29472ba6-0a3e-4fb7-a8f5-6136d55c3d3f", "sighting--cc413356-f6fb-4c76-8b0a-882ee18e9d0a", "sighting--a4fa89de-21cd-45b2-adf0-147e12248da5", "sighting--c3ff7d90-d4d1-4f69-86ee-62591ce7e625", "sighting--cfafe586-c067-48ac-9690-126f2ce5f813", "sighting--37c2a668-c0a9-480c-8084-16c300e903a8", "sighting--cd24b71f-f43f-4d5a-8070-6c2f1db3d064", "sighting--e854673b-89df-4fe8-b6a0-450181b71bda", "sighting--fd303c7e-0d46-4acc-96ed-111962ef5416", "sighting--7ee05055-89fd-4ad2-bb3c-914a660bb0ed", "sighting--89e77961-fdf3-459e-ba04-47119c546fbe", "sighting--34d723f9-c0dc-4c8f-98ff-8c6cbcf6c7f5", "sighting--88c071fa-24c5-4f07-a5d3-c70368c38de6", "sighting--e307d516-5ff7-4fa0-b6df-2d7b7666afb1", "sighting--bba059a3-4b76-4434-a4ed-f0f174b71461", "sighting--97ef4f99-0d50-4286-bea6-b4e919993e42", "sighting--18baecb4-94d3-4bf9-8274-44b35fb63359", "sighting--c005d373-514b-4029-9268-a24c71fd5920", "sighting--b80f7c89-8ed7-41a4-b133-d24154972972", "sighting--f56e3184-fe3d-478b-8ac9-1cc8a0d60702", "sighting--1a2641e3-724b-4616-8833-2a9b76b5457c", "sighting--c4d922f5-68eb-4c5d-941d-c2679c321738", "sighting--1723eee4-f089-48b5-9736-fca1d9434134", "sighting--dfdb0f1c-2e86-4457-99cd-57499ccb1cc4", "sighting--43d64cfc-76f6-4fc5-a2d4-c996b3e51c05", "sighting--26ab1185-d30d-437e-89c8-1a99e7318297", "sighting--f8addb80-a386-4967-ac60-171fe6727852", "sighting--7f8d35d1-47d2-4af5-8c85-64d2f47f0257", "sighting--4ec73bb8-d790-4051-a708-ac1a9cfa73c1", "sighting--e6d41d77-24db-4b02-8039-1582a81cb902", "sighting--906ecd06-8786-4060-af62-39bfff93ec41", "sighting--5a02e45f-b166-41a0-9ab9-4974eda83cdd", "sighting--ed29f37a-48c7-429b-be40-b3266b216d86", "sighting--00d32d03-252b-471d-bdf1-ed4e2bb719cb", "sighting--0a042e48-e59c-4ee3-ade3-e63fb5a457ec", "sighting--80a86963-a86a-4c91-a41e-5d9d78da6572", "sighting--f36bf1df-756e-4e97-bae9-b5a789648f7a", "sighting--c02fa6b7-83a0-4e66-949a-196df0b15476", "sighting--14968429-bf50-43c9-946d-14b52334dc47", "sighting--7276f9c8-ca32-4456-b102-4d9ed7a3dea6", "sighting--ed63ff90-bc98-4cde-b1f8-ba96c3b827cb", "sighting--46e13486-f520-4aae-be25-8c42e40abf4c", "sighting--8b267cce-47b7-49a3-ac50-ac38f106cbf0", "sighting--ca5e3564-e711-46d1-a017-2e92fcf6bf85", "sighting--5cbdd5a6-1654-4a63-88ec-ccb951c95d4e", "sighting--1aa18a93-24f0-4a86-9741-f2f030754da1", "sighting--e1d601ff-31f7-49ab-99ba-d25ef22dbd95", "sighting--6ca8578d-267d-4606-a8d9-80846a3ad090", "sighting--11ae9bfd-5b20-4c36-bfa9-4be1d03e24d7", "sighting--cd057be1-459a-4a97-a120-bd01ee940179", "sighting--0bf2fb94-5f20-40a5-8e0c-0a110a21fa0b", "sighting--05d4115b-480f-4f3e-a7d3-83178faea535", "sighting--7c928299-07dd-4503-9bf3-55438869246d", "sighting--c738b3d6-ea96-42b3-a8ab-1a1b762aebc1", "sighting--f0e4ecbb-a7c9-4427-9b90-1fa3e36a7e91", "sighting--9320d12e-f7a0-4e8c-a3f4-665aa72e8c88", "sighting--3ad103dc-9d1c-4695-9c36-65bf32a2ed7a", "sighting--435efca8-c3ce-4453-997b-ccab1566585a", "sighting--394ceca2-0a76-49f2-b98a-13440ac5ea03", "sighting--3a9321e1-4035-48ce-a0c3-609b55e98007", "sighting--c11f53bb-87ba-4409-8390-e13532ad7204", "sighting--7b9bee99-9753-4401-91de-237588b0d5ae", "sighting--c923711e-8bdc-4173-9b7f-3f062bb1e572", "sighting--0ec72cc4-ee41-408b-92e9-054c392b7c6b", "sighting--5651de74-85a1-4713-86c5-927a994d4ec9", "sighting--7bc99667-b8a5-456e-af5c-4f7a0ece7ba5", "sighting--3e7b8427-bdb1-4ad1-90ef-e41c6a8a25e4", "sighting--f70c8b28-92a3-4580-91de-e3fa42cb1552", "sighting--c877e432-0556-405a-baa1-30d86b492814", "sighting--35e1cd03-190c-4826-acf3-16265317b6df", "sighting--dd3e3c33-ab7f-4f3b-aa7f-7a48684c3015", "sighting--b05059bc-2353-4942-b522-958a55573455", "sighting--41acf30e-a5ca-48c9-a9bd-9533323e9725", "sighting--787917b2-20d4-42dc-97e0-4b741dd40d86", "sighting--261a0f69-eeff-4b0d-a949-bc1ac1ce652c", "sighting--6c43c4fc-04fb-4e92-8fc5-72dc4671359e", "sighting--29dca27a-68fa-4f7c-8411-e52103d080fc", "sighting--1410bc5c-8e97-46cc-a4d8-a0398bf264e7", "sighting--8ec2cce0-663b-4353-9e34-6bd207b5bcbc", "sighting--f8de2aeb-71fc-4a3f-a408-4b963f5a0cd4", "sighting--ce2c66e8-ca41-424f-a0c7-66609e7e0898", "sighting--3302698c-818a-488e-acae-876b1b021a14", "sighting--4cc28b61-df9b-4f44-918b-eff13d150491", "sighting--5ada2d08-0c8f-445c-b001-126f6182331f", "sighting--97468a6b-e22f-46c7-988d-8d0f03b27c69", "sighting--a5cbda5b-43aa-468c-91c6-bdbdc41eb69c", "sighting--b6a4287f-2332-408d-9d1a-1ee1f2e4f044", "sighting--67c46b06-a8b0-451b-8030-889e56973fea", "sighting--326ae737-23c9-4fd6-9ba6-52dfaf75a282", "sighting--c48266fc-6b67-49ed-a100-97117ac621dc", "sighting--743e7236-0c70-4304-85d7-b3b97c979d93", "sighting--4db460c1-bb9d-491c-9b2f-bf0a4fe6d201", "sighting--c220a4bb-0cdf-49e7-a905-9a75004b5e66", "sighting--d3c17d1e-cf22-4bcf-b7a4-d877e2346904", "sighting--1b7414c3-7b79-457a-bca7-44d4be6757f7", "sighting--6dfd574b-7691-4550-9302-25b77a347637", "sighting--a6d834e0-6107-4730-acec-2f5c22deb5c9", "sighting--b7641fe5-0188-4c5d-bb93-177516dc6f8a", "sighting--d872ba6e-6a35-47b3-919c-2e0ee7ea046f", "sighting--460fd667-36b0-4cd3-ac9f-91bf655be188", "sighting--ac7e690b-4b49-44b2-8126-1065ed0af87f", "sighting--3e91d954-c088-4147-8b78-514d0f981d70", "sighting--04153186-948d-4585-8458-c791a1b12918", "sighting--880ae8e5-1296-4a38-8751-0ed10d7ae186", "sighting--01ef35f6-501c-4f86-95eb-aacff11c812f", "sighting--fa7ad6e5-efc1-4c7b-bcbe-c0b48005bd25", "sighting--298c1b98-dc12-4772-87b1-5c67d50af497", "sighting--9be6b348-f51d-4efe-9464-635cd0d0888e", "sighting--fe149635-f8e8-4eb5-aee7-fa7f26999457", "sighting--37d871d7-b144-4a8e-824e-62af0cbec7d6", "sighting--d4afbaae-ef8e-4f81-a0d4-7d514c6162c2", "sighting--5ec2b2cb-ece6-49b3-b9bc-5745a372bdc7", "sighting--cbf43c99-e612-462e-9b66-948f3fb7b4c1", "sighting--aecd6cdb-9fd6-4a7b-bef8-f5ec18256d60", "sighting--2066fdab-4e24-47a0-b133-e988133ecf75", "sighting--7edad2a5-ba91-4efa-a2d1-2b841e87cdaa", "sighting--a6897154-a296-493c-bbc5-f4132493d811", "sighting--21a45443-72ca-420e-aa2e-48ee6ae68d6c", "sighting--5328b40e-f3f1-4c94-a68e-61ba9fec8607", "sighting--b0bce7e1-a5f3-4f30-9358-2b6ad5cb962f", "sighting--a7a8721f-888d-4eee-a770-50615d5138aa", "sighting--21c2bbd8-8368-4b5f-b51e-0377b9c2d450", "sighting--213b5978-0e98-4bda-84ef-dd864b0f082f", "sighting--f88fa420-dbaf-4c67-88f1-34d82f4aaa24", "sighting--c4ad1d81-75b3-4b69-a262-2cc602551fbf", "sighting--5bd09a18-c020-48d3-956f-940b2fe1b356", "sighting--f7549651-ed11-4c6d-b629-0931af76da7e", "sighting--8470e7f5-25b6-4b4a-a96d-8083460300af", "sighting--34bf0a34-f1cc-42ba-8799-71c8aad097a2", "sighting--9b6371a8-0207-4612-b974-7aca30a722c0", "sighting--6a1af62a-ff72-4927-baab-16893854c75c", "sighting--83e93543-32a8-448a-ba64-3015392e7d2a", "sighting--08394dfe-825a-467b-9a76-52220c471bd1", "sighting--bd796603-f301-420b-9237-0be2bf269c70", "sighting--e7363a85-9689-4aa1-adbe-5503b377e647", "sighting--92d7e87d-7bea-427c-9103-6181f7b4f6a2", "sighting--92f3e477-565e-410b-b2e6-c206b8853788", "sighting--a528bc29-f367-4ab0-abae-3a2a6d1a6c70", "sighting--51fce86f-97ab-4a9c-b04a-9a967de6a5de", "sighting--aa36ceb1-a64c-4323-875b-7c8e95dacb60", "sighting--fcdf9774-0932-443e-a3e4-7bb146737623", "sighting--23c96938-7e65-4239-8d33-cf0f25543dc9", "sighting--f64c7053-c398-4775-9d0f-ba08f97f0a2b", "sighting--d9910689-e8be-435b-b917-ab28111ab0b4", "sighting--2d69db52-9cdb-4798-8bcb-61dc184102fa", "sighting--7a499b08-4879-4d7d-ad9b-ec67c0648fa5", "sighting--a7ad0261-6106-4cf2-af73-baeae899d555", "sighting--0f993e4c-c01b-4813-9a84-96351db5fd46", "sighting--d520a925-4eeb-462a-ab0a-b22dbc30e088", "sighting--96d062e9-71b4-4750-bad0-517bf18c4729", "sighting--167eb634-6918-481f-9edd-a26704a46d04", "sighting--2dbd938c-5b87-4c21-a3c8-a221c8983c45", "sighting--420a1659-c680-4ef6-9413-a5d9e2e916bc", "sighting--c847e34a-fbb9-4822-b560-c17c612a09d0", "sighting--d4d91e62-4e86-4aba-8c4b-5fb79b3a8938", "sighting--706009ca-4a51-4079-ba1e-edcefbbb3f3e", "sighting--bdad87ce-1abf-4c70-9c91-83cb5cc6d270", "sighting--ef424786-338c-4438-b000-b0cba631f0d4", "sighting--03231514-3f06-4c69-ad8a-633aa38560f0", "sighting--2d2f70e9-e877-42d8-8189-a14899b6992b", "sighting--c1dee060-ea51-4635-82e3-4b793cd995c6", "sighting--583714e5-86f6-46c8-a0ba-6b60d4cf5577", "sighting--f6146531-2604-44ca-a1de-b8c4981b6a8d", "sighting--3fd9ebd2-c0cd-4c61-9b51-6aedddd40e04", "sighting--e5be60d0-0b22-4c86-8e5f-eaa8c38124a6", "sighting--43161c9d-988b-418a-a07a-f43aab776ae4", "sighting--f52ee817-b8b9-4671-bf62-0275baa45358", "sighting--9bca5afb-8d62-445e-aa3f-a1289fe0e062", "sighting--c96c7cc3-c8cc-43cc-b88f-d55ec9071b7e", "sighting--aae15b7b-5c41-4f79-a2bd-fb8ea1776dbf", "sighting--39a9155b-4bb9-415d-99d6-a7927906d1c8", "sighting--6c4e136c-dc45-45e6-a387-4fc1daa55938", "sighting--943fb7ee-b0c4-48b2-bdad-9f928552b2a0", "sighting--a1d5d052-9d28-4494-b4f3-90dc748e4611", "sighting--e8e539d9-1957-4ff8-8824-e4aaf4f0dc1a", "sighting--c53441f0-5a2a-4e53-9202-d02fd5e039c9", "sighting--f6d4e1ad-e15d-49fc-b0e0-5d7bde084a52", "sighting--f0dcc772-79f0-4e83-ae1a-cd927f130347", "sighting--ec834332-88a9-40d7-9420-ef5d700b8674", "sighting--95e5827d-2897-48ca-8e4a-3c99de22fd73", "sighting--f8a4fc49-eb96-4cef-b540-30a4eab75699", "sighting--b7825bfb-b7c9-4fa5-90a5-72dd88266567", "sighting--fb4bb7ca-9e46-4939-8bc1-d1d8d6bba6b7", "sighting--85e8d7ea-397f-42f5-864c-808d88edb195", "sighting--5e64d7c3-1b00-4126-8653-dce79108264d", "sighting--edd2863c-4a0a-4b43-bcfc-5edcaaba19d1", "sighting--56e22c61-ad5c-43e4-9eb0-0e3d1ff93351", "sighting--461ee289-de70-469f-a54e-f606503d606f", "sighting--7903e3be-84ab-479f-8aa8-5a05432c6f19", "sighting--c88f50b9-5f2d-480d-8e6f-8fa96babe46c", "sighting--0e1d3909-6326-42b2-89c6-8a36c1eeb894", "sighting--56734f50-bcff-4dd8-b479-32bd4b1eeb0a", "sighting--3de2bae6-9b79-49e7-9181-d13dc802f36d", "sighting--e62dd074-0f20-49ba-895d-d56982ee36d9", "sighting--b156ad27-8843-4a44-b3ae-b9330f817b7a", "sighting--1064d058-4535-48c3-b542-d077f670d808", "sighting--cc6a6d41-a1ec-463f-b29e-46497154568c", "sighting--b25d2b7a-c15e-42a5-89af-b10a5f177ba3", "sighting--dbda1136-a237-4922-ab10-3afdfa1f3b8e", "sighting--613c8701-1e48-4b49-a694-1adf401c8860", "sighting--7eedcf3d-16ab-4523-be93-23efb908fc04", "sighting--5be9337e-9fe6-483a-9ab5-b970c36a6c0c", "sighting--b1508a17-6de2-46e3-beed-a3551ff55d48", "sighting--5b39289b-0818-4eab-b93b-f1c841eb59dd", "sighting--9aeb642b-1191-4cfd-8908-f1296c8b6724", "sighting--79866748-21ba-4219-8b37-dcb8701d6a71", "sighting--89182485-154c-4866-b60b-8f526cba8d2d", "sighting--d1f6a504-edd9-4fd0-986d-a096f6d3fd40", "sighting--0267cc16-ec41-49de-a34a-5ef83dc70a4d", "sighting--7f83ea4c-2661-4665-8ce3-565926364c81", "sighting--61e2c5fb-f82e-4db4-b5dd-d70cbdb52384", "sighting--e0b8bc32-2270-4105-a1d3-4fda7eec1a47", "sighting--7058a1aa-655f-441d-866c-b6bb6f8d4e1d", "sighting--af00a3d3-0425-4995-aba8-87cc5cb7f1d1", "sighting--7876364e-8b92-4137-a5d0-d6b78f39e8b1", "sighting--2f2b1b1f-129f-4e4a-8215-f521b2bf199d", "sighting--8641f11e-6030-4f9d-98f3-ed9aad5908fb", "sighting--4fa95001-31ad-4a93-9ec8-58512bec141c", "sighting--97eccfb2-19aa-46a0-85ec-24aa83306e85", "sighting--79a917a8-cfa2-466b-9d9b-3b4a5061f920", "sighting--6f3164e2-bfbe-46bc-85f8-c37748bf1e34", "sighting--5c1ad85b-9f6b-44ff-8f9b-acf0c390fca9", "sighting--65088527-c7ce-44ec-8387-2168845b2964", "sighting--abb68a34-d4eb-415b-b49a-35ecc3c4ed8e", "sighting--1eaf9d39-bf68-4470-8ef2-7ae27fcd166f", "sighting--3d11e825-bbcf-46b0-95c1-8260f35bd2b4", "sighting--cab03065-a00b-4af4-8b7c-f2310bd58812", "sighting--948586ce-99cd-468a-a24a-22df13c41aa1", "sighting--6d17edf9-9e15-449e-9cf7-bf1bb3ee1b48", "sighting--cb449f0a-d950-47dc-a0aa-fc211a029648", "sighting--01187a19-d2a9-40a2-981a-394bd7710585", "sighting--d09296d6-868b-493e-91f0-cc10d49e0c86", "sighting--2d29418d-d1e3-4ea2-8c7b-e0b87bece056", "sighting--39de7c8d-e814-457d-9b80-137538173cc7", "sighting--9718ad0d-9300-480c-8f9c-c539bd48a09b", "sighting--edbcb22a-af96-435d-ac00-fafc03b9cfe8", "sighting--a102dcb4-7601-4b0e-a78a-9e33e5042eb2", "sighting--39bb8e4b-7989-49be-b0f3-e159256132aa", "sighting--aea0d18b-608c-45f4-8c3f-24b4d17de12a", "sighting--2ad9e139-61e0-4ca8-8bf9-fe2e793289b0", "sighting--87a7f508-a5e3-4229-926e-140236faf19f", "sighting--3931cafe-3b96-4020-9255-3d92635beedf", "sighting--71c422eb-bcfe-4950-bff4-a57a9c277087", "sighting--f877b95c-b2e5-4d88-97a7-3952ab3d8240", "sighting--f583ed66-f708-4c65-a41b-ec7d33199d3d", "sighting--d13b5718-bc4e-4d0f-81ae-d13deff07532", "sighting--ba6cc1d5-2eee-46f0-b46b-b593fba07faf", "sighting--61e2a52b-db14-4575-a3ab-b7d042ebeafc", "sighting--cfcfb098-882f-477b-a4aa-03e07323ff3a", "sighting--58d0c041-b87d-4409-aa6e-ca632adcf1b0", "sighting--0bad2cf6-59cd-422f-9786-c138206d1f07", "sighting--dceb5006-2f1d-4bca-8c52-4a7c79c58917", "sighting--a97214a5-48f7-4268-8a20-ea63826d2f8f", "sighting--c9bb0eab-6cb7-48b8-8f71-131be387dc98", "sighting--63d41de8-f8b9-4c23-b16e-4310b59de22b", "sighting--357fc1d0-d57b-465e-8154-2e990340e9ff", "sighting--9b5c1483-e512-4bc1-8fdf-64693b14bd1c", "sighting--e94e85c1-02ca-474e-9ce7-a5c934957c60", "sighting--6c32a7c0-596d-4986-9a78-899a94ba4384", "sighting--db6cb700-20bf-4b32-8964-6fcdd4537b78", "sighting--673b8007-8040-4588-ab9c-4a2a08ff81db", "sighting--5d907085-4be3-486a-a6c7-806a247dd8f5", "sighting--e08ba351-9564-40fa-9f9d-42d1c50fe96c", "sighting--33ffe4cf-72b8-41de-be8c-d5d3dae7d93d", "sighting--373b5a6b-d798-43e8-8dc0-6c5da7663d4e", "sighting--f7477725-19db-486f-901f-fa68c630cc14", "sighting--1b14086b-d9d2-4746-b66b-49f60a53a722", "sighting--b72f7a8e-439d-40dd-9534-5b1d0d922768", "sighting--d12ebeb7-036d-4a06-869d-ea6742178921", "sighting--f8bd4bca-7d9f-4624-9934-5f3717da256c", "sighting--de07329c-5d9b-4c28-a130-87d807eedc22", "sighting--9ed25015-7e5a-45b0-9152-c898ebe9024c", "sighting--e10b9f12-ef60-4863-96de-a01243e48884", "sighting--5cc3541f-0704-4a0d-869a-25efb01bd94e", "sighting--3f766720-ac5e-4749-9e2a-70b0b609481b", "sighting--3b2b4558-3789-4ef2-b24c-2ac7bd7a9125", "sighting--85bbb9ac-a6bf-4222-8e03-28b6bd9d247f", "sighting--0476ec77-bb0a-47c1-9ead-e894af0a1336", "sighting--479164a1-9083-4ef3-b69a-a0f21b123ec6", "sighting--8130d5ad-14a4-4f7d-bbd7-16eea1ad0e67", "sighting--f639bc43-e2e7-466f-a547-f7d9d0513d94", "sighting--2bc5761b-7056-4436-ad64-1394733c4469", "sighting--6d017cd9-248e-4bc1-b2af-d7644e8d104d", "sighting--1a90ad0f-3ace-4d2b-89c2-63176b2dc01e", "sighting--4c21aa7d-e1cb-40dd-b34e-563144ce9b71", "sighting--0e428078-0dc0-46be-a5eb-cc4d43016560", "sighting--dae09d0a-08f1-473b-9e73-09098e65e1dc", "sighting--f16c6c7b-24fc-4151-b858-9833bdb0a7e3", "sighting--07b0fa47-4e74-42e0-a98f-82deef253a5d", "sighting--2680f494-df04-40a0-a295-9f1668381b8b", "sighting--01e20a0a-ed31-4783-bcc6-803b6042dcc5", "sighting--731237c3-2f91-4e90-a46e-68bad4f05434", "sighting--bb2af7e3-6ea5-4746-a561-506faf2c8387", "sighting--453f1a85-0593-47cf-8ba5-e3251e981291", "sighting--bbd2c5bf-ec7d-4d83-872f-c61a575a33f9", "sighting--9a6e6039-51f9-418d-995c-a2dabf54ce3b", "sighting--18348d0d-4816-40eb-b6cd-2fb6c0723264", "sighting--b6621371-fd12-4bcd-828b-08bcd7354fa2", "sighting--5f48a901-616a-42d7-80a7-b9efeaf3909a", "sighting--c1bdd84e-8c74-4b61-87af-cf9a00a17a4d", "sighting--ac7ba6fc-5ffd-4ca8-8208-ecd7518fbddb", "sighting--a0b30af2-8695-4b8b-b80d-6834c1a7ec0b", "sighting--2e8e4285-822f-4625-9ec2-ed9114291fea", "sighting--fe041861-1435-44fb-8642-c377e7871631", "sighting--ddac02de-5b07-4735-9ca9-65e45578b377", "sighting--72b95da4-d7da-4de6-9f26-ae506973e8d3", "sighting--32fec251-cda2-424a-b598-9eb290047cb7", "sighting--fbaaac82-9353-4deb-97be-049d6cb0de68", "sighting--f90290b4-618c-4731-9d2d-758eb7f6007f", "sighting--9ccce04f-be50-4c12-a69d-02018bb7e761", "sighting--3a3e82ea-e9c7-42be-a6d7-b24b9d57aab8", "sighting--9f463520-a71a-422e-87b2-bff60c0ded67", "sighting--affa58a7-a3b1-44eb-9e1d-6df712704950", "sighting--aacfa498-ed8a-4ce3-9acd-66aa977d75db", "sighting--1ceeadac-f8db-42b0-896f-fe2205e6f317", "sighting--0c288b67-0454-4b1b-b421-e2ddb2d89b4e", "sighting--fc13287c-9317-4e5e-ba43-664084cd203b", "sighting--a9588729-c201-4595-bddc-e1e03c5aa620", "sighting--11e3ec7a-7839-4307-956e-ba7273d1c09e", "sighting--d7c73603-c24d-445a-94d9-42f514356ec3", "sighting--16426760-6276-4365-8b9a-675f21afdd6e", "sighting--eacd6044-8c6c-4e08-940b-95d1f098c892", "sighting--e47cc46b-af75-45fc-b56f-7a9477ae656b", "sighting--7a8a05d7-94ed-409e-88d7-309d4480b2d1", "sighting--05b0ef48-4e48-441b-88ba-aefe0f522f08", "sighting--9aa4f16a-9f0d-44ba-af01-512cf51c74be", "sighting--4786a401-9c3d-448b-ac23-0bd26f777160", "sighting--c786a27e-272d-4314-82aa-34dee89e0e01", "sighting--1933fad5-9a9e-4df2-a211-b1ab21c69f73", "sighting--1d31c351-22d5-401d-a5f9-c2364878da59", "sighting--eae93877-7cc2-44e0-866b-210ce5bb6d1f", "sighting--fcfb97ea-9d78-4037-bce0-0ad03c51c24a", "sighting--5e33dae5-42b7-42c7-b004-f24f54f85c0d", "sighting--6a23157b-22e9-4ff6-b78d-a047f543f5c1", "sighting--920d7ddb-ae25-424a-a954-1663f8e08d9b", "sighting--612a1b2e-a3f9-4036-b1c0-60e3ba7a60cb", "sighting--a4681ef8-9805-447c-b6b4-a45b42789e69", "sighting--2d4113e5-25d2-410e-90fc-cad4b0915d4d", "sighting--aee12000-1144-4cd8-b43f-aa1ff6ad47ec", "sighting--ae62bffe-cd62-406a-bd6e-3a2df4f87c46", "sighting--f1b65196-f55b-42e9-9c01-ddbeba9712b5", "sighting--537d1f47-474b-4103-9215-66e6f9983297", "sighting--2f49a43b-41cc-4354-a0a1-f4b6b163c38d", "sighting--c78cf919-d98d-452d-88bb-2b436b316a00", "sighting--69077348-b593-44c3-9581-3114710eb765", "sighting--074a72e8-1159-4796-9f82-d34c0b9162b5", "sighting--0a64f831-8c6f-4ba1-847f-69b2823203ff", "sighting--82f8830d-34ef-4804-a9c7-bfb77abff7bc", "sighting--247e61ab-37e6-45d0-b567-219e0f0e6ed1", "sighting--5ad39f73-22f0-4708-a0ca-d7d15fa45bf6", "sighting--bd844816-4a70-45b4-9de8-76fca1ad9ae1", "sighting--cbb64dfc-37c3-42c8-ba40-942e88609d91", "sighting--a54d4cae-4456-42d0-aec7-eec041b79980", "sighting--4664ce26-46c2-4df6-b18a-bd0a35034109", "sighting--3ad10e96-6a0a-48eb-b99f-08970d58f3fa", "sighting--41c914df-1ec2-403b-9a00-573aee7b9201", "sighting--df3d6406-21ef-4bbc-93e6-50a97937d61b", "sighting--f2019b66-b42f-4981-bb30-73b19e543ab3", "sighting--7a90edbc-6855-4b18-aa27-3127b1415f0b", "sighting--61f5fb5a-a84f-43b9-ae82-df4eab140a1a", "sighting--dea776ba-b076-4c16-8e73-077f58f0a350", "sighting--103464af-1e5a-4366-8db4-7e3e53845015", "sighting--59ab352b-91b6-4b05-bd09-b73bd6b8fc87", "sighting--412bbb3b-b6fc-481e-b686-580bf7714086", "sighting--4f10f046-84a9-4359-b2b3-bd9aa88a45fe", "sighting--2493d6f3-3144-443b-92b2-d77a4a26afb8", "sighting--c6f7fd9c-4bc4-47c4-a510-39154f1dc0ba", "sighting--546b1eba-3a65-45aa-bf39-f2585dcb53ff", "sighting--22027eac-5954-40e3-af31-77006ced9fbc", "sighting--d7a4cb63-7672-4675-a871-ffdd9a3749cb", "sighting--e6beb971-38d2-41e1-a0f7-bca98a00ac2e", "sighting--3da1947c-006b-4939-b204-3908d072fc2d", "sighting--959f05ca-8995-49ae-a292-322355d68c60", "sighting--7fb6df7b-44a5-4d3f-a094-871f3a1b81bf", "sighting--bb1be3ab-7b6a-409d-85b1-38bcdbbbaa20", "sighting--722ff192-bedc-48fc-9adb-636feac15dc4", "sighting--58e27fbd-471d-4c42-be4e-370cbb4c4d76", "sighting--2abe053b-fed0-49c6-9d50-cdaccb23ada5", "sighting--64b75f37-b93d-44a2-94a9-58bd61f0440b", "sighting--20b327f3-a374-46db-938f-a30c62d457bc", "sighting--bd0ab7a5-ec11-41d7-9f79-23d7d233681d", "sighting--0b2ec60c-a11c-4150-b9bc-411e81718a0a", "sighting--940a7485-eb1e-429b-a162-36390290d817", "sighting--de4cd5f3-aae1-4a0a-b999-fcb20dc1e848", "sighting--7f0256bd-290b-4ce1-8214-01cd559cc48a", "sighting--4d8d89dc-ad23-4c6d-9e46-3d065e912691", "sighting--c2f0a770-48af-4b31-97ad-963714fa4ed8", "sighting--aedc91fb-2a68-4bf4-8b9a-cc5510fc1f52", "sighting--ac2704fd-f036-4a09-950c-0692fe5c2419", "sighting--e9e44b30-098f-4e53-8f9c-04d17d021355", "sighting--7def461c-dd82-48aa-9560-41cc98ae948f", "sighting--c8a685bb-e9fa-4852-a114-81ffab84acae", "sighting--8cbd8235-29ce-44cb-9191-b33f8ed88e6a", "sighting--5cc3027d-b502-473b-95e1-bcbe36dd4c8c", "sighting--fb4540b7-276a-4b88-b915-c1b6bb83f72d", "sighting--85579e98-8b96-42e1-b941-644708868ae7", "sighting--b48ef410-fdbd-4822-9b67-172ad0247aad", "sighting--e9b639fc-a001-4027-8998-9114c5f779b4", "sighting--ed81c552-43ba-4d30-bb63-8f0d1708d231", "sighting--7cc65365-0994-4814-9000-ae8683024112", "sighting--d13d8a1b-eb2d-417f-b9d9-0a7b2107c246", "sighting--4a38fedf-b5bc-48ac-af93-103dc8e9d056", "sighting--cf269900-fdd7-4995-b534-061e3c8ef272", "sighting--028744c2-6c10-458c-a7f0-26a5f32e8b76", "sighting--98c016ef-dedb-475a-838a-115fc3f5f7c7", "sighting--b8412af6-2cb7-4960-a8ca-60241b97c893", "sighting--6ec82001-a46e-4c32-b4ea-1049bf46e737", "sighting--4c5faa2f-b09f-4596-9e59-dc2643f5bff1", "sighting--d25e556a-9224-44f2-b2c0-7bc2922ded3f", "sighting--92c80fc1-3efc-48c3-b930-0a9682178124", "sighting--76c996b8-5fef-4cdd-820d-7c2ae755b87a", "sighting--116b9155-ca46-41db-8428-0734dca88521", "sighting--711d1669-a07d-44ad-a3e1-b9bb3d0d41c7", "sighting--124c5879-1096-4ce2-a218-a7aac3c1efe4", "sighting--4f375553-0be2-436d-bde7-58b8388c71af", "sighting--bd524e7f-3bc4-4646-b1ff-4d4472a475b9", "sighting--ad4680a1-8921-4e84-b4b6-01962da05c3a", "sighting--f6885757-2032-4dbd-9825-d9bd1f7bad50", "sighting--9fffb3bb-de9f-496f-89ee-5d3f30433c12", "sighting--6891a915-b259-442c-94aa-8e059feca229", "sighting--9bccd59e-050d-49ba-a2e2-f795f6ac400a", "sighting--43a3f279-6209-4818-8eca-c1ab795b84bd", "sighting--4f336ecb-4ef4-49aa-a753-0e76428879a6", "sighting--6101cf28-8ae2-4448-bee5-f6f1777a3549", "sighting--9461f4d6-a91d-4123-a89e-e76e624255a8", "sighting--ff2062a7-90bd-49aa-857e-00c65e2f9fbb", "sighting--118b851f-19df-470c-811f-c3da1191186f", "sighting--2bf39b15-40d5-4d11-939b-78b74e9e7548", "sighting--ff69b142-916b-44e0-a1d6-4c7401c1af60", "sighting--fcf6b7f9-9e67-4739-93d9-7a731e56455d", "sighting--411f05e6-241d-4392-a767-ee20a0296b04", "sighting--d4622cf3-4157-44d5-9cbd-ce977333dd89", "sighting--48e488bc-f167-4c6a-a173-e8c90628ae78", "sighting--fda2c2b7-3dd5-400f-a16a-3e99ec53665d", "sighting--6bab9a51-d5bc-4da6-8a34-f8029ed3ae2d", "sighting--b0c28a1f-a25c-4584-8797-e088c3dfb570", "sighting--9ee303e0-16d9-431e-93f3-2033be9753ad", "sighting--33b2a154-518c-401a-b502-ffa1d8e031fb", "sighting--d98b9889-4558-4633-9f18-59ec4d28b757", "sighting--ef891eb5-b31f-410c-8d6c-ed4ccd0b8cd8", "sighting--fd866d33-92ca-4560-98e0-7332e9a24340", "sighting--4152afac-8495-48c3-b9c2-5e9dabd896e0", "sighting--ecf0f71e-40fc-438e-a21d-1a620f3a22ae", "sighting--2ca91b9c-56fb-443e-a247-7ecb515bd0b8", "sighting--dc37b8f7-7c7b-42f0-bd74-d62bcbd550ff", "sighting--0c85ee4d-def6-43d0-92c5-eae7fa99afc0", "sighting--b3095444-14b6-4f9a-a1da-2ced9d2db024", "sighting--ed4d4775-5c9b-4388-ae64-4ff77cd35a6d", "sighting--0edb02eb-cd44-4b8a-bf1d-4cb7bd134533", "sighting--f5e78948-6dcd-4f67-90b2-857bf6bb8d5c", "sighting--822f3ae0-05bc-4249-8890-9c95451d77d0", "sighting--4ef9b1b7-301a-4a8f-988a-c14f2c6c4cea", "sighting--c2f421a8-d02c-48d7-954d-62aec0848669", "sighting--110acca6-159c-465e-860e-ed8408397390", "sighting--88f4fffc-5e27-4d0d-891b-6b36909eb849", "sighting--8a614394-4969-4f94-945e-aea7cec59d35", "sighting--1d2b5d3d-811f-4af3-9da4-7a3f814ab0ed", "sighting--806ec95d-9f64-479a-a7be-2bc1a4efe9a5", "sighting--9352da23-93d0-4973-9e80-c07bb261c140", "sighting--ab9105d0-fc12-47fb-a12b-b2e9d13c64b4", "sighting--357b4811-0655-48ce-aa61-648d89b9d118", "sighting--56b2c41c-81c9-4503-baed-e7d6dd3df675", "sighting--0b5c87c2-79a9-4b1d-a922-45869c2d3525", "sighting--8bb6e405-d112-4095-8191-1de5d7e8eecb", "sighting--8e81eccc-ef05-4c6b-a7b1-33f14b998fea", "sighting--86ca1f36-08d5-4e8a-ae77-cfedbb58650d", "sighting--6bdb408a-20ce-4fe2-ade7-c2246cf47d20", "sighting--d1d83818-9361-44d5-9bb2-1e15acb80f21", "sighting--a631e943-aa2a-4428-8cb0-9356251d63f9", "sighting--c1fb52d1-3b56-4c02-aebe-44f02adb4845", "sighting--b80c0ed4-fa10-4277-ab8d-58da929680f4", "sighting--c87875eb-223f-492b-86eb-e68c98bbac08", "sighting--48d5becd-85db-46de-977b-c72d26593e95", "sighting--10cfc2e2-9dc7-48fb-b79f-9d737b4e2372", "sighting--f3a567c6-87c7-4ef4-9505-ba3bd9112c22", "sighting--997ae6fa-185a-4084-858f-5ab1849314e0", "sighting--faa543e7-ee2c-46ad-8adf-5fbdab8beb0c", "sighting--fc8db102-2d39-4319-b496-bdd370747c4e", "sighting--a316454b-aba9-4d82-80ae-20d175726b04", "sighting--868b783a-e755-4418-a371-e4a22f9eba2d", "sighting--4ed71837-6a72-4e0b-aa9d-96726b291755", "sighting--40bd823c-2dd3-41b5-94eb-79df7252a622", "sighting--b8e377eb-bfdb-4e31-a5a9-b2007bc3016b", "sighting--c69d6d2e-8e9c-40e8-8c9e-c4bbcc2f8b4a", "sighting--f27fb851-07b9-4d33-8cb7-1759275beff6", "sighting--f1d3b48c-35a9-4248-b103-c80cacf856a1", "sighting--169074b0-d984-44d4-8819-724ee0feb7e9", "sighting--2fee7cf9-79a3-461f-97c9-5dd0e56dfd3d", "sighting--93150b13-b6e2-4229-b789-e1bed66f19fc", "sighting--a61f4d87-f3e6-4a54-9a6b-62874e6bfba6", "sighting--5bef2a11-5478-42e3-98d6-1d2e6f2702f1", "sighting--c02cf5c9-541c-491b-8dd4-28fb6dcec397", "sighting--48f6007c-fed7-4f8c-9ee5-e4d3267c72be", "sighting--c963f3c1-6dda-4812-98f5-39486c90c2b7", "sighting--8bc76a43-6ba7-4644-811e-a846e01908a9", "sighting--0b3e6007-87db-4eb1-8707-d8e209b2b2a7", "sighting--9151357a-dbf4-4ca9-95c4-7bc1c9ff507e", "sighting--e23be23f-6c9c-4509-9944-b80de117335c", "sighting--24df0e74-b6e4-4dc2-8777-5534f0abbe37", "sighting--7d89a6e6-4e3f-46d3-82e9-5728bb0513d2", "sighting--ab1148e3-9e0e-4e77-87b1-89292ff47ef2", "sighting--41858890-2b21-4fbf-8a8d-280c50e8812c", "sighting--fbfe4b5d-ace3-4780-aa86-2b55d8fa35d1", "sighting--efe74013-aa09-4929-be39-0addb84d3d7b", "sighting--f1eb56ce-874e-43fa-bcea-e2eedb28112a", "sighting--7793a49f-f6ca-4e5d-8bba-f656317076c5", "sighting--bf4b23b9-9cb0-4ddb-8c16-8684d0bc7d5c", "sighting--d978f05d-6ba0-464e-bc8c-bd1cdd757056", "sighting--b5cc4ffd-370b-4b86-9ab3-74f3acfa7730", "sighting--13d25d8d-861d-43b1-8dc3-3884ff81c009", "sighting--cc67367b-4100-4d90-b69a-1cda7b112337", "sighting--0ba95683-bbea-4466-a603-508414feeb44", "sighting--e58db121-9944-4c30-86d6-e7c160fa300e", "sighting--b8ccf831-97da-40af-87fb-525dcf2cd57d", "sighting--edcbedbb-a957-4968-8ef2-eecd68852298", "sighting--0c693a04-5eff-435e-ac85-8ab4cae5f209", "sighting--b92bb2df-4186-4e95-a041-9ee26bf5fed1", "sighting--e26a95e0-b14c-4805-82d1-6cba688ca497", "sighting--1a9dda77-0746-4094-9c5a-14bda1da035d", "sighting--bbe0bf9f-23f2-4ff1-bee9-aed18758a8f6", "sighting--65001668-3794-4836-bab6-15f63039db67", "sighting--b9df2917-537a-44d7-ab87-341bdb38afbc", "sighting--bf08df9d-c128-4d19-b567-aa352e67aeb0", "sighting--539a341b-3f4b-422f-8d0b-cd3b245e5bef", "sighting--fccf8bcb-2cd7-475a-afbe-b28a89041469", "sighting--7c444105-147b-42ee-9469-7d6c2566bd2d", "sighting--ebf47e70-cb28-402e-956d-f5b4b84a9f36", "sighting--5911b23c-32c5-44f0-988e-ebd9e467a536", "sighting--503f53ef-c87d-4fce-93d8-269a94a8f6b5", "sighting--a4e44d53-3f2f-4c56-893f-26795fa7e5fe", "sighting--83aec8d1-787d-401b-88e6-e4a7a5cd3d80", "sighting--777a7695-ffb8-477c-8206-1b960ec97259", "sighting--c29a2faf-ddb3-41a3-9e02-9dda3f7ce421", "sighting--34649949-64e4-467e-94bf-ca7692ff8294", "sighting--f50d6a9f-d0aa-40fa-965c-7907f14e41ac", "sighting--f9252071-d24e-41be-8905-14b84a0e672c", "sighting--247da7c8-8c0e-45c2-9578-15186c0fa606", "sighting--67ffd0dc-799d-4090-91b2-f26aa321bf75", "sighting--0a779b82-543c-4680-ac56-f9cd2041c088", "sighting--42a14b28-e836-47a1-adc1-21dffb362715", "sighting--1433d7b4-ed79-4cdb-bd76-0d27e63326c9", "sighting--9dcc0b53-4fea-4338-826b-fd2d4b7f27d5", "sighting--49da4379-c6b5-4c3b-b5d9-71386ec5ac11", "sighting--876bf37c-0926-4133-8b6d-7df45d12a952", "sighting--46e1b858-20ba-4910-8c4e-a9f1030764e7", "sighting--d4324131-b261-45fd-a3a4-7af212a0c5d8", "sighting--0bfe0b9e-56a7-4ae0-86a0-396435887a2e", "sighting--1ff789e4-c788-4166-9458-4a7712de4e4f", "sighting--b4d345cc-fe37-42fb-b857-18f3f9cfe4d5", "sighting--002d6389-380f-42ac-a755-edad69f2090c", "sighting--e680be7a-d053-4b5f-bba7-c0b085975f56", "sighting--29859eb5-c693-4b9e-9cff-0858b616acc2", "sighting--0b9b95c5-8808-4d0b-948f-b2b6e357d8c4", "sighting--08e18871-23fd-4273-a370-eeaf4bc4270e", "sighting--0a68a306-4336-49ec-a7bf-c18c90d0234f", "sighting--99f32d77-ad33-4262-a165-99fec58a4930", "sighting--e9dbd698-cd5f-43a8-9ee4-0c70945a647d", "sighting--d3558e5f-7cae-4236-a75c-eb74c434126c", "sighting--733333de-7a39-42ee-94a0-730c5723d2f0", "sighting--21c1b0c4-b41f-4b61-87e5-acf09cd8affe", "sighting--70a35e66-ede8-4802-bef8-7645b038a916", "sighting--5743dfb1-1b6b-4650-a32d-f259fad154c5", "sighting--2d54ae2a-ce96-475d-93e6-b2ebcd5bdf4c", "sighting--68630440-7c2a-4f58-9439-794ed7c11b90", "sighting--b09551d3-fec6-47ee-b692-96205595ab1e", "sighting--294bb7d8-261a-4399-aa9f-3562ee42c98d", "sighting--bdc5034d-345c-481f-8351-3f753c238f24", "sighting--3a2d9ff1-12f0-4169-a121-7f03b1ed1963", "sighting--6bfb2202-3e8e-420a-bb69-64335c4e1e89", "sighting--a4cc216d-f240-47bb-b986-45e19d153a86", "sighting--ef9c8fe6-f438-4027-8edd-865b966afb94", "sighting--ff455f6a-1bd0-42eb-81ab-81a5eaffbdd1", "sighting--5049129b-0ccb-4157-849a-694f1acba66c", "sighting--3e2c5383-ddc2-4511-9f23-d1b9f31b998b", "sighting--e14dc2ba-feaf-4557-ab3e-fdb9eb4ca868", "sighting--6078d7be-67bd-480f-b58b-6d10bdae619b", "sighting--872dafff-ee88-43f5-821b-e954a7f7977f", "sighting--2f12be8e-c18c-4475-8bf0-d637cb7baf83", "sighting--f2020e3d-c057-436e-90de-1e80dbabb256", "sighting--f466de45-d802-4bd2-a97c-e8d15f1f49be", "sighting--e52b1131-74af-4be9-90a4-dc03c29611cc", "sighting--3a85a83a-0508-41e5-bea1-08b2071fd10a", "sighting--055d0788-cecf-48df-ba24-3620d7baca79", "sighting--7ec4ff5b-56f7-4292-af32-16a5d77f90ef", "sighting--85477402-ecf6-414d-b4e0-aa27327963e3", "sighting--60576edd-c942-435c-bcb9-f422ba8350dc", "sighting--40677436-c918-4164-bd98-31a08c91dcdb", "sighting--f519436b-03db-45f4-89e6-e116f85deddc", "sighting--6d3dc97b-13c9-4e71-9c7d-afafd851444d", "sighting--899b86f1-9e45-4eba-82dd-0cba0a31ea4f", "sighting--27a59471-a719-41d2-8e7b-4205e2558d3e", "sighting--c4c8dbec-9293-451f-8620-5bf181aeb7ae", "sighting--9045b02f-0711-4942-8f5b-3bd86ce55efc", "sighting--1d36a139-834d-4bcb-8303-f5bed7e3ec59", "sighting--035a3b0f-95cc-4b18-8beb-3c2e3e6c588d", "sighting--099ee42d-d349-4d77-bc92-676030283045", "sighting--bda8f36e-33e5-4b77-8c03-9a9bdf585d98", "sighting--1c3ae3f9-e342-43f5-b887-d436b7d4eba4", "sighting--4ae36bad-2a88-4021-8fa8-008a783f149e", "sighting--09fc71f9-d8aa-4d46-add0-72cea94e0071", "sighting--44ec6ca4-1971-451a-9ad8-2ebf1f5ac1f8", "sighting--d86fd4c1-1352-42fd-b08a-aaa5bf0da8fb", "sighting--5a1dc043-72fc-476e-aafb-4f21da301e80", "sighting--3cdef8bd-c3a3-4409-b57f-d7d059e9fcb0", "sighting--2c3179d8-c2fb-4d51-a002-a26229b23d2b", "sighting--573359b6-ba9a-4be7-8bf4-d0ef0eef21a9", "sighting--4dfd4054-76fc-4980-b820-3a697ba0b886", "sighting--ae7cc8ea-8de4-4196-bb3c-b0052463f918", "sighting--7d99f616-3743-4785-b0c4-2bbc6d1e8bdf", "sighting--bcf5583c-e789-4cc1-9cd4-7cdabf43013f", "sighting--f0a2a874-b4f0-49bb-bd71-687cb8d87d83", "sighting--ebd89a8c-cb36-4adc-a93f-c568e489c2e7", "sighting--bc265cf7-868a-4809-b78c-4105de743df8", "sighting--df5ef0e0-b2a8-4ab8-a797-7fec8a2c52f7", "sighting--6b1ba371-7b5a-4757-9888-0e0595a24c6b", "sighting--fb4ac7ff-b90e-4c67-8baa-8744758e292a", "sighting--0eaf12a5-f5cc-4093-936c-b12e9bc15991", "sighting--64d55f15-da01-4bfc-b059-593329b975d1", "sighting--4f193c86-0400-4d3d-93a9-4a724a0cbb1f", "sighting--97bbb946-96ab-4358-bc27-7bee674f3d3b", "sighting--1eb90c36-6e08-41c2-b811-fc70210e64d0", "sighting--a823c4bb-153f-4f24-aa61-0fb720301c8e", "sighting--c4ad8062-eceb-43f6-8ee0-bdb2352347df", "sighting--c17464b6-494f-4d1f-9633-99db4bae9afb", "sighting--313d341d-7246-4dec-983c-cd6bb0658efe", "sighting--16f061b1-b6fe-45fe-ae1c-7fae2a8fcd71", "sighting--9d745380-3912-483b-8969-868caa6cc056", "sighting--e1c49183-59b4-4655-afd7-b1e9730df3fa", "sighting--de9412eb-cd6f-4a9a-9785-7e0895977e96", "sighting--74648746-25f3-4e24-af50-7d633775985c", "sighting--20f84804-1cad-4d6e-baff-926e9e83242d", "sighting--f2cf46b6-b8ff-4b6d-895c-0273b3569f00", "sighting--825dffc1-91c7-42fb-a9a7-a77db44eef4c", "sighting--adccdf80-0f52-4f39-97ac-79b66ade17c3", "sighting--042580c8-891e-4961-8116-6ee9ca2f0294", "sighting--3e4d2622-3457-4c84-9abc-f19f350d7e1a", "sighting--721ca31a-8301-419d-9955-633cac1c2ba4", "sighting--4eb20022-d057-4524-ae0e-3366b870595d", "sighting--9ec3d16b-a229-4418-9d0d-b8fc565895f5", "sighting--e8ede410-4558-452e-804a-4d39b3c7b954", "sighting--ff8ee84e-d9e3-4421-aef7-b587444dd581", "sighting--4349a811-ebf3-43e6-ae97-65208eb49593", "sighting--e9dcf8c7-f0e6-45ed-b32b-e259e78ecdf8", "sighting--557c5687-587e-4d75-97d1-bbbeafae4aec", "sighting--24d09204-dc7f-49dc-831e-5b77849f611c", "sighting--0fe88f38-d970-4939-b18e-133e89aa58b8", "sighting--c502ac07-2371-4670-9f8b-efb293d43562", "sighting--77087ff3-3c4c-4b14-a4f2-c32f94c9c54d", "sighting--b833c68a-5b0d-423e-a353-3ccd1b8a3ee4", "sighting--9ed9315c-d020-4bd1-ade6-2c292cc6a7fa", "sighting--4d202780-3287-4ed5-8066-186041456922", "sighting--65bc37c6-a692-4b86-bbec-587a3d61f54c", "sighting--2dda85d6-a112-4dfd-8383-129e93b916d9", "sighting--5b8e378d-c258-459e-9853-f5052d741192", "sighting--e64a0e05-1c7a-483e-90e2-2367097c369f", "sighting--d4fc5fa4-e8b4-4308-9345-3c116b825678", "sighting--93c46780-87f2-4b96-b7e3-135c55c0065f", "sighting--7a792c6e-7cc1-4170-84c8-50e6b24c28a8", "sighting--fb569c7a-c8f6-4a0c-962f-381de751a3b3", "sighting--56bfe506-55f8-4be0-8998-97b7238888ed", "sighting--e2994797-30de-4d71-8c39-cadad5c17fb1", "sighting--793a84c7-1267-47ed-a908-5b104c53d48f", "sighting--5d2f2b3f-8e81-4ab3-b612-c7633099fd1e", "sighting--4a8916df-f9ac-4cab-b4f2-18824e436f06", "sighting--5741af27-e0eb-445d-b53f-1223987aa56d", "sighting--6bc16097-fd94-4e09-932b-94469dacbd98", "sighting--4720cb72-8b85-4af6-84c7-24cb51063cd8", "sighting--64cf8e6d-9f8b-46a0-bd1b-ddf9bdb9cd82", "sighting--62783814-1b7e-4e78-86d7-7a378aff6abd", "sighting--8894aba3-f68d-499d-b74b-81c1cc7285ce", "sighting--f75a0c50-652a-42fd-aa9d-7c19ebfdad54", "sighting--de7f4cf1-ade0-466d-8a27-d161a3fef3e4", "sighting--3e63dcbd-ad19-412e-bd65-8faadd6e0193", "sighting--2a3ee3f5-5409-45dd-92b9-0b443ecdc273", "sighting--66bbc84e-889c-4030-acf6-d398a17fb74b", "sighting--ffd489b8-ba80-4517-a0f7-af2864d66d1a", "sighting--303a6787-f66d-42e7-afb9-f907ef3b04bb", "sighting--7927fa4e-8d24-4385-a687-e25085bd0b32", "sighting--acdedaeb-0558-485a-83d5-72837ec25a89", "sighting--8b3023e8-7290-4654-8c88-4083b518162c", "sighting--5f35eadb-2a54-441b-beac-76b8010a03df", "sighting--bc28a989-57e2-4430-9c50-e1dea070f891", "sighting--37e8999e-e916-4505-94cc-9e5255b090f5", "sighting--07571ca5-76c4-4f5b-92bb-b9f3fef7b0e7", "sighting--c9d79875-a117-44d8-82f2-9191c6a54b3f", "sighting--e617ab61-ec63-4155-a137-d35830637f7b", "sighting--d2581e05-661e-4062-9ca5-b7cd1f349ad9", "sighting--5de75293-8f56-47e7-a8d3-a0946e79b763", "sighting--a5c78226-2abf-4b41-8fd8-2c162ca40b67", "sighting--b93a3b92-ee11-4475-9ac6-4774223203aa", "sighting--bc51fd1c-a7f5-43ea-b38b-d79945de4c57", "sighting--a380c53f-351f-4b6d-a8ca-1daaf44f8f25", "sighting--dd8aab55-16de-4b6a-8385-0ba2024e6b56", "sighting--17222a6e-6084-4c92-b223-7f705cfb01af", "sighting--ffaaf44f-c9aa-4b9d-9df1-087c3b04ad34", "sighting--4a3b4c54-ce07-4735-b8d0-7c6767d22299", "sighting--92e6a796-49eb-4217-b713-398ed2c42800", "sighting--0fa51c89-83b9-41cc-ad95-1116d1417f4f", "sighting--fc1fc949-87ea-4b07-b32d-08254b860a87", "sighting--e23ca54d-b50b-4b0a-8a41-897a8f0dd2b4", "sighting--1f43957e-61b7-4bb8-99b1-c01d44cd8bcf", "sighting--71061c47-d26e-4e27-82f8-88c08e4d9504", "sighting--91d9e9f9-588e-4e7d-a97c-12711d560ac6", "sighting--ee9edbf4-8099-431a-a37f-0c10da1384b6", "sighting--3863e882-f068-433a-9710-859af9d52836", "sighting--2f758fff-9602-4fa0-95cb-8c81db97b286", "sighting--95d2c20e-1f96-42bd-86f8-36e3b10b44df", "sighting--35258106-3ad5-4464-859f-85e9059d7528", "sighting--85d413ae-4fde-4ccb-a297-6accf06faee2", "sighting--dd855fc0-a9f5-47c5-87dd-c5b510b301f4", "sighting--73e91040-554a-4e38-ae27-863ddc992259", "sighting--40d8fdc6-49ff-46a3-8f4b-e3236d4a804c", "sighting--632c3bd7-5840-41c2-a765-5c8108f8d242", "sighting--fe7fc064-217a-4e1a-a7fb-a362ac1d850e", "sighting--d3621b9c-64b1-4f2a-8a3b-af989c89363d", "sighting--990f65ed-47b7-4881-bb9c-4d19ac329076", "sighting--89736402-1e9a-4026-afad-7ac6078ab58e", "sighting--31a36bbe-3664-4552-b6db-33d00eb11e2b", "sighting--8badb3e0-5fe5-4204-8b10-9f98612cc107", "sighting--382b00ef-89b3-4171-a92d-6fcdde533b54", "sighting--1249df98-6cbb-498b-94a7-76f99737b96c", "sighting--694946b4-e4ba-41f8-b522-1e89a81ea086", "sighting--123510d8-7059-49f2-b0bb-b588fe2d8085", "sighting--0186f2c9-0576-435f-80a6-ac2432b29e88", "sighting--60c63d18-b611-4b92-8325-375fb2f084aa", "sighting--49476ef1-6e2c-4a4f-898b-e369490cd3c4", "sighting--e52d8bc9-5e88-4165-a1fe-51fd38d4d2e1", "sighting--d46941df-fae5-46ef-b6e5-58016f48a2be", "sighting--5c341c61-ecb6-48f1-b500-a4e1569fb76b", "sighting--463872ca-f2d0-4984-b6ec-712c5fc16499", "sighting--f9b1f7e5-de4e-463a-a950-cc9eac58cb9c", "sighting--08a04a6e-0597-4d1a-a2b1-8e2eda9d119f", "sighting--d855df83-368a-4823-8940-22c621a6e33b", "sighting--7a373016-de02-430d-9faa-3be62ee84378", "sighting--8f17697a-a719-4228-bd81-7e068121bdad", "sighting--73b345d7-cffd-431c-a5c3-f1afb2b80cc4", "sighting--665ffc2c-6694-40b3-85e7-3be373852235", "sighting--aa8eb54c-229d-45c0-a5c2-7fd79e8a86d3", "sighting--607cff82-d831-4371-8bb1-421ccaf015d8", "sighting--426d47bb-889b-45cf-9cfe-188876096cbe", "sighting--be2e3ad7-7bb4-4e15-9f19-177138674966", "sighting--aef219ce-5459-4797-ac49-77316fececea", "sighting--a4fa2f16-8231-4bda-8676-3486f41759fc", "sighting--0038fa0b-4a5a-478c-b8a4-85f838e7aeee", "sighting--ce4b8c25-3081-4491-b424-3019bd99ce80", "sighting--b1d64962-98eb-4b8c-969a-7b1effff1172", "sighting--e0fb695b-182a-45ca-86eb-a98591a19bfe", "sighting--e65a2f55-10d1-4dd7-b274-54632cda5592", "sighting--99b537ae-fc21-43cf-851c-ad5d621a602f", "sighting--4a164972-87e0-4ac8-8022-4558525c4680", "sighting--f41aa572-5ba4-422b-9473-392f5744d32a", "sighting--d2c0b047-29b2-4b62-8f21-44d754a00e15", "sighting--a44b9af0-ea08-43b8-aab2-d1354047c663", "sighting--b3632acd-1636-41bc-bfab-7203580011c5", "sighting--d2cdabff-580f-47b7-a945-61a53c41f53d", "sighting--eccdc4ab-1a52-4c7a-9445-0d12d1047ce2", "sighting--4b02f901-ad4b-4f4b-8537-17a406ba33b5", "sighting--24f4064a-fe1e-477f-96f1-b0846f5b1f0b", "sighting--af069beb-a63b-4868-932c-e74e704aec7c", "sighting--6972c2b8-ecf3-4e24-b43a-5f2b0fec513e", "sighting--df0cc763-af12-47b7-8466-664f4f2d06c1", "sighting--140aa972-ea0a-4163-8a67-e56ce3716da2", "sighting--5a05afe9-6387-46f3-96e5-bb9fab63513d", "sighting--f86a2b1e-c544-4186-b150-1d9b166342f7", "sighting--5b51593e-4084-454b-9dc0-d4072f17e73c", "sighting--d918a715-5061-46c4-bbb0-a5addef9e472", "sighting--706d6eeb-0db2-4e13-99d9-59f95fae23f2", "sighting--8e2a4ae9-e69d-420e-92a0-0c39f45e7ede", "sighting--c2d21ada-1a16-42ae-ab3c-f23903b85794", "sighting--8b51c772-1330-43f0-9b35-40eb2b4cd716", "sighting--a5cb91e2-bab8-40f7-8edf-a699935e2289", "sighting--6c62c93e-77b8-497a-9221-bd93e001702b", "sighting--90c01278-8fe9-4b7a-856a-1712b9f1bee7", "sighting--580af113-2f5c-4f5c-a84f-71dbb5e2e4e6", "sighting--1635ffb1-0f3f-4fb8-994c-0587534a8628", "sighting--23aafd96-0ad2-4e85-bb7b-1a552e219035", "sighting--48d479be-ffdb-4a34-8075-d28d36a51827", "sighting--5f64306d-2e63-405b-98ba-53887e09d3d3", "sighting--a1d8a53f-3241-4bd8-a56e-4fa77f89a72d", "sighting--be8f56e6-4aa2-4fe7-9084-e620dbcedfd7", "sighting--844de356-e55e-4c8f-a078-ac4908d24012", "sighting--36f6b6b1-96e9-4a5d-88c5-6b945d08abbb", "sighting--316e82f1-03d5-4a4c-ad41-58693f9438cd", "sighting--f94dc2eb-a58a-45be-bc8a-d756db560530", "sighting--7a3e3607-4b2a-4aab-8533-a416ab31fe49", "sighting--60f5bc65-9241-4622-b6c2-9ad583920582", "sighting--9c656166-0688-4595-a084-ff45b70bd785", "sighting--899b56f4-7dcc-41c9-8ff1-cd2d6d789ae5", "sighting--e7b051e9-c087-4d58-b2a0-e1888d8917fc", "sighting--34571b14-7188-4d2a-b1de-9ee8fb933980", "sighting--c201b50c-f427-4330-bf5c-ecc5e9774a6b", "sighting--138f8ce2-37fc-4126-ab2b-044b4505abd2", "sighting--2d5c56c4-81b3-4fcc-96ac-268101a35a39", "sighting--c9f4fa71-7320-4a33-8a84-4fc891a50898", "sighting--5ad88a5c-c6e2-4ec9-8944-4058d326281d", "sighting--1aeb6aa4-d8e9-4354-84b2-84020ff466c9", "sighting--c87a9af0-15c2-4343-8475-aa479dd70f37", "sighting--0af8d87c-dcd3-4c6b-bdf4-86c697913109", "sighting--3f9d070f-731f-4ea8-a2a0-24d10080a18f", "sighting--31429bca-bd36-45e9-b97a-673f292b7a15", "sighting--e10264de-5f7f-445e-a343-f3e0d4179fcd", "sighting--100a8c1e-2e5c-4fb1-bb94-3d3f490201fb", "sighting--7ed63d92-3bcd-408b-b361-09dba5fe9c1a", "sighting--6acbb0f4-5239-44d2-a871-71b823b518a0", "sighting--f43b195c-a9fb-4695-9b6c-5159b2beaa2c", "sighting--30b31aa9-fa5d-4ecb-bf43-efbe1c9636e6", "sighting--44c63749-3cf7-4fec-b2e8-ce4ab25197ad", "sighting--c85a8a59-05e7-4935-97dd-50e4ea7a1d3c", "sighting--70ae4685-a592-402a-812a-8bdeecf4fdac", "sighting--d0a37420-e0d9-4307-b276-c4388dd901f1", "sighting--f0da0bda-9d35-4109-879f-ed63c96d9fae", "sighting--1053d4e4-ba09-447f-82c2-fef5134e7e49", "sighting--adfdd8fb-c2da-47ae-a851-ba83994dab26", "sighting--2c54de5e-872a-4692-aced-d34b538f1736", "sighting--8b34a600-2d5b-476a-b8d9-327f22b5c67d", "sighting--d666c028-4e97-4a3a-b858-d625190c9623", "sighting--9ce23d2e-889c-4b55-ae9c-4fabf9b6a075", "sighting--1d1803f1-77bd-4301-968f-5835058ff8bf", "sighting--3bd0a127-57e9-4cb2-9c56-330887c8f98a", "sighting--da6973ae-cbf9-423c-a79c-9cf01e2926ee", "sighting--8864d8a0-4132-42a2-9b63-d92cd37959d4", "sighting--5259b9c4-bcac-4148-aa3a-8c0ccbb8bfe1", "sighting--a96d0d89-a747-4ac4-9102-96b6fe39e554", "sighting--938fb6eb-54e9-447f-97e4-7f8a9fc0a8ca", "sighting--643aaebf-2c63-4c33-b13f-a25eb0b72983", "sighting--9dc95fe7-f056-4d35-b2ba-9aa9d2ca9430", "sighting--e8accfbd-8789-41e7-8344-aea049e25d38", "sighting--f30248b5-328a-440f-8d97-3329ee9a338b", "sighting--bd845ab7-00e1-4923-9807-854d6c61a54f", "sighting--b597d09e-0c5c-4c55-b114-efd8c4ef413d", "sighting--0fa79981-f01c-4e47-8edd-f3cab6916c9b", "sighting--90f97ac9-97bf-4904-a81a-bdedb4c16299", "sighting--817d37ac-82f3-434a-ac38-8e9bf0522ab8", "sighting--46cfa714-b0a3-4513-8a38-648832004b64", "sighting--c86a1072-361b-497e-aec4-bf2ec454d2ed", "sighting--26990151-44bb-4288-9f88-5491be42bd82", "sighting--8e59f775-d392-462f-be44-ff7d30e7af01", "sighting--e2e23774-3347-453b-be85-6d2840772e93", "sighting--d02b9697-0db9-4d83-ae20-760db2718e99", "sighting--44f54355-bf27-495d-a8f4-c2c891b5e187", "sighting--e614e91e-390b-45c1-876f-72d8fb9b41a7", "sighting--9b5fba49-c558-439a-aac3-65708a5cb899", "sighting--5a5df241-ea5c-4ac3-8d73-afe5156f4e70", "sighting--4f55bdc1-a23a-4b54-accd-9766a6d298e8", "sighting--a4c0646b-4e24-4a2b-9e4d-dc66b4986c2d", "sighting--e2e33a2d-a500-4aaa-846b-0fef71b9108a", "sighting--4ad86070-8e25-4dfe-a3aa-eff05a6423bb", "sighting--919f56d9-1025-4f20-9179-450990dd5a86", "sighting--f59cd50a-5a95-4151-ac07-b55477b011c3", "sighting--91f51f77-dcd8-4505-a4bb-90def72bbf32", "sighting--eb587520-f666-466b-b876-0e1aa13f3f0e", "sighting--a7c9b110-50a6-4ece-b16c-b042314c0233", "sighting--62ece98e-f7f5-46ce-9b0a-31babf3b21c7", "sighting--5ac215d8-1756-4baf-81db-3f8dcc46c2ce", "sighting--ab59c092-30c6-4d40-b970-de4c6ef0a9e1", "sighting--2c731173-e280-410e-be6b-f7553ce08985", "sighting--7b0d9eaa-dd6f-4663-9216-cf5abf0d5016", "sighting--2525fe5b-f27b-4792-ac6a-354f002147f5", "sighting--51c666fe-2a5b-4a8a-bc35-cca372a2e1eb", "sighting--61dc0e4c-d076-4745-b3a1-0db2c7467094", "sighting--8d9c39b2-a668-4ba1-9330-58b001bb9f4c", "sighting--0dce4635-3b76-4792-a168-d8f23c9943e5", "sighting--1cbeb477-9220-4f12-8908-d54271e0f425", "sighting--a0d9fe11-a3b6-4ac6-a334-c746586ebe15", "sighting--f3923cda-826b-4a75-99e2-526a1f3a8e5b", "sighting--9542034c-19f6-442f-a6ab-5148d34884a6", "sighting--78d77e85-00a9-4e83-a0b0-64b29d742afc", "sighting--302df6ca-fff6-4e38-9323-6cbf7cf3f84e", "sighting--f6b9d9eb-b6c3-4ad0-be2a-a152ee7dcd72", "sighting--503b0e7f-f414-4efe-9bab-b789486189d1", "sighting--ea63a098-be88-49c8-a8ea-3e5606749b53", "sighting--f2a73ae5-ba97-4690-b7a9-0cab4873cd8b", "sighting--07b6b3dd-fd16-4607-afb2-38fe7a9ad31a", "sighting--14850b91-673c-467f-8110-877b6243b34e", "sighting--89984e51-2829-49dd-8390-3f56ba154a4f", "sighting--bff8e243-12d5-4e35-8633-02f8c28c88cd", "sighting--e63cd493-bc61-4641-947e-2a11ba7ea2d9", "sighting--e97be75a-a6db-4393-8bbc-7f78120a7bd0", "sighting--810478d8-7582-42d8-9f3c-52a8f3f18c3a", "sighting--4eaf5f86-9bc9-443d-a895-cbbcb4cfae35", "sighting--47c8e85d-1eb5-49cb-a30e-3df4b5c9fb22", "sighting--f8caa88f-80f7-4d90-b172-db9f51e1b41f", "sighting--c596a4ee-b4fd-4dce-ab66-2689b7fb93d0", "sighting--61ee9076-e2aa-458e-8aa9-988c58c773e5", "sighting--31a36fca-79cd-485e-bb3a-a7ac355f341a", "sighting--09aca8f4-d2c8-42b1-9b23-37f657be2289", "sighting--6cb90229-0a4f-4398-9d9c-d6dba85f513a", "sighting--a4b5e1c3-1311-42b0-afd4-8802dd8310fe", "sighting--408ec2b4-4905-44b9-a60b-1b101f3f91ab", "sighting--baf3d11f-8d9b-4dc3-9185-b585ad3aa84b", "sighting--e2d9cd0e-5ba6-42cd-9f53-4737c2eddf86", "sighting--df922f6d-8329-45aa-af89-e7c739c7192b", "sighting--5ada7ab9-8237-4a5e-97f1-d67a8cae3ab5", "sighting--57ba8485-728c-485d-9b4f-dbadfd647fda", "sighting--87036b72-30ee-4f89-b9c4-9ccf7ea9147d", "sighting--0b2ae079-6795-469f-8969-5d6220024d51", "sighting--b129b94b-5da3-4996-8236-2f0ee3e2d268", "sighting--6c7b1d1a-efcb-475a-a349-137361ecec00", "sighting--4f4ceb1e-8b0a-4a11-94dc-727278a26203", "sighting--e3cfa0f0-cb25-4bd5-a82e-e3a5c27c325b", "sighting--21441f65-0b6e-41e8-929a-56b86aa601d8", "sighting--6af322e4-4961-4a19-9aeb-fd23551fb17b", "sighting--c372fbea-7103-42a1-8388-4ed242d258db", "sighting--280899ac-75fe-42a7-899f-10941d6dacce", "sighting--5dcbc948-f0ae-4f33-9951-485113a7f4b6", "sighting--4af64719-4ccb-48de-a925-d2259ea43603", "sighting--3e50fefd-5d2f-4385-8ab3-0d49dcc4ae9b", "sighting--20636851-0154-4c64-8b4a-d7dd663378cf", "sighting--8e64f432-ac08-40e3-9e01-00665fbff8cf", "sighting--d8a2723f-d502-4905-bc2a-ad36f49c3dec", "sighting--0b5e02b1-b31d-4929-ab06-1d758c3b6174", "sighting--2c97403a-8c23-4503-81db-1248dada6b2d", "sighting--56f5965d-4e15-47a8-ba72-c71179ad7628", "sighting--1b1f1a70-14be-4a8b-87a2-76bb203c06d0", "sighting--5303541b-b3e2-43a1-bf25-d81c5182d44d", "sighting--1d6ad052-a12a-4f52-9552-d655333a204d", "sighting--5e0dab5a-da95-47a7-8f25-404cd74f4bdd", "sighting--41b02f18-d609-40af-88fc-c3a75f3f1bac", "sighting--e4738753-9c55-4565-b867-e5b3014dda1e", "sighting--0a6b914b-dd76-41a6-9354-2cbe3a39c69d", "sighting--acceb0fd-dda3-4a1f-8ca4-f9a5b0627e9f", "sighting--78258ccb-a876-48eb-b45c-b54cb38cc8eb", "sighting--0ed64508-6756-4fb3-bcdc-82cb6fadb466", "sighting--944f9256-537a-47f1-9367-42139a333150", "sighting--48a3dc8e-cd50-4ea5-8009-cba219750500", "sighting--118dcddd-f359-469f-ab67-ab484fd7176f", "sighting--838be311-750b-4922-810b-6de1e4480dee", "sighting--e45c13a1-dfa8-492e-9f01-e431f8bf6144", "sighting--a3f035ea-0dac-46b9-af70-d285cd563455", "sighting--f7ea0db6-9fe6-403c-8502-fe5e547628ef", "sighting--5ebb43ba-fa88-4b00-925c-cc0c8987a055", "sighting--1571cc3f-b7e6-438c-bbe2-286f3c21cd6b", "sighting--f91f7e01-eef2-4021-898c-7cf0d2c6396a", "sighting--f17050ef-cd9c-4935-b0a3-400415dd377a", "sighting--ad9e8a57-782f-4c72-9079-ce451c6277f6", "sighting--6393d70f-6daa-4001-ba4b-67cab9564ad5", "sighting--308cca33-b60c-4fcb-bc0c-fee15c4521d5", "sighting--02b35f73-81b2-4a77-8869-9da134ddc596", "sighting--6d6b3c52-543f-4d3c-addb-963fd19b944c", "sighting--9747bc3f-f955-4a32-8c81-6ece88ca31ff", "sighting--3fca6c5f-6f72-497b-9643-471d8c6beaf0", "sighting--3923b51b-0301-4ef1-8eba-bb21fb26e2bd", "sighting--fb647e61-d369-4c76-a453-d670082d0bcc", "sighting--d7efbeed-76fb-440d-a436-41779a70aef3", "sighting--8dfb64ce-019b-4a80-a344-31cf9b5d5017", "sighting--2276267d-0888-4110-935a-0f3b1589c5e8", "sighting--b8cffc0b-8f6b-4d18-90f8-5fc6331de12a", "sighting--12f4f40c-a57d-4662-bcf5-ae5517d1e3d6", "sighting--fef7f189-f06d-40a0-a234-8af9e5937c1a", "sighting--1be76265-3e7e-4b17-8dc0-5e29d777cbb3", "sighting--cc7ae152-65d8-434a-9e34-48059fb3c70c", "sighting--81ecaef6-2414-47fd-bdad-d8384683f465", "sighting--79653e13-2e0c-47da-abef-13106bb485aa", "sighting--ef755ac2-ca06-4e74-93ed-645174b9f37e", "sighting--72f09b65-e958-4e4f-bce6-a0ac5c32ce74", "sighting--368d30fa-1d93-4ef5-9efc-2950426fe1bb", "sighting--0d7001f3-a635-4ec3-a81f-69ef364d29dc", "sighting--b6f2264a-8101-4051-9663-b0b4e0497422", "sighting--4901ce30-e3a4-404e-aa9b-bfc9735e5a3a", "sighting--ca444f50-7ec1-4e03-a5ea-5f3779551155", "sighting--966ca48e-7a4b-44ea-9188-5cb96ac1e8ae", "sighting--71a373bc-79aa-46b8-9b58-3d2a40d7d0a3", "sighting--292249ec-d4cb-437b-94d7-d5457df4749b", "sighting--9c16d58d-fdd3-4cb8-bb10-fdfcea0756bb", "sighting--b2c29a10-b194-4d0b-b29e-1dd1073c114a", "sighting--0520cdf4-2163-4e99-ab69-350efb825c6c", "sighting--978f95bc-73ae-4000-a39a-dde61c39d4ad", "sighting--f19b9fc3-d25b-4447-8b48-2ba64a7aaa3a", "sighting--f1475be1-17d2-43c3-b6f9-3a3dc49dc863", "sighting--a92c7d88-de65-4ce8-9589-edda13ffa109", "sighting--e931beba-534d-4966-827c-6c9f662f471a", "sighting--19b98535-fd98-4c46-893a-f9a660cae8d6", "sighting--78b2b40e-5d8a-4a65-baad-67fdbc4fba5e", "sighting--2aebf9a9-b81c-4f20-a0c6-9ffdf4072e8d", "sighting--2d2c2385-5cee-4c50-9cc1-86a2eaed3369", "sighting--c336c530-d615-4aee-a827-356194cda266", "sighting--e5829178-a700-4f1b-a470-d722911bc730", "sighting--47e163a4-b484-40cb-b997-5ebae8310bad", "sighting--dcd48815-45fc-4325-aa37-0a87874bfbfe", "sighting--bd7e47ce-4440-475c-bd9c-53ac73a8d3fe", "sighting--ca4d0699-4836-4969-a2a6-b706409192c4", "sighting--7f1e188d-407a-41a1-9671-36331dfbc3b2", "sighting--aa4f9896-9928-4164-900e-74fcf3796397", "sighting--96428367-e93c-47d5-afbe-2cdb4ba0a8b5", "sighting--2b7d377a-a6d8-4220-b5b9-346cbed8f153", "sighting--07ebd747-4aa3-4875-a0e0-c7e676d3b1ee", "sighting--33bd8762-c1e8-4a58-b672-c9acd66c6be2", "sighting--66863bf4-ceae-4dc4-b8a9-83c0fb01404d", "sighting--9f611313-edd1-418f-a183-c772b958908b", "sighting--df7d6901-5c44-4b45-b18f-3f53ca4f91f2", "sighting--f297618f-0844-4193-b219-3584b2f86ea4", "sighting--a83461bd-08d8-4818-894f-133a380ea1da", "sighting--1d99f86d-95ab-4cb3-a95c-9ae000d94dd8", "sighting--f4e4295a-fdee-4e12-863e-08ee0e82e8c0", "sighting--fad2ddef-f8bd-4ee7-9924-3b3a3496e67a", "sighting--d47c5c00-5632-42a5-9569-e01e2e1cd6af", "sighting--0a974c50-5644-4d05-aab5-86be5485af6b", "sighting--38a1929e-13bf-46e5-b471-41e56a5accd3", "sighting--02cea531-6ddc-4a28-886c-031deceb2b4a", "sighting--4e902ff1-7682-41ed-a7d6-8a64260230f2", "sighting--63422875-a90d-445a-a5e5-22bbc9ebbb1e", "sighting--3d1fde21-e833-4727-a1c6-ecb6e89ca93b", "sighting--f35edc0f-6c4c-406f-9b70-3be8c8dfc75f", "sighting--a677a82d-5bc7-4159-82c2-5f8128038b44", "sighting--4484725d-30d4-4515-8ac5-3f031f676752", "sighting--7271a340-9964-4d31-897c-6e31cf6ae812", "sighting--1b278115-9730-4bf6-9da4-4be3f769b9fb", "sighting--d6c31dab-9063-47ff-a606-b40a49d76c1f", "sighting--b5789bba-a382-4330-b088-18dba3eb1f1b", "sighting--9f25271d-c6bb-486a-860e-bb0f26ebaa82", "sighting--a4903339-2c45-4778-9a79-7cc2a29c9ae5", "sighting--7251172f-bcc6-4c25-bd9b-b892f1eb3716", "sighting--6301fd57-0d37-4f67-b80b-5c71d1f28965", "sighting--b0826d2b-4b35-479d-9d0f-1708b04fbf20", "sighting--39a808a1-8162-4f03-a254-ec5f6ac4549e", "sighting--c6a83532-9011-440b-81db-980eb63081ca", "sighting--cb92dd15-b935-4391-9b89-7f9f01bd5a70", "sighting--2f58b20e-8ea1-4913-a852-78e2ddf7ee12", "sighting--396dc326-2d2e-4c25-a9e0-864a5c37b2c5", "sighting--4f5c4448-79e0-479f-b054-407d89514898", "sighting--ad41bd4b-8784-462e-b982-3a44ee030591", "sighting--fea4fcd1-7267-45c5-9d81-919104e22e30", "sighting--70aa6517-51a5-4a74-a17b-9b75d9965866", "sighting--bb907ff0-4952-4cab-a713-a94407b1221a", "sighting--2d5cfb06-4b20-461f-95f9-f5ad39ba68fe", "sighting--3cdc662a-e439-4319-9ce2-dad8ef1230c3", "sighting--4016e1a1-03ae-403d-a7bf-54013cf851d1", "sighting--e4890be7-1ca5-4d85-96eb-f0498fc4d39d", "sighting--472993ef-a3b2-4a64-8673-fa7707b1c566", "sighting--6e44f7ee-3991-40fe-afe7-abd3f2aeafad", "sighting--d9914cca-3f9e-4726-baa7-cdb94b279bb6", "sighting--4c384ab0-dc29-4782-80f7-59dae241c9fd", "sighting--c5923f90-e7b4-460e-b26b-b8ece08471dc", "sighting--d8b2cffa-a3d6-4aef-af65-146cdcb061f7", "sighting--48de43f4-756c-4dd3-8464-c3a5a8266c90", "sighting--6f19ff8a-faf2-4b28-b770-e47250f0b857", "sighting--62d40264-1d71-4156-9fc4-9e80916cb5e2", "sighting--592926cd-1ac5-4157-92d4-c56d9368b41e", "sighting--2fa06d97-2968-4339-9f6f-90271f7def25", "sighting--97d86bea-3cf8-4987-81d4-5093a1bb1406", "sighting--9bad1a16-2ca6-4f73-a729-8d0ff8f031c7", "sighting--78a4cf6c-2090-485b-904d-25ec23621ada", "sighting--5e3d9c7b-17f4-4310-979a-013a5fba81c3", "sighting--4cebfd71-0b79-4f46-a8c1-7d4d13bf8e55", "sighting--fd9eebb7-1618-4d60-9bcd-5ec905c7b5ef", "sighting--f6960e07-78ea-4a63-a2d4-7bfe971148e1", "sighting--516197cc-50c1-475d-be32-648f548e4733", "sighting--8a3e3162-0f1d-495a-835d-5f733cb4075b", "sighting--cbca2f99-d6e6-4148-b1bb-cc5e4ba6384c", "sighting--a041a78e-07f9-44d4-870c-c2cfe0f4253e", "sighting--2b288123-196b-4532-ac29-674c9b917e2a", "sighting--87f92ebf-11e5-4765-923c-6ca154ada31c", "sighting--ef1bfe2b-df1b-43e8-bfcf-b7dd1fa351cd", "sighting--a91fb8fd-31c9-412d-b3e1-86b59ff3dfde", "sighting--bf30e91d-9cb5-4f84-8e35-0094d8071e5a", "sighting--673eeced-b59d-4f0e-8810-5f9536af4045", "sighting--0f419f6e-594a-4a7c-ab5a-098ca609cd3b", "sighting--729299ba-f7e4-40c6-8e78-5b895929205c", "sighting--639ee715-8d71-49e3-ae50-3cde87e87a3e", "sighting--f47d1b09-14d7-44f6-8538-99779452ed83", "sighting--bdc9387d-7e11-4bcf-a22e-4aa90713e416", "sighting--08f20200-eaec-442d-bdba-cd9ae37e3b19", "sighting--5fb32f48-3ad3-47a2-bea6-8418f35acade", "sighting--e18822f1-be60-41d3-b217-e4bb6a1b1acb", "sighting--a7cdd7c1-2863-4057-9941-5bb261990ee3", "sighting--f818cab9-ebc9-4e95-b313-c62f61fdde48", "sighting--cc580082-6147-4f74-aa32-ea1116e1ce9d", "sighting--57d4700b-a2d3-412c-bcd7-edba8bbb28d6", "sighting--4598b01d-0481-4386-a44c-524b707b3941", "sighting--5efdda6b-2cc2-489e-935c-7698a5c96464", "sighting--ce2b50af-440c-47ce-aff4-47e45cfab578", "sighting--5bb8c8ec-0dd6-4c0b-998a-644daae26073", "sighting--22f60bba-72b1-413b-9da5-9649e17c1cf3", "sighting--26ca1ec1-e6ba-4d98-ae2e-51ef73ee61e7", "sighting--58fab796-c0c9-4256-818f-3aca7e333854", "sighting--18c78bbd-3f14-4734-b459-d811607a0786", "sighting--6e29a6a0-45fa-4cef-bfde-e16e241fb60d", "sighting--8cd70979-f605-4d8f-a7c4-3e0d28095dd1", "sighting--e36f4652-e049-4233-b0ce-68395dcc588e", "sighting--525a1433-c26f-436c-8dc5-544fcd16b7c4", "sighting--65ad1c46-6f50-4450-96b7-65406ae7a6d0", "sighting--0fb24303-ae65-4641-a3c5-47616a2ee402", "sighting--7c0b4c26-984d-46df-9b10-d4ff65b1787c", "sighting--f84ac962-23b3-4011-a136-1da7bae0df64", "sighting--17c77fe8-277d-4dcf-9668-e2c658468656", "sighting--5e9e1ffc-ff90-45a0-96c6-f1b4f7258cb9", "sighting--adb6f200-aec8-4978-8af3-e31822efafdf", "sighting--d5d25eed-204e-45c5-8a3d-b4d0c7aed504", "sighting--f66107ae-0f6e-44db-a258-f2eb5d2a33d3", "sighting--ede268be-da16-4b54-b700-0e4b845ba669", "sighting--eb10d051-c9e5-4e8f-8ce8-025683f7bbe8", "sighting--43f229f6-9dda-4b30-a9e4-57c54aac48bc", "sighting--e1d964ed-7b50-4fd2-8e52-cf3927be5b5e", "sighting--b7211bc2-6484-4e0a-aa2d-da0c0b736a94", "sighting--d053dc2d-197a-4a90-a791-9d20a054223a", "sighting--0706f6b2-daf1-451c-817a-b6f1052e4fd0", "sighting--dd57c358-5b0d-40fd-a6b2-7040c68ad4a2", "sighting--953d91b5-622a-463a-9434-03c2ad9d06da", "sighting--a563c0e3-3a40-499b-8a4d-47c39f045cc6", "sighting--13418038-8bc1-4487-b45e-30eb74141390", "sighting--4dbbab7b-1df0-4863-9058-8c82a03b2e3a", "sighting--899e750a-f561-4f24-8e93-70670677bab3", "sighting--d0cddfc7-441d-4b97-bc7b-d9ad1a7c1eb9", "sighting--d437d5b2-e675-446a-b3fd-6f1231457233", "sighting--1f093f18-daca-4f40-88f8-f90fdd1987e4", "sighting--95fe88b4-c889-4966-9ad1-33535b031f51", "sighting--2ac46af8-e60a-4629-bc18-17e612010a3f", "sighting--0491f0b0-dcd9-4b92-b27f-eded57fa3dfa", "sighting--dda7d06f-c111-4541-a2ec-e36ec1fd3766", "sighting--b314276a-7a02-49e6-9351-58f87bbde1a2", "sighting--df8610cf-4495-4421-b170-aac218d24593", "sighting--55e7acb6-2623-4db6-819b-7cc43daa57ed", "sighting--bc2cc843-d1f4-4ecb-9bfd-6a503a6cb07c", "sighting--ae185a90-5a82-440e-929f-e1509d99971b", "sighting--28e6bae7-9648-4443-9ab5-2ffeab06049c", "sighting--c6e63a2b-cf5d-44a1-bca4-c59a1f5e5d23", "sighting--af8e7696-98fa-4742-b310-a86b9611f14b", "sighting--f61f55fd-925f-48d1-9412-df7dcc5478bb", "sighting--93a9479b-4ae1-4e96-9f68-16549a4cbeae", "sighting--0e4fc6b0-7b12-4394-9b48-4aebc5b0b5a8", "sighting--3e3379d8-9074-4760-b523-f0027a2fafea", "sighting--5b5963ac-cd3e-4e2b-bfa4-60f20c7e0f1c", "sighting--ce06092e-1fd1-423d-af39-1fa5f5bfbb47", "sighting--76608fe5-5ef1-4b60-94d0-c6ebf3d91ea4", "sighting--a08d4772-ffc2-4ae9-a735-4da60990de2a", "sighting--410dcabc-ce91-453e-8643-cb4af5501e8e", "sighting--a8e40b4a-5e02-4589-be5b-b7c9c009cabc", "sighting--413f52b4-bd0f-409b-a812-10cade87a4e3", "sighting--bf3e8543-1f11-48bf-a9b2-ef68c1eb106d", "sighting--c5dd9343-e500-4309-8ee9-c8f7d914faf9", "sighting--4aae46ac-d203-4c36-80b5-006ca7546563", "sighting--668b0f91-1420-416d-8d0d-679d228bc68c", "sighting--6105a080-8582-4094-afcb-87c7ac491273", "sighting--28d5c89d-1d3b-4ba5-89d0-25ce9f6c5908", "sighting--10e3415c-f8c1-4639-accf-7d464c68eff7", "sighting--ead65307-d8cb-455c-ba7f-20a87a0d1ebe", "sighting--609e6c41-c4dc-4acd-bfb9-001bc7daf24e", "sighting--354c37a7-7165-4ea5-8ce4-23eab88de890", "sighting--42f59989-6ce3-4cee-ad73-d1ac93557a05", "sighting--8a4fe43a-e57a-47b4-832d-2c0c92118f07", "sighting--ce57f8ec-d4a5-47bf-9682-c99fbd02d7ba", "sighting--c0990079-9f40-4ea2-bb28-371c0e9b09a1", "sighting--7bebc8c0-65bb-4685-aa94-afa4bb11eab5", "sighting--cc8e2473-4be9-4fec-aa0c-dcddc987d1d2", "sighting--6ffb4311-1412-49f0-9320-237039530bb2", "sighting--4cd2b700-0c38-4679-8a6c-8b9f8f559b22", "sighting--e5cdaf0a-d9d0-42a5-96de-ec34343ae1ec", "sighting--753a7fff-2e43-49db-9571-eb6ddc02206a", "sighting--638ab910-a38e-4709-aa2d-a32668a8a5e1", "sighting--78e25540-71ba-4915-b314-93561d154346", "sighting--25fa7354-fadc-45e5-82cd-37098974423e", "sighting--c6bd4ce1-ac58-4b2d-984a-418287b4155d", "sighting--a5d3454d-490f-4803-8804-99d469c34f29", "sighting--06649717-aaac-4c23-a215-4432f97ac7de", "sighting--fe2d5528-0d5b-488e-b653-6d75d0cd2073", "sighting--66e1b9dd-01bd-4d12-897a-b9640820b7be", "sighting--9b7d0f45-9e9a-4bb1-9e85-7274fd7669db", "sighting--806f1211-839a-4872-8942-b2f5eeea10e8", "sighting--0f0c06e3-5805-42ec-891a-1057b626f18f", "sighting--dcfe12bf-6a65-4eb3-889c-b708fa9a6b65", "sighting--390fa030-0412-469a-849f-e7bc62fe7bae", "sighting--8f06682b-e5bb-4300-a230-ac290a2a9e9e", "sighting--ad53fe0d-6a2e-468f-b160-7a437c226fc8", "sighting--20192f7c-5b85-4cea-ae99-4353ad3fe255", "sighting--b28217a7-b8f4-444b-bfd4-14489acb73e2", "sighting--14130651-6a3c-4ab7-a9cb-ab58c4f4b778", "sighting--589c835c-d9f1-4d2b-99ff-ffd691e13168", "sighting--ca23e232-0466-426f-8285-c31ecfcb96f6", "sighting--f4070cc8-14d6-4273-95e6-05d505d89243", "sighting--126cf37e-e1ff-4e6c-a2c6-c4c34d8bae34", "sighting--01463bc9-eb23-453c-a4c5-20a0f807ddf7", "sighting--4edba8c8-de7d-47a4-9304-f754f88fb56b", "sighting--e98b6a85-fbbb-435d-a6e5-9022f952ca33", "sighting--6b677f42-b732-4a9a-9e39-3ae05fed850a", "sighting--1ec6a40d-d87c-46b3-9eb1-c58eda30f96e", "sighting--9caf8320-09b9-4d2a-a366-8a24d818e453", "sighting--108f1db3-4d4e-4fe9-ab35-a1bfa2985559", "sighting--db587fbe-0416-494a-a074-96ba34a0d82d", "sighting--316c84ca-43d2-49a2-b969-3ec19055b6c5", "sighting--54983dc8-56cc-4e96-8492-a556b506526a", "sighting--662153da-f046-4eb8-b51b-985546e9b679", "sighting--ab4ca388-47dd-44b2-a557-65b60a9981fd", "sighting--da86d056-df28-42a5-ace9-c485f17d4aaa", "sighting--3c215c20-11da-4fac-af4b-4d494d9a404f", "sighting--0c17ccf3-aa44-4554-9b11-120292d2e867", "sighting--a637b61e-d11c-4e73-b023-4a4b823bd3c4", "sighting--c6133f5f-ffae-49a9-8f71-ae621ca357cf", "sighting--ae50f00b-7dd6-4eff-83a5-058b105d2977", "sighting--9971f85f-07ea-4015-a336-441268db5be4", "sighting--c8aff095-cb2d-405a-b391-a988551f42d9", "sighting--d0966a12-ea04-4a9f-8285-72d520e22823", "sighting--6bd02006-2b88-4ef0-8f57-1d5bbafe6eba", "sighting--e8c9475b-1134-4049-b0af-1c9ac72ab555", "sighting--b1269127-f3aa-4f7d-b109-dbdcb2e87015", "sighting--7fe53705-6701-481b-bd18-0f5afcab07c3", "sighting--3fc70c5c-cd3f-42d3-95f1-b9aacaa7a445", "sighting--e103f5ce-e665-4807-a39b-303246679c39", "sighting--7e7a343b-f01c-40c9-bf88-d14b020a7dea", "sighting--f4f58b6a-4e54-4258-b833-9b887865b449", "sighting--04eca95d-a744-45f1-8945-174d6cc1d4a6", "sighting--89df5c62-b0d3-4445-a31d-0c85873c2490", "sighting--a4d4f5aa-0976-4c46-96ad-30858988537f", "sighting--ad89f75f-3306-4337-baa1-825900779df6", "sighting--faf8798c-4241-4a6c-9d66-9f2a2ada96a3", "sighting--dcf279c8-fd7f-4dd5-80d5-c1b0c5231718", "sighting--74c37e66-eb3f-40a2-b2c5-526f03238ba2", "sighting--db5e5773-d183-453c-9b29-692dcc33c627", "sighting--b3df1e38-532b-4c99-b40f-31943e304136", "sighting--c590b554-1f45-4b38-bc70-1f1a14a7dbf4", "sighting--bf9eeade-d28a-43ab-8fc7-7409ddeae4c8", "sighting--333ec293-fbb8-423d-9be5-1b995c07e7ee", "sighting--ccde612b-deac-4a1c-85af-8857b966730d", "sighting--f1aaf509-5e13-4174-88ec-37dd8be2638a", "sighting--93ef15a1-e7eb-4a2c-b34b-9d5b75b7c9ce", "sighting--02e52201-53ca-47c3-86af-3e49c9f52742", "sighting--432017dd-da06-49be-af82-b0f23a5fc8bf", "sighting--30eaea55-dc05-4c11-b6b5-7a37b44c3816", "sighting--7dbfb162-04be-4996-b96a-0fc0e66d1386", "sighting--66905730-319d-4b4b-a703-07b27d511d6e", "sighting--eb0e80b4-fc72-4fa8-821f-8f01795658e2", "sighting--57553fe0-0c99-4d5e-9fa9-524b4b3c6436", "sighting--6e3a9570-d223-436e-9af7-00cb67439e3f", "sighting--b94456fa-1e22-44ce-80ee-ca26c559fcc4", "sighting--a5d36991-9ba5-47bf-83f4-02e7f25bbbbf", "sighting--8e71c4bd-52aa-406a-a96f-f86f9c11ada1", "sighting--3c47d27e-5c2a-45b9-8e35-67baa0a5af0d", "sighting--00d23615-569d-4725-a294-62a32235079d", "sighting--17fa0808-b869-40ad-b9de-6d85d2a491e2", "sighting--ad6364e1-59b5-4f92-bfda-60c9827965c1", "sighting--ebde5f9d-64f0-4757-a835-0d7764bdc3e5", "sighting--ee97d2a0-4f69-419e-a94b-ea6882f5f6aa", "sighting--610d390b-3d0c-4f1e-9707-e14a5530a84e", "sighting--23a0ce65-8ab3-467a-926a-ede575f628ae", "sighting--0a2cb75c-461a-45be-b2f9-28bc7576264a", "sighting--8b05fd56-a547-4c17-879d-fbe9ff85fe67", "sighting--f6a24f29-fdd5-449a-9df9-15510f81cb0c", "sighting--1c68044a-7ca2-484d-bd0d-838062851505", "sighting--f1b24c50-3c7b-45ed-8a59-9de0d23b6e9c", "sighting--18db2239-7a96-4ad3-b5d7-86b6d6adf60d", "sighting--419eaf98-4c36-4917-ae3c-a414fa721e40", "sighting--abd0948f-aca9-42be-9d7f-62e0476b4729", "sighting--930320fc-d7bc-4231-ab6e-5efcc061cef3", "sighting--d6fe3447-849e-4d4a-896e-a13bfce03913", "sighting--ce5a76ad-83e6-4409-a382-4e4a7ce66435", "sighting--88091fc1-469c-41ab-af15-f7b069993cb2", "sighting--e5bda5fe-3e51-403c-b2ef-66d43f06e32e", "sighting--5c7eadd1-1165-42f9-9dd3-30e5e90b4277", "sighting--3589015b-1541-418b-b156-2a3dae2cc522", "sighting--22817f0c-9bc6-4f7e-b3f3-f0061b9e7a40", "sighting--3e45a345-4368-40ea-877a-968e8b028da6", "sighting--9745701d-9f58-4e3a-9421-a70c5dfa1f7b", "sighting--13d8b591-9f72-47c6-ac19-426d49b2a6d7", "sighting--06c6eccb-a123-422c-8a60-4fe317c421d6", "sighting--ca93fa53-1e21-4fbd-81aa-51d39ee7f8f4", "sighting--d6edd957-eacb-481e-b3a5-3a216c18388c", "sighting--369de0db-9e92-46dd-b845-7d4e02c07ed6", "sighting--bf9a37bd-95eb-479b-b996-1632d3d2692c", "sighting--bf4aa554-8081-4a1f-bc5c-541ac551c3db", "sighting--da014f7c-2d56-4934-94a7-a90323c0e83f", "sighting--8a59679e-0ac4-47d1-b294-c15cb4cc9066", "sighting--41b50c13-4735-4327-abe5-81e7239d3ba4", "sighting--47349876-20fd-45e2-80df-51fa3b0b08c7", "sighting--68100029-e763-4fb4-811f-ad23d9bf2ae4", "sighting--3baa5c04-4b2a-429c-a6e6-4ab4661f1f46", "sighting--55f91cf4-75c0-4900-9b8e-b52035c4bf84", "sighting--28229b5e-b597-4a95-8595-f35f7274c81b", "sighting--00d4f44a-56e1-463e-be7f-7f3a3ba2319e", "sighting--fd04e5e1-a8de-44e2-a594-28caa7f8c7d0", "sighting--cc03050c-8434-4fa1-a3c0-d31049c15b7e", "sighting--3449709c-0b47-443b-ad85-2caff4f2aa0a", "sighting--ed96e454-5fd7-4aaf-b999-1b9833e97055", "sighting--cf3920c1-a663-44aa-abe9-37731feef17a", "sighting--a443df92-57e3-4b86-82da-a878eccec733", "sighting--44ee0ee6-da9a-4fda-910e-23c982bafa9a", "sighting--9d4a37eb-919f-4bef-b173-f3f9d0691c50", "sighting--173d6bfe-0f70-4b68-bcc8-0a6690a9677b", "sighting--144082e1-967c-4509-9a56-f95334d49417", "sighting--d9013c18-4d16-4249-89f6-41ab91ac35da", "sighting--df00fcb0-e3b1-46e1-abb4-2cae1186bd79", "sighting--8e2e6e0b-956c-4d80-91f1-33e2a031f3e5", "sighting--11820226-a39a-418c-855d-b2347f1b62a8", "sighting--5f050c6e-22af-4b0f-8bfe-4fd193afe44a", "sighting--2fae6718-5fd5-4d8d-b2b9-f8bb2c9b2d3e", "sighting--0ce11388-d582-4bf1-8a75-c6e5317e5d82", "sighting--1aece768-18ac-402a-bd5d-ad5885e4409c", "sighting--c7006753-e24d-4bc6-b804-155eefa44b71", "sighting--da165683-022f-48f7-95d5-5ab886397a91", "sighting--b8027643-6c44-43d9-b002-ffbac286b9f8", "sighting--4a85fdcc-f423-49f6-9b9e-be546a560406", "sighting--c1fc0745-2ff7-4f2f-af45-7687cdccedc3", "sighting--a44977fc-80cb-4de0-9d3e-9aa9ae0ea2ef", "sighting--6886aefc-c00e-40c8-b955-f59761c7ff23", "sighting--8e66c657-84a8-4bb1-9661-392e200c3d6d", "sighting--74f39e20-5e77-49d8-90b8-56580ae642c0", "sighting--0b66bc4f-4f7b-4056-bbd6-5f3ff7f7328b", "sighting--b01720be-4a0d-4b0e-8955-931a8d378a68", "sighting--38b021df-d00f-4470-bb2a-d503459584e7", "sighting--381edc21-7cc8-436a-8888-937494bbdf0e", "sighting--c428d8fc-ff2d-410f-9c79-c449367d3854", "sighting--0efa51bc-25e1-4797-afb9-4571e8106709", "sighting--c99d8755-ed6e-4ebe-937f-c0e1f478b2ed", "sighting--ee160092-ffe0-4881-af44-560838c29eea", "sighting--e2c1d9ff-36a2-4361-b988-a1e841163157", "sighting--2a3ae9df-87f5-4fe0-a92b-42fa4dfae022", "sighting--1307e886-9bb5-4237-a2ca-7988a4ca7355", "sighting--6124b428-50e9-4d39-92bd-cb0687898a3a", "sighting--64b107ab-41d5-4415-ac8b-49de8a8e7ccc", "sighting--991b97ac-1745-407e-b88d-bb5eb706053a", "sighting--b60b81c7-db6a-4699-b524-0596eeb3497e", "sighting--37a6f968-ff4b-4027-8f9e-307568387f46", "sighting--f73edcbd-6941-4ab9-bf93-a13d795f5f11", "sighting--4908129b-1e0d-48da-bab3-a8cac638d244", "sighting--807a1c3f-ba81-4c01-bae3-c875be377ffc", "sighting--964bf6a7-11fe-4814-baac-04529d29b13e", "sighting--4c613cd5-2f1d-47b5-81ef-df50f1895b4b", "sighting--587fc1d1-94e8-40e6-bf3f-2b2845635117", "sighting--b1329229-9b7d-44dd-b248-55764bb29788", "sighting--58635aed-f571-4081-b9e8-36cfa1c2cdce", "sighting--a5964e87-7a50-4bea-ab28-1fe6d7b27a58", "sighting--9d188019-eb5e-4599-a0ef-dcf2a81eb59e", "sighting--f16157a6-1eae-4e4f-a337-5ed0930bc692", "sighting--c86a953f-6720-4d81-b98c-c1beb0896961", "sighting--33a76fc6-7409-4f57-bcf9-c48a2133f6c4", "sighting--c064058f-f6d5-4005-a2ee-b41d1dd81586", "sighting--f0d35123-c8e6-4cde-979d-1679585f1e45", "sighting--07b0d6de-304a-4a67-ac4a-ca6dfbdb49fe", "sighting--9b0fda6a-14a0-4f88-a4a4-9acd7a656096", "sighting--972e3b98-9a1a-4356-a507-0c70d29595d9", "sighting--5916e480-067a-4435-8da1-a31d9b8ad5b8", "sighting--702887ff-c00f-4df5-a908-aab86216b9cf", "sighting--4305cb48-c559-401f-b9a2-ff6904c4966f", "sighting--4d0346b8-1e94-4a04-ade1-a9ca4ce9f62d", "sighting--e6972dc8-903e-4081-9d7a-f9478d707d15", "sighting--be06baa3-fb70-4b6d-82be-c724f3f6fa77", "sighting--776ede15-73d4-419e-8114-29a53bfa2d2f", "sighting--6bcb9821-3f5b-4483-b078-76c233985bf0", "sighting--ccc80525-28da-4757-a351-11141b9aceea", "sighting--e22bb610-c639-448b-962e-b04ed2dc8843", "sighting--9dfed717-d40e-4963-97d0-724039fbd341", "sighting--d13b0b3f-2471-4361-a6e7-acb3a34a2e31", "sighting--fb3654e8-cd09-4309-90bd-3d53958dd959", "sighting--e613b14f-33b2-483a-86b9-d98439af9fef", "sighting--f0a5d518-0eb7-441d-a198-b3d47911dd62", "sighting--89d1e53e-ea71-48e2-ad7a-1a7dc688735e", "sighting--b8f92800-6a18-4de3-9c9d-1835ff594a0c", "sighting--0dc0eed7-f2fe-4b84-8c3c-63912f24917f", "sighting--53bc2069-179c-46d4-80a0-2eb64dc6dfdb", "sighting--992236e0-abc9-42d7-8f1d-63ca0aa77079", "sighting--04759f8d-bbdd-4ac1-9802-aaf73bc312a5", "sighting--a60d02bd-d7fd-42eb-b0b3-575e59b9db32", "sighting--7bb11202-766b-4310-a007-aa61b292ade8", "sighting--29689ec8-1474-4ef7-bdc3-608de23ef7cb", "sighting--9ba6fa63-62e3-451d-8557-2e29530e1c2b", "sighting--f05e781d-cf9b-48ad-b209-0f7cac47fe60", "sighting--64056110-dd7c-4983-84ed-4153a2d7977e", "sighting--847e3a06-c02c-401e-90c0-df3a28891bdb", "sighting--c036bab5-5415-48d0-9a05-3247724fe06e", "sighting--d216e393-e4aa-4a3b-966d-43dba412ed73", "sighting--ee9e1123-d98e-4449-a2fa-08576331d88f", "sighting--19812eb7-d74f-4370-8c22-837a78c1a3d6", "sighting--efe08dd6-6d31-4cdd-80da-e498f495a094", "sighting--13b00922-c3eb-4f4a-9380-e2582e2b03ae", "sighting--939d7707-3577-4bcc-87a2-9f84bea40e3e", "sighting--2cf58d70-8fed-4fa5-be54-e203b39fd95b", "sighting--d685cc4b-fc30-493b-bec9-7c36ffc2aa67", "sighting--617d15ca-0816-4718-99c6-340c44bcb64f", "sighting--e3975ba4-6abd-48f3-9754-fe008455acb0", "sighting--7fc444cc-e5b6-4e97-80b6-a7abdd8b6693", "sighting--5c05541f-fb50-4aa2-a1ce-41f7d317236a", "sighting--a47b3d85-108c-4773-8a53-c94a12491a0b", "sighting--72d67ff1-b7d4-4af4-8a24-a7c75c8dc2ce", "sighting--1aaadef2-e834-490c-84df-15a9236c303f", "sighting--7d7c53e7-ae1e-459b-851c-8a6af5eecd52", "sighting--2dad5c64-79b5-4781-b575-876a97b0baeb", "sighting--9640add4-57a8-479d-bbac-d50020b0058d", "sighting--d679a4f9-fadf-4c06-bce3-891e416507d4", "sighting--7cdc1992-a4c7-4952-8cd0-a6119ac96d9d", "sighting--ec2208c6-4d55-49e6-92d9-8c2e04b929c2", "sighting--65399a86-3335-4067-94a8-f59c254783e7", "sighting--32082d34-f942-4175-ac29-6e2a056b7b56", "sighting--a09a61e6-f180-49a2-a6ff-ab4e1dd5c4c8", "sighting--d74f8e0e-bc63-4630-bd85-138bb2cfba84", "sighting--8d0381bf-3b96-4a37-850b-3025f8920935", "sighting--bdadc669-8b1f-4b80-ba6e-7196cc1dc578", "sighting--ddac69c5-9d4b-444d-afbc-49b0f3f21a9f", "sighting--04b27805-3f91-4f80-9790-0bda11c2edc3", "sighting--d3feda95-4a85-4cd3-9f6f-b5034a60832a", "sighting--8410166a-2e7d-451e-a68a-924b5b9f61ab", "sighting--92d5850f-3ca1-4c2f-9dcc-910e354d2fe6", "sighting--bd33c0bb-d604-45ad-b30d-487c9d732be4", "sighting--db947fcc-1176-4162-9a5b-6f3523c2a308", "sighting--d1e53102-3c83-4315-ab5b-53fe94ab60b2", "sighting--85cda6e0-d8e4-4037-9807-1d47165312c0", "sighting--b3b43f43-49ea-46b1-b23e-810553d2dfb0", "sighting--dd3570ef-4a94-49cc-9346-83aa7a88397a", "sighting--9481434a-b0cb-4c6d-b7ab-c11eef7e6453", "sighting--2a8ca2e1-7a6a-41d7-8ce1-a0560ff4ec5b", "sighting--ab235811-c3ea-4ff0-909d-5d379d23876a", "sighting--da228b40-8558-4da7-a248-556ca99972ef", "sighting--70a5a3dc-dc97-443e-aa8c-f86c0baec976", "sighting--1c5afa0e-df1c-465a-82a5-4ff95e068434", "sighting--12250b65-b69d-4de0-a935-e3461894cafc", "sighting--4c28014c-9746-40fe-935a-fb5554bc0add", "sighting--fedbb97c-e619-40bc-a4c7-b32589ea0e66", "sighting--86766b41-8bc0-432b-b9b0-966c633add77", "sighting--6306d295-3dab-4ce8-bb98-16702e8b0a2b", "sighting--b6a91732-7f83-4b2b-9c6b-1885ef68799b", "sighting--17d21482-2f2d-468d-9cc5-1a4aea891178", "sighting--e37e0fa2-151e-48b3-a817-daced6670ae1", "sighting--e5aff3a8-62be-4d3c-9783-f237d95a9172", "sighting--db66b701-878b-46d2-9fe2-aac4d7fd8817", "sighting--3f18fc0e-5ddd-4af3-a6ea-fe31792b5f1b", "sighting--e22d7631-94be-4d58-b7f8-279ce79ebb72", "sighting--285b5656-1fac-474a-bc56-89741f64994f", "sighting--4cf83744-bbbc-4e0f-a482-6533adfb4366", "sighting--20d412bd-c700-4a33-bb82-5a99f55d2502", "sighting--6b3ab49c-1a0e-4331-8107-55f376f7b20c", "sighting--a291e7f5-f6c1-4d7d-9075-fb13d166f262", "sighting--d8baf727-ee8c-4c7f-a0d9-ad0622a8769c", "sighting--e4240f14-60ec-49f1-bfe6-849b263df0a9", "sighting--bc80cba6-54a5-4f9d-a14e-469312c25ad6", "sighting--238378c6-fa70-417c-85ae-4e50916fecb1", "sighting--71325796-4a50-43f7-a22b-85c920268111", "sighting--a5b1d1a6-7e87-4529-bcb4-f3c5a3d530a8", "sighting--ac98f176-bdf3-4308-bce9-604d3314714e", "sighting--12c145af-8a6e-4b5b-8881-e1f0f993c75f", "sighting--6a9ef160-ac73-4e6c-86ca-f7eac2d0f05d", "sighting--b183c00a-c27e-4f10-a35b-a3817ab1820a", "sighting--8e30ff5a-de8c-40b8-a693-3135eaf5e481", "sighting--4f9f996f-5369-488a-9703-92d4b50b3399", "sighting--31465cfb-1d98-4367-9707-0f79e830e6f2", "sighting--7febd0bb-e6c6-4b40-8138-c2c5dff45ee7", "sighting--5255c3d0-b3af-49f6-b03d-8eb6b9944986", "sighting--019472e6-3092-4e51-a349-730ce59a0b0d", "sighting--4903bf3c-b7f4-4550-a55e-dba10435a92c", "sighting--12b55942-2bba-4c72-b4a6-64cd24cc9005", "sighting--15bbdd6e-173d-439c-b743-ad7f5854c622", "sighting--507420c7-b26e-4e17-a1a6-10088f86cbd1", "sighting--9878858d-896a-428e-b2e1-1d4f43f943e5", "sighting--5c8adb25-709e-4b48-ae6d-98e61c3c41e7", "sighting--22227c61-b025-4ad5-896b-9342c63e2032", "sighting--64060ff8-49a3-415c-84aa-f8b6b2a6f152", "sighting--b88f8980-3c57-4411-8718-be6af1998e77", "sighting--ecd14ed7-5220-4170-a416-f499aaa152cb", "sighting--e6ea01d0-377d-4554-895e-6e4c235bcf17", "sighting--f7714f60-6c56-41b2-8ccd-ec6c76a86fc7", "sighting--afc9ddb7-eeb2-489f-b4b8-d8028fe81998", "sighting--ad5125ff-1ba3-4cdc-b7ea-18d915aa4230", "sighting--45bb412a-01fa-4c64-a75b-2565d4f324fb", "sighting--df9e9324-3b6d-4462-9efc-aba26494264c", "sighting--6f7342c0-8396-411b-911b-c461bd4c57e6", "sighting--cf86cf3f-b1b6-4284-917d-75e180a7a845", "sighting--32ff8b03-1ebf-483b-ab0a-54e6d94d3db1", "sighting--ba78c2c0-c9af-4b7a-a535-09743a12c18f", "sighting--6aeb9c24-43e2-4c6a-b897-4fca667453fa", "sighting--1296f12a-5338-41e2-9b78-6ae41df79965", "sighting--d2636e9a-9c3a-463a-8d89-2410408595e3", "sighting--858c04ac-7e22-48d4-9629-56952beb156a", "sighting--7df8f090-5986-4e4b-bf22-99549645abf5", "sighting--32a9062d-e3a3-44aa-967c-cce561b7c6ed", "sighting--f45571e8-adbd-47be-a4ac-9db6732a8a4a", "sighting--ddc60426-74cf-4645-830b-9b693709bd6b", "sighting--75f03239-3e80-41bf-9ef7-7cebbbfdd252", "sighting--5d156813-7057-46be-bae8-dcad95b13c30", "sighting--dbe40188-99b4-4453-b389-b11666321b55", "sighting--3fbb11c3-f8a9-453e-9271-a0481565720f", "sighting--6c86ed68-9322-419a-b649-1656d7f3ca95", "sighting--076f9801-ca8e-40ff-9355-463863d3a333", "sighting--60436360-052d-4d08-a10c-5fc9205ffa70", "sighting--70ffb510-e09d-4fa1-8313-dac83cb5eb13", "sighting--59520eba-fac3-4514-a7c0-1478ac86f6db", "sighting--9558da2c-0587-42bc-a0ef-d1f6380f2d2a", "sighting--9cf2694b-54ac-439d-a114-9c1ddb0627b1", "sighting--c5022c0b-e1ca-435c-91b4-edb5390df6cb", "sighting--188fec47-0e82-43a4-b28c-de4672e75b86", "sighting--a2784106-ecb3-44f1-8714-6a7918c732f7", "sighting--fb4b7fa4-b455-4a7a-8ca6-a572c5651be5", "sighting--dfa24a11-bf28-4484-9e70-a95608d79b96", "sighting--f3edd0c5-33e9-48ed-99ef-f4fe0e464280", "sighting--26528be1-241f-43b1-bfb7-d5887a177bc6", "sighting--53568705-6b36-412c-b72a-348510075bf7", "sighting--44e16625-55a6-4f59-a727-16ff8e94d565", "sighting--dbc57049-acb3-482a-b72d-e7d90bc3ca4a", "sighting--324a78c1-68c0-4173-a1cb-d8c4a5f5ceeb", "sighting--07ef2f3d-95e0-48a8-9ecf-202eaca4ec17", "sighting--da5133eb-a037-4ed8-ae4d-0c34229ec521", "sighting--8f8781fd-355e-4655-9eda-99fc5ce2898d", "sighting--6bbf2ec4-7b5f-498e-8029-41f92b725016", "sighting--0e33162a-09bb-4af3-ba6f-107d66ff3415", "sighting--7fac336b-68ae-4ebe-bddd-9a968a99d3b5", "sighting--2ec66ca2-ad53-40a6-aa18-a94118c08778", "sighting--a2f111c6-d64e-4142-84bd-b83fa933a3cf", "sighting--1ccfe030-81b5-41d0-b119-fc361f8f0469", "sighting--49a8268a-b671-4b4c-aff2-9ffecc07a5f5", "sighting--4c8fe338-ab8b-45cb-9a1c-3ba52def7a98", "sighting--acaac91d-2910-4ebf-9290-98e2275aee5c", "sighting--55cb9df9-12b6-4f17-8bb5-429aec7c7ee2", "sighting--16170408-0921-46bf-a57e-e664db6d6717", "sighting--6448a150-f126-4c45-bc37-1fe087743b5c", "sighting--ce99aa7b-24ff-47d9-af03-27a94fee6d7c", "sighting--be83aa80-a188-43aa-a33e-102c70ee5dae", "sighting--e55d8acb-0625-484b-8543-2d087f848dff", "sighting--8d194af6-3056-42b1-8456-ae2c380eebfa", "sighting--86086f11-1b84-4374-ba65-da83996c3e19", "sighting--1decb71e-10c2-454c-930a-8e5a522f4832", "sighting--5a2de081-48a8-4ab2-b3b7-0a6b99961325", "sighting--cde410e7-522d-422e-a54f-7d75bf7eb535", "sighting--0a9cfe0c-bead-48a2-936e-3761e490ebd1", "sighting--c17d779f-597d-4abb-af21-396aa80e1088", "sighting--c60755b6-e512-41b3-a178-0f57ff7a38d1", "sighting--c1a1643e-1126-45ae-9220-c956ebe8c3e3", "sighting--b178ca57-237b-4773-bfbc-3011793d7b41", "sighting--5987a0ff-fd64-42fb-b5d4-083250b13920", "sighting--48a7b2cb-dd66-42ec-8b1a-b85384ce9fde", "sighting--a440a531-4a3d-4777-982a-3492c203ba9c", "sighting--90a2de92-088a-48fa-95ef-cbf1f65a94cf", "sighting--9098aee0-bb02-4b54-ada9-1567d4aa146d", "sighting--3bddee3a-1e4d-437e-abeb-ffb173b3e950", "sighting--6fb0ca9a-3f63-4016-98d6-fb09ec702bf8", "sighting--8287b32a-c4dc-44e5-8ab6-ee5eb3b5f5d2", "sighting--3485966e-04c7-4476-ab9a-9e7259fb55c4", "sighting--1883f8f8-f3c8-4554-a61e-dcfc5ba6dea5", "sighting--27825e6d-0998-4e1d-a5ca-1f3ea702c599", "sighting--b8e775e9-1f02-4c77-a999-8ec1c9266108", "sighting--51db71b1-b299-4a40-ab26-47140b5c8757", "sighting--9dba812a-eee8-4d10-8502-698cdb137ca7", "sighting--47fc9579-f009-4e8c-b2ed-921e2e875642", "sighting--94eb57d5-9413-468c-a5c2-395794cc341e", "sighting--dfd6b86c-efa9-4608-a494-12e9af999338", "sighting--cfe2907b-8e40-4100-ae45-05132d5d861e", "sighting--143aaa93-c088-468b-bcb2-03268d878cee", "sighting--ef58edb0-511c-4df1-aedb-4c69acfef523", "sighting--cff3f822-93a9-46e3-a622-cfadba394021", "sighting--b8a474e0-d93b-41e5-b122-ac44319e66b4", "sighting--537cdd33-462e-42bf-a65b-8b26543b2848", "sighting--02a71e95-2d55-449d-b4a5-2ff194adbb45", "sighting--00d9c338-b6cf-48cd-a984-66365b593494", "sighting--6c7a43f6-356f-4629-abdf-9dea8b45cf90", "sighting--ee34613f-a37f-4688-8805-2dd70636d193", "sighting--017a6d9d-7351-4214-9bd5-dc7807e3c992", "sighting--c77784f7-6775-4d55-bced-9cbc87bec6c1", "sighting--c9d9a5cd-8dff-43da-9ce6-73985d5466ea", "sighting--5c9c8246-07d4-4733-bc4e-c5fa81695434", "sighting--4c2b1206-b0b1-4390-8f95-9282d35b6659", "sighting--a2091480-ccc7-4f23-aa61-9d14742e0e70", "sighting--60b1761f-8221-4f8f-b3d1-9ab7f6b9420b", "sighting--340a3214-5045-4a0b-ba8d-d8828fa1d81c", "sighting--5747058e-4afe-4701-ac6f-3731ff58e76a", "sighting--a0174fea-1a4e-4ab0-aaaf-52200226dfe2", "sighting--71df91a3-a0d1-47ed-b1a7-5c735b339d0b", "sighting--88ebd0c2-b67c-47f3-87eb-3898ffc501d7", "sighting--97782ba5-fc4f-4a76-b5c0-2c24a94c9295", "sighting--d5f855c4-1e94-40a4-aaf4-8efabab70a0b", "sighting--10db23c3-6fdc-4921-8b00-e93dc0f089b8", "sighting--e9a16928-6154-4f5f-a680-82acec2a211e", "sighting--40b37589-8d73-4861-84c0-895a08e97121", "sighting--dde22446-67f4-4263-b435-0d72627ace36", "sighting--936bc7ff-5ff7-48b6-ade5-56492288779c", "sighting--9a4d96e3-f0dd-42ad-a9df-8757db1eb930", "sighting--f77a20d8-f368-42bb-b3b4-b0b507f43f22", "sighting--5a8c4be2-147e-47f7-84a1-f0752eaf481a", "sighting--37af5e13-0597-4c8c-b2b1-6ba3e465024c", "sighting--1e3001cd-1239-442d-a1b1-48fe5c1d2b39", "sighting--b70619a5-eccd-4212-b317-686a78cd25df", "sighting--ffff3367-5353-4d34-a826-e3c33cd4f82a", "sighting--7a6f8681-a5e9-42f1-9467-dff156b38ae1", "sighting--258247c2-9ed9-4921-a2b4-e62ffa1f3dd7", "sighting--edbfc8d6-e0fc-4697-a992-eed16d9e5fcc", "sighting--37893dae-c91f-459d-9c8f-22a85beadffe", "sighting--c79c4020-2ba1-4979-8b4a-c5c9b39f28b6", "sighting--432fa50b-35df-4634-bee5-959ff365b832", "sighting--e43b3f62-69d9-4fc2-a496-a796a57382af", "sighting--70c0d886-0441-45d6-8c81-9ba3f9ed15da", "sighting--a165e839-d048-4b8e-813c-39426510c818", "sighting--33f3df25-c33f-42b0-9b14-5a189f2857d1", "sighting--396bdedb-47b6-4e66-8332-8243e523a11a", "sighting--65da7d77-cf2f-4a8f-8cf3-d6b0aff71880", "sighting--61582a63-d5bb-47d5-92c8-64a0bf871752", "sighting--4b6f0cf3-d783-4da1-a74c-5749c2eac92c", "sighting--92dffe14-251b-4159-a518-62fcfb77eb41", "sighting--deae0c18-61cf-4ddd-9379-42da2b3f1954", "sighting--50ab4049-47e6-4548-948e-2366890e2375", "sighting--d4bb7c56-0689-4756-9c5b-1f9f32d57207", "sighting--6f016b32-058f-4aa1-bb8f-d13de6700aa3", "sighting--0f758c94-7b0a-4720-a26f-a3a76b0dd0e9", "sighting--f9567991-bd12-4f59-a771-78a37485abba", "sighting--58d2a18f-a384-45bb-972b-8ecd0821dd16", "sighting--92aa7539-2344-4c77-a019-a0b0d67e4d68", "sighting--44540b93-db06-4ba2-b81a-c0a6624ed4ef", "sighting--44449117-b21c-4c76-8d38-280408ab8c10", "sighting--f12c1bb0-ab75-46d0-8879-02e28d586d90", "sighting--da944fea-8569-4423-a1c6-434801868f5b", "sighting--3bb8e4b5-b51e-44c7-a481-3da7f156a850", "sighting--21706920-12f4-4bbc-a152-c71672f3f864", "sighting--553352e9-7b6a-47d6-a474-3322c9df7a0a", "sighting--554eab67-cf92-49fd-93cf-33ded80be4d9", "sighting--9972c967-81b2-480c-8921-8fb5737f5562", "sighting--02a925a6-6aca-4522-9136-b10031a2f80f", "sighting--c14c738a-4bd8-4010-a8cf-ab81a9a7ec64", "sighting--77924020-bf6f-4daa-a247-d96e507dcd2d", "sighting--ca9fd212-700f-425b-9ef9-7631bef307ba", "sighting--0561eb14-7015-47dd-acc2-210963e7525b", "sighting--01b5716e-c520-4cc3-8224-53ea82e6a828", "sighting--81cba0b5-44f0-4c5d-81b6-ef3536037a97", "sighting--3d4323ce-6c4e-4977-8655-5d4b6672030b", "sighting--18620d5a-b8cb-46c3-84c8-2b9a844f7ac0", "sighting--d84f4551-6527-4e33-8365-8d1969a4e85e", "sighting--9263ab32-0cd3-4b6e-8094-749ecc10c201", "sighting--3b32fec7-70b7-4533-8c5d-da374c1a468a", "sighting--18b5e102-6594-47a8-857e-910bc8bd8c77", "sighting--be399189-e55e-436d-959c-77ecdf639493", "sighting--5a1b7897-9cbb-4f35-a283-9599a9f08c62", "sighting--6d47d258-dad2-4814-8217-05af2422d91c", "sighting--babd8df3-665c-4bf5-91b7-c1e35107bc84", "sighting--c2b2f2d1-81c1-49ac-82c7-e99bc75c844f", "sighting--c0351968-cc6b-444d-8a07-2e052a3aa952", "sighting--85908920-a9c4-4f4b-b14c-54134c7b413a", "sighting--0834e433-b0ad-41f4-8cdb-efa2367ebeed", "sighting--036676d8-02c1-4efc-b282-5547e31837b0", "sighting--26f23376-ea17-4496-bfb1-bb78d70a740d", "sighting--c4b35154-2cd3-4460-8c98-a4f2ee3252f1", "sighting--c5d6ff7a-f257-42e5-9932-8063431fe63a", "sighting--6100baa0-cfd5-4c47-bfe4-2f4c133e1b1b", "sighting--2da8848a-3298-4c97-b114-e7e39430ce95", "sighting--7d36df6b-7e77-43e4-94c5-a0cbd9a72091", "sighting--44655a2c-25a1-4446-85aa-50153952b221", "sighting--8ccd3aa5-4342-4154-b9ce-154d1d494716", "sighting--5593f2df-0fbe-422e-b15d-f5e6d0da421b", "sighting--02549184-657c-407d-b072-6c95579b633a", "sighting--8f081e2d-de71-456f-94ef-8953cb42708e", "sighting--1d9b6b3d-7c57-4d37-8dc7-f7fcfb473513", "sighting--c530e39d-d2a1-496f-aeee-4862da2944d3", "sighting--019299c6-d453-4b0d-b5be-03bdcfeb909b", "sighting--35d58bc7-29a5-43c0-84cf-baeb347e7bc9", "sighting--31677841-a501-4a1b-b13b-01c748481041", "sighting--591f54d0-7bf5-4405-82a6-da8dc75b711d", "sighting--ff79c26f-7bfe-4153-a536-db164e7134db", "sighting--c7047ff4-c767-43cb-90b1-44278fc171e0", "sighting--c2329c64-0b68-45ed-b05c-caab85171954", "sighting--575e5755-f614-4798-bb90-9530cd04ea86", "sighting--fcebfa72-6a74-4298-a170-94a67c0af18c", "sighting--60aae0fd-6484-4b46-829b-72127e7dd251", "sighting--eaf6cc2a-4b7c-490e-bb47-01b058d4cf29", "sighting--69711b92-356b-429e-ae6b-243e0ce45efd", "sighting--93675b03-3fa7-4dac-bd89-5c38a19d6fb8", "sighting--1cf2481b-ee18-436f-9db2-5876ca8b7eb1", "sighting--ef5d8afe-95f2-4bdb-9473-d04cb20a6624", "sighting--72c6237b-6233-46e6-9fef-05a3eae11024", "sighting--7d3d71fb-2b78-4ef8-a854-0c0f85146117", "sighting--40dc1cf9-e8f2-4f1b-8afa-097ade4584a8", "sighting--7600ce9a-81f5-45be-9089-6cdc0b251e62", "sighting--e51cff88-fea0-40db-8dfd-59fa1efbbc9e", "sighting--70e34b5c-a83e-4aef-accd-6d31eb45595c", "sighting--85533d4f-b751-47e3-bc66-46d0e44cbe9a", "sighting--4dc2b2aa-4999-4029-8728-6a1e725ea378", "sighting--83f5e67a-0171-4cf9-935c-8ae7a2ac78c4", "sighting--e4a9c127-7f57-4835-a72b-9454b04b4cb3", "sighting--b50bc735-280e-4a10-8865-4827f8b75563", "sighting--951ceee0-1cb2-43d7-92d5-d42cb6635481", "sighting--c8a0b8ae-225c-4479-ba82-c26f2a310c74", "sighting--d513874c-e154-4543-862c-82dc0c831e17", "sighting--d0e5af3f-2760-41f3-84b0-7c5f37534f55", "sighting--135e3b6c-3f08-4c55-84f6-4161b716f74d", "sighting--6089517e-b944-4e84-899d-0b6f932fc7f4", "sighting--c42e829f-5e3a-4910-8b64-d060df08114f", "sighting--d67cd727-b7e1-48d2-9460-ec406d4a4ebb", "sighting--4257f317-dfaf-4132-9dc9-8dd2d78ecd31", "sighting--d42f59ce-62f5-43ce-9bf4-500a3a0221b8", "sighting--b16884a0-151b-48bd-b520-6d78de3d0b2f", "sighting--113b95a7-9f5d-4f53-a7ab-865d3f3c765f", "sighting--8f09abbb-6f8d-4e53-82fc-455acbf5f7dc", "sighting--4dae6bc1-ae19-4692-9e72-93bbccef1a67", "sighting--f67b5568-318e-46a6-96e4-6653ac1865cb", "sighting--1b40b3f1-5f73-4f14-9781-862174c5d997", "sighting--8e49d21b-8f6f-4929-a06c-16eeec6d092e", "sighting--40052636-13fd-4c4d-bc28-acecbdfacee0", "sighting--340f385a-0bba-47f9-9613-3254a1eec865", "sighting--68235648-bf2c-4212-a04f-bfa422dda9bd", "sighting--d309fbdf-075f-4836-a0ff-ad40993d9e98", "sighting--2798a98f-ba43-4a45-871f-0e68629c0f79", "sighting--fcabcf64-56d8-49bd-bcab-5b6942f2a2f1", "sighting--d9c254cc-e3d7-44f1-9f6f-5010f5f6e6f7", "sighting--71440a39-7476-4853-a77e-dd9ec4fb65f9", "sighting--9f0383a6-89d9-4a97-bfc5-05e57e10239a", "sighting--25827f95-57ac-431c-a868-c3688a14299e", "sighting--455788dd-4977-4fc4-812e-40543d1e8352", "sighting--ff4caef2-d5bd-4814-85a8-ca26f151a5f6", "sighting--7e664376-c4e0-4cf0-80af-86489c0b2158", "sighting--6de984d4-52fb-495c-91f4-9dac45be8389", "sighting--9317b9bb-7340-4ab4-a573-54ee66b59657", "sighting--12e71137-2c8e-458b-aecd-e6b07960a856", "sighting--2a8fb275-aa69-4f83-8c03-6eba6f6074fe", "sighting--53a8f2b3-35f2-4813-acbc-71598e5f885d", "sighting--8721b4e6-e304-42d3-808f-79cf65b0ae6d", "sighting--3c13d507-7962-4721-ac7f-14d3b4017ef5", "sighting--5dcec3b0-3282-472c-b45c-36b48b80c4cc", "sighting--3bd60d66-8e1d-47e8-b895-3c4f847de1b9", "sighting--252677a6-941b-424d-9ced-5d463bb0e69d", "sighting--72559006-5837-45a5-a3b1-319bc214a8a5", "sighting--8c497750-5338-4c73-92a6-02293d547d3d", "sighting--05135967-024c-4c8b-8d62-3d1e1b7d634b", "sighting--4e1b87cc-0be5-47b9-be11-20fa912bc5bc", "sighting--2ef90188-c4a8-4c69-a9f8-efcd2de06e03", "sighting--fe893604-7f80-4ed5-b2f8-412298d4aebe", "sighting--1783298e-7bf2-4442-b0a1-250bd992abf2", "sighting--9ceecbaf-3595-4127-a564-3493903d7aa2", "sighting--d0b9e64f-4baf-4534-923b-4887895ef53b", "sighting--0ce7a806-04ae-4ba6-a763-9321900396db", "sighting--aa280493-d44d-457e-af15-c9503ea38168", "sighting--adf4ab6f-d1e7-496e-996d-ae245f7886b6", "sighting--1c331d34-b1d0-40be-80f8-4cdb8c54db7e", "sighting--38137560-6e0f-4492-b98c-b53d0f177aba", "sighting--a2df9281-3200-4ec3-a7ae-612d5d162f2b", "sighting--6d4ee918-64d0-4a76-8af5-7b0dddfa8158", "sighting--1912b7e5-52e7-46fa-b8b5-612f3d87b89e", "sighting--6f5f3c90-cb22-43ef-b763-9ec026d5cb29", "sighting--4efed9d6-1b03-42b2-b9dc-6d67ab38c6b8", "sighting--cf656556-07eb-4f0b-b3ef-5b3452d7e71a", "sighting--e7a5ea0b-14b2-404b-82b7-7e4050208300", "sighting--7c3e4d6a-7ec2-42e5-b13b-12a5f28e3a86", "sighting--ed335485-0ed2-4725-92bd-d1076b10e2a2", "sighting--428d9880-2c3d-461b-bc0a-0f983059f381", "sighting--58062d2d-8a31-4aba-a615-b391b9f02d82", "sighting--36c3d8a6-d00d-4ebe-ac86-0781e0890be8", "sighting--11e539b8-70f8-4a44-ade9-8e28bb5f4da3", "sighting--5d54180d-37ed-4719-8f55-58170925e2f3", "sighting--5c6c77e6-59f4-45dd-a904-8b2d0d19666a", "sighting--b8cc7e9d-d16c-42bc-a0fd-0710f69787cd", "sighting--3216d843-8533-449b-a04d-4145c90c187a", "sighting--33d99ece-28f1-46eb-aafb-1496667ce9c1", "sighting--c4d6e16c-9257-4073-ade7-9436f43952d9", "sighting--9dc1e059-5d5c-4735-aff5-715e4738d58c", "sighting--8fcacfb8-37aa-47d8-b9a8-bbf2831227f2", "sighting--2d4e6129-3958-4a81-8211-3b22b54734b0", "sighting--98feadb0-ca39-4c8d-b0e2-1499ddc370cc", "sighting--841d2796-53f7-4a88-b14e-7ff0c812b0a1", "sighting--758a1b02-2228-482e-9ad9-51aa71028612", "sighting--2049cd19-2036-452b-8593-012b0ab82184", "sighting--67e9c862-e166-4225-870a-4c704c542c2c", "sighting--1623f7ca-7870-40de-aff4-ae8612fe537f", "sighting--0981fb93-cb10-4bb3-bd7f-861e6c7ff1d9", "sighting--a1b7b87f-7574-47c6-893f-33cb08df86bb", "sighting--7b8493fd-eb51-4c00-be1f-1f4d199314ac", "sighting--a5d87337-fd9d-455b-8956-3c70568e2ab9", "sighting--7dce9e50-7ac6-45c1-ab0d-558b8416a2e0", "sighting--ad0eeefe-0b6e-447a-933b-a90d87733804", "sighting--62f10144-a695-4979-9bf8-7ab98041670e", "sighting--2f2d07f2-7158-4e14-af0b-370338bc3718", "sighting--cabb8030-4569-4198-8ea3-90807fc57837", "sighting--db8b996c-3e57-4163-8009-3991161ac2b5", "sighting--ea835d66-9b64-4ed8-aa93-ebfccda9ecce", "sighting--dd40ce83-0a35-49f5-84b9-430cd6988797", "sighting--da054033-0eb0-433b-827a-fd88c4c5082c", "sighting--47f86e5c-26ab-4c80-a444-f071fb507a2e", "sighting--5ce71a6d-4e0c-4032-9a1e-f261718cf20d", "sighting--e2dbef89-3a8d-405f-8d4b-f17b39bbd808", "sighting--968f81f9-1db8-4f17-9704-9a18838859e1", "sighting--649c9398-6d84-423d-918e-5caec1639e1e", "sighting--94b014a0-d254-45d0-9de8-a7b05eac8543", "sighting--afd42246-6299-4b82-bfdc-04af25375b6a", "sighting--0e7784b0-6bde-451b-ae79-bcbef82146e4", "sighting--1529d7de-73b1-4906-86e4-5ca646cef4f5", "sighting--e3cf7dc3-1b49-45af-a05d-9e0e38d370ba", "sighting--f6bb0120-8fdd-4b90-a02b-0811123e0474", "sighting--ec451225-34f4-41ed-9149-ff19049a2ae8", "sighting--e83c535a-dfba-43c3-8529-fa8f3ba2d9a7", "sighting--37f9ebcd-e231-4d0f-bd00-6aeb460074e0", "sighting--1d8a9a1e-678f-410a-8464-2d4b34b98e2e", "sighting--8e43b694-c25c-44c2-afb8-d13a5f69c7cd", "sighting--9952465e-950d-42e1-ae48-5ef84b3b67ac", "sighting--8b064051-af0b-492a-b9c0-ada773278eb3", "sighting--6ee8982a-20b2-49c0-9045-8abf183704e2", "sighting--965dd24a-afde-49dc-8ead-ddf1198cf59c", "sighting--3d38bdce-7946-45a7-a7a7-bb439a55182d", "sighting--887e5a28-5a3b-485c-a0c4-39fb9c73b9c4", "sighting--1ae80104-da87-470d-9af2-0f8606c940fd", "sighting--9db051d5-f404-446a-8936-9830c5b4fef4", "sighting--3bd2f338-9720-403f-97cd-d6329fe20b18", "sighting--1b5d5be6-d7b3-4244-a150-21f7acbbaa40", "sighting--f3bd50d6-7e10-444d-a5d7-be9b16c65e91", "sighting--f36a606e-b076-468a-bd4c-41329bebc157", "sighting--19be1b33-090a-49bb-8ad6-e6ac9e1542fa", "sighting--68670aa6-6306-4ff0-9a16-f69689931fdf", "sighting--752f9788-5bf4-414d-87a8-4f511b3d56f7", "sighting--86b5bc83-803f-4fa2-a22a-f486e3aa19b9", "sighting--78bde92a-6e7e-48b6-87a8-17db584eb8b8", "sighting--cb499501-bf63-4fed-849f-a6fbc95f5440", "sighting--86e71572-86e0-4360-9f99-f76e2bf72c67", "sighting--07b94aaf-63cd-484e-9e14-5e10c36186c4", "sighting--f351340f-6b5a-4d2e-80e1-53af0b025139", "sighting--2304b493-fdbb-4929-b127-38d3690133a7", "sighting--3e705850-1afb-40c9-a568-9017e3e11ba7", "sighting--8588d750-bd4f-4b79-bfaa-b0f6b739e70a", "sighting--232af4c4-6a99-4ab4-8569-4147f5df19d3", "sighting--9e5968e0-1d9a-419f-a015-b37af8f520a9", "sighting--a1b07915-b447-4faf-9c49-86293bb42271", "sighting--edf30799-f4ec-4f38-8c14-64221b8d3aec", "sighting--83cc5ad1-f541-40c2-bf19-7f794831e4a3", "sighting--a9ef2cda-1198-49d2-bfdd-26acdcd322dc", "sighting--4c7af1ff-fb92-467e-a52c-39e0b7fd9ff7", "sighting--87f0e6c5-6093-4f6e-909e-787de739cb0a", "sighting--6e507e4c-1d88-4b49-9587-4462c8a08273", "sighting--d8728215-7fa6-4219-9302-43f0f58c6edc", "sighting--12964045-f22e-456d-9518-ffd894067407", "sighting--866e2fbb-102e-41ef-b0a5-55898875f437", "sighting--1e8e0ae2-6834-447e-95fa-13e5aa515d70", "sighting--abec567b-ccfe-47c5-a441-78975ade46e7", "sighting--f352eeca-84c4-4492-9027-580ee15f30f5", "sighting--09c135a0-2f86-4bdd-a4cb-6947777fea8f", "sighting--18e1aa0a-142a-4da2-bb32-a655b89e3ea1", "sighting--e57b81d1-b7b8-4a2b-b093-ed12f794f02f", "sighting--3e540712-1344-4db7-a2a2-07adb51f96a3", "sighting--65cee50d-3950-4905-a2a3-b12881b2a927", "sighting--44334c9f-ee76-4a2c-a1a8-f4602a554aaa", "sighting--d639f787-4a01-4eca-ac80-c8d7bfaf612c", "sighting--80158565-ade7-45c9-90ea-98a794cf4bab", "sighting--ea5edff5-4326-439a-8394-1b0b5e9daeb1", "sighting--5ee2e612-2783-4517-8613-7315c203cae0", "sighting--05198322-5cc7-4434-805d-5e7769eb8120", "sighting--583fb0f7-2681-4d6b-a251-48d719004208", "sighting--7644c486-0ee6-4efc-a241-667c6f7218db", "sighting--195d00a8-99e3-42fb-ba8b-e538ad468fd8", "sighting--f7d24a71-b330-41ae-9c58-2e3bb03b8896", "sighting--61a128c9-e919-40a6-b3ea-3bd4ffad0f7a", "sighting--cd67584d-b973-4bc0-b96b-ae190d195870", "sighting--258b060a-f665-44a0-8b80-d8f9a100bdd2", "sighting--0fffd119-d36d-4a0f-ac1b-fae3991ea8cb", "sighting--e92f5378-06a1-4ff3-b521-934b3dd66128", "sighting--8a9a8886-674b-4a42-a393-bce64ef5c8b9", "sighting--1a531242-1855-4feb-81fb-1d726b00c62e", "sighting--76b0d423-d2e0-4f4b-9238-1dcbcb8de9ae", "sighting--296cd4b3-cdec-4cba-b40b-f95183eeecd1", "sighting--f81add88-5bb4-403f-9fb8-5b2258f53bc2", "sighting--d1acb5e3-8e91-442a-b0bd-bdcdcf1c99af", "sighting--928d0e13-372c-47b8-978a-4d0df51ba730", "sighting--81fb077b-f49a-4f7d-9bed-ce89cdf7bcf6", "sighting--80cda261-a143-405c-8b33-cd52c2c71842", "sighting--c77f467e-8c61-489b-b734-d996f724604b", "sighting--552dd8fd-fcf9-43e5-9340-c73ff8ea9276", "sighting--0d86cef1-fb8b-4eb9-8aeb-f90e87ca6a60", "sighting--e597dc6f-4221-4abd-99b6-4baf941fd110", "sighting--ad74cc14-bd6c-4798-94f3-74e1c6bc2a42", "sighting--28ce2e45-df90-4799-9bc1-39760165959b", "sighting--0d4fc47d-5cb5-495a-af03-58e6b4b6bfae", "sighting--40923e55-f6b0-431f-baf9-7d74f841f556", "sighting--0707a5ec-0726-4fa2-9c76-df7f49ae0d76", "sighting--7995d74f-e2c5-403b-a849-941e2cbef714", "sighting--4f0c7aeb-342d-48ad-a55a-0569c8cd0fc2", "sighting--b8bdb0ed-564a-4861-85d0-4304af15d02b", "sighting--ce3a7ba9-6c70-4f27-baf0-5374a9390219", "sighting--edfbd9d0-22f8-40ea-8b79-24d46717d3e3", "sighting--4651d95f-92cb-41a4-b60f-914a0c670c5b", "sighting--73be33d6-79ec-44fd-9b91-8a8e37c45afa", "sighting--3ec6c850-9c80-41ee-93b9-f1da5c7cfcb2", "sighting--0da8fa1a-5593-4b59-8a69-54ceda4d5450", "sighting--e0971e3f-fa66-48ae-b529-65e5bcbabeff", "sighting--795b404f-cbb8-410b-a625-3905f77a470a", "sighting--740ac488-c836-4b0d-a8e1-65a306d27bc1", "sighting--a8d49042-c81d-4c78-aa21-99bf05363517", "sighting--19a0e043-3fa7-44e8-9e0f-cc45ea26c1bc", "sighting--d226ad0b-9ac0-4ed3-bd29-87e8b63a06b6", "sighting--59d412f6-1751-4124-9f7c-b97ce40d2e0d", "sighting--54e90dec-bbf5-426a-8aa5-0e75e5ece754", "sighting--6799b150-9ff8-412e-8804-1c98715689b9", "sighting--8b447e27-0822-4eba-92b3-05cfa5fb1f71", "sighting--05834015-4779-4c02-8402-e947166a0a9b", "sighting--2dfc7f84-7717-4c88-a055-714816b29d7a", "sighting--19ab8ed0-a6d9-4a92-86a7-c6181272d4d3", "sighting--0958599c-ef7b-47f7-80b3-44930d23b41c", "sighting--1fd1c2db-9827-4917-a36c-6b10c8f67975", "sighting--fd07e2e4-60b3-4436-9a3c-02daabda8c36", "sighting--a6d0bb80-f64b-4fca-b1a2-f50bcb3667de", "sighting--1adc39f0-2547-4005-9726-426c7b491047", "sighting--8e66ef26-d96d-4fd8-b03c-86483b142e50", "sighting--fb3303d3-6884-4832-a5a0-9d45e53dbfea", "sighting--945923f6-9e88-408f-90b0-338679732f8f", "sighting--9b969529-c0bc-4431-bec9-28bfe741239a", "sighting--01b9b849-b3de-4896-93f7-c28c59cf8c6f", "sighting--e0d6be57-836a-4fd0-85ad-715c2b0de103", "sighting--8c9a8edf-06aa-42c7-a74b-dbf594450f95", "sighting--797e912d-3b9b-4b03-b174-2941bf1d6391", "sighting--0dfb01f8-8c64-4061-8e1d-2a046d04fc4c", "sighting--62cc21ad-ee59-431c-8e62-a2a24f641027", "sighting--bf94b600-7e57-4b9c-84dc-b75f014f4080", "sighting--a39372ef-188e-412d-8ac1-5a22a49daf2e", "sighting--fc338e78-36a8-44f5-a518-0b2d5af0ab19", "sighting--bac9d0db-a3fd-49ff-82a1-f8a436d1cce2", "sighting--39aabaf6-f60e-4d3b-8689-ec527305d427", "sighting--c69e5c35-bcc7-4fd7-b928-d1782bcb8094", "sighting--651a1c10-4360-46eb-925f-ffd9f08d73f9", "sighting--e1be3762-5654-465f-9bcb-e9243b9eb428", "sighting--7d07bfe6-e429-430d-9790-116fe94e1349", "sighting--e517e636-0c69-4168-a638-db2aaf826a65", "sighting--098f45a9-14ba-4ad1-a443-a70c7b665f67", "sighting--5ab962c9-be00-4483-8958-73674d9e4791", "sighting--c9af1939-d7e6-4870-80f6-0c8bf3e58e47", "sighting--c20ca7f8-ccfa-43d3-bd81-5c133281f21b", "sighting--b91d426a-a7f9-4518-9172-bd8db552c7f9", "sighting--a2cbedb0-0140-46dc-acd7-6ac65af8d993", "sighting--de252943-48bf-49ad-8efc-0e8285c7abef", "sighting--309bca2d-5dca-4dd5-ab24-ab52453fc7bc", "sighting--776adb9d-bf6c-4fcc-bde4-e5ce3102e823", "sighting--d8a6c386-57e0-4383-a781-b070917ae3b5", "sighting--0e65432d-c0e7-4fa9-b32a-09e066338c91", "sighting--ff242fda-e007-4ece-806a-2cb431df53a8", "sighting--0e58dd47-4a93-4b81-8312-33f486db2b94", "sighting--4f91385c-6e0a-4649-b95f-9f8c5ca4a386", "sighting--9daee89e-bdb9-4682-b291-51086d41caa2", "sighting--c902c5d2-ada5-4358-8c71-9918b61eef15", "sighting--4a5ee94c-2935-4fdf-81ed-114c809fb875", "sighting--e8f089e9-5c0c-4f43-b324-aab3aee8c4f6", "sighting--b773844b-dc36-46b6-8dd7-0ca6208b270f", "sighting--58f96a9a-4b2e-4e86-9a5b-b1c60af233d5", "sighting--3a1e543f-5430-4301-b74e-e000c37d7bbd", "sighting--c310b96e-a24a-4a32-9970-ed53b314bb30", "sighting--1620890f-6fcf-4cdd-ad0f-9a78ab887302", "sighting--3f2b4aff-524b-41e8-b815-696a315549fd", "sighting--77e95e97-6af2-4879-9aa9-b53921112ef1", "sighting--c2b955f4-4bb4-4e00-be39-bb31896c4aad", "sighting--2a0feff1-6c3c-4a76-bcbe-6152c758f763", "sighting--49c22715-9b7d-460d-90b7-e29bbe473818", "sighting--84393095-93f5-42ec-a758-af89c924e858", "sighting--4dd111eb-14c6-4566-bfa0-44c7cfd80ef4", "sighting--f8a9a8a9-795d-4cdd-869a-8b083b7d5989", "sighting--5c84059e-101a-4a03-953b-cb71012bed3f", "sighting--588abd2e-58fb-4c54-9f85-936ae2ebb787", "sighting--ebf9fa4b-b4df-4f04-b2d8-608edf035bff", "sighting--b1a55ce1-9c81-419d-9505-71d00cebd5c8", "sighting--1d34452f-e550-4518-8fa7-ae8bc66d4002", "sighting--e9d78040-7287-4f64-9f17-dfa25e9cca16", "sighting--349c1735-2e6e-4c0c-8e39-f4c596a38bf8", "sighting--3fe1953c-a783-40d6-b8f9-5a81ecaea9e4", "sighting--2f4f7da2-e132-4647-8b8d-844668845a2a", "sighting--bf656559-47a5-42a6-8689-6867df000cd7", "sighting--efdb8437-c4d5-48c6-84ef-db9f410fd0ec", "sighting--6cc45fa8-3cc5-4a80-a045-390d1bf6e5a8", "sighting--c4d47378-beab-468a-9d78-0e43f37570a4", "sighting--4fa1f120-1c39-49c6-bbb3-6948a61b5dc8", "sighting--fd624194-55dc-474f-b6f0-72c648ba9ffd", "sighting--b69afd0f-3102-4107-ba06-c94f3fbf6a8d", "sighting--af32a381-2734-4345-8f01-2cc40ff000a1", "sighting--5765e0c3-f81f-49a5-91ca-388085fcc7ea", "sighting--fd319d12-ca4d-4378-995f-bc3fe75f8a16", "sighting--56cfa6ce-e935-458b-bfd7-c0efb999ba6c", "sighting--5b412b52-3b6c-4391-82fd-ade657d59ab9", "sighting--e265b1a0-88c2-4bb2-a33f-d93682be9f62", "sighting--7a0d5c5d-7e8e-463c-b263-7eb6c59510c2", "sighting--e423c33c-0570-49c3-ac56-458bc7301567", "sighting--d640a137-c963-437d-a53e-bf7a9c2ecce2", "sighting--74b2bf86-a9f9-4b94-92c4-3f751b202856", "sighting--9ff21756-4a60-46df-9416-13ae99b9d351", "sighting--7112bddb-90a7-49b4-a096-f121e9beda28", "sighting--4de114d3-d33b-422c-a3f8-5212046e0760", "sighting--b5754fe0-3f9a-4a5a-9147-acf8fc5f7d07", "sighting--6b205140-e1ef-4235-a59d-3c264ccbb12c", "sighting--c65a5d98-54b7-4d55-8f31-d871878ea726", "sighting--8c43c6ce-d95c-4e96-be34-4edad17b0c3e", "sighting--6b8c27b4-a6b3-49ed-a1dd-a543dae3edad", "sighting--c933c094-1975-4954-81d1-6cf21157601f", "sighting--6200a72c-4b83-400e-9143-75f03be2a6e3", "sighting--25c5af93-f676-4940-b622-414099bdc85e", "sighting--eb735ef9-8e94-4414-b536-8b15ae745184", "sighting--b5ae5427-132e-499e-9e4d-b6b97479436f", "sighting--530676eb-7196-417b-9d5b-1a8449b9072d", "sighting--55534bca-d802-469d-be91-19e1bd3b0121", "sighting--36b48154-88a7-4f22-8b83-8895db2d8fc8", "sighting--28429c67-a95b-4f92-8b9e-cd6cc4cf1909", "sighting--5de8bc4d-3631-42d5-ad41-3355792ddc0b", "sighting--29d36d11-7d6f-4913-8411-5f86c6424866", "sighting--531dea5f-7319-44b7-aee0-bc7240f2be1f", "sighting--22e32c39-7607-492c-9973-3038e78caf24", "sighting--adab5575-eccc-45b4-b9fb-429b56bf09e1", "sighting--2f5ca6aa-3d88-46b1-bbca-f2cc0e0525f0", "sighting--9dc6e55d-5b90-4fd8-afee-27d3298f3f58", "sighting--ba78669f-429c-4bfa-9f16-c4534acd08ae", "sighting--4dbbec6f-d4cd-466a-9f1e-f65cbf74f11d", "sighting--ea95fbb8-b271-457f-a005-30d7ed7b0cf2", "sighting--c402c754-dcfe-4b1e-8698-ea417ab2c34c", "sighting--190ee64c-60d0-46a6-8655-d82b1bb029f0", "sighting--c1eec679-ca62-4360-bbf8-89ce7a3c1130", "sighting--903c58a7-dc99-4d85-9316-55246638efe3", "sighting--2aec7028-87ef-438d-99ed-3f70d375db5b", "sighting--e42bb511-a739-4656-a946-864ff3aadb65", "sighting--fabbe276-fa15-45ba-91b5-7447dd6be488", "sighting--639cfaee-7b3f-4e39-a8ee-32d091eb225a", "sighting--4d7478a4-c868-4940-8563-f9efadf945c5", "sighting--28be410b-4aa1-4f34-9468-f6b4c4a9b6ec", "sighting--19c7728d-0ad3-4024-b01b-906c27656365", "sighting--6cfb6f66-62ab-42d2-9cd3-a1a553198443", "sighting--35f5c151-8502-4314-a95f-8119b0c97d72", "sighting--1fd4a0df-93d5-4968-bc16-10d3f1f8de45", "sighting--96160c9d-22ad-475d-bcfb-1714d884d97e", "sighting--23c43146-4b24-4ea1-855f-75a95168e644", "sighting--a0aed017-458a-4228-8dc7-7aae3615c884", "sighting--879c4158-ce58-4804-90b4-70da14dcd7ca", "sighting--5fa45e27-d428-4fc4-9bdd-0e18c0fecc02", "sighting--a91c463f-0785-4513-818f-ae28aba50e1a", "sighting--a3479fc7-3ecb-4570-a790-e6704d7de1bf", "sighting--8f9113f6-648e-4877-855b-3256b170fab8", "sighting--1565c5d2-e800-416e-b52a-2c8d6ef84dd7", "sighting--94f86a12-5627-46d2-ae92-e3cc271405c8", "sighting--018ad683-8b93-4ecb-84c1-88811e35cd43", "sighting--87e2327c-e52b-4c08-9bc1-922189c108b2", "sighting--fabc3efc-17ad-40fc-9535-aa77ac6682ec", "sighting--5233b867-393e-4936-aa62-82e57557cbc5", "sighting--e2c9a926-91ca-4a66-9e32-aa773c7e6a61", "sighting--9c818698-9526-47ac-a854-7bb0d6b3cb15", "sighting--b0cb0dbe-8a7c-4fce-ad00-bdc4121caf8f", "sighting--688af809-a469-489e-a840-54d01d281f93", "sighting--7438145a-1eb8-434c-8fa0-f7cf8e1472c2", "sighting--5d5d2e3f-3c33-4f9a-b5cc-01fcb0b03691", "sighting--3b25b3a8-ead4-4db5-acd7-e72e1e5bdf22", "sighting--534cd7d7-474f-4c6d-9800-5f23cfd75596", "sighting--f441d7ae-f8da-49cc-817d-99bbbbc66b05", "sighting--173abffc-db7a-46fa-9ad5-407ea23b4abf", "sighting--7bb73507-d90d-4439-9d61-6c95af62b582", "sighting--2cea596c-8924-4e49-92e9-a58b1e0e77af", "sighting--0740e3e8-df7a-464f-8b51-750c6f7f1a1c", "sighting--e86a49dc-118f-447e-94f0-02da39f827eb", "sighting--683e28b6-16fb-4248-a326-e0d7e548fa30", "sighting--866ed284-466c-4e89-aeeb-4ebd568a834a", "sighting--9b50c914-1b6e-4305-a208-7d9e9d1fd93f", "sighting--0c5f3abe-c902-41bd-9120-f3593ddb73d1", "sighting--63e60b95-e1d7-4fee-91d9-3c11ffc3d273", "sighting--8f27c5fc-60ec-4c63-b54d-af2bc51204d3", "sighting--39ddd77d-291a-4a7b-b3cd-f72b2af87492", "sighting--44972d68-aabb-469b-83b1-7fe70f772990", "sighting--c2724b29-7494-4fc9-93db-50c24bd86587", "sighting--25b52c05-41a4-4408-a6c9-e42f312d87c9", "sighting--653ac2ac-46a2-4df1-8240-2d466aefb4af", "sighting--e155ede5-c58f-4cd6-94c5-d03387470bc4", "sighting--fc4594ff-d3ce-4408-bbcb-a59c3b126a04", "sighting--22adc5d5-d584-401a-9783-a4c100c6ef52", "sighting--dd608fd7-63ea-4e0c-9199-cda98c474d75", "sighting--8646ce40-9e6f-4f5d-9ee0-839a86f9c6d4", "sighting--af5a87d9-b662-49b3-9a8a-179067a8f8ae", "sighting--3a271f5d-829a-4163-89b7-33723927d8ff", "sighting--7d86974c-040e-479f-bc38-b8c64601ef96", "sighting--ab4f207f-f869-46e1-ac93-19a0785661e2", "sighting--59e8782c-752e-4536-8343-ce9eb937eea6", "sighting--e9209f8b-6bd8-4be7-b355-4042d1c28d9f", "sighting--8fed6459-063c-44c0-a66b-1f31fc7da478", "sighting--4da014bb-717a-436a-b89a-0e6b231aa8f8", "sighting--b413e204-d402-40de-9642-11b04b2485cd", "sighting--6b1e22c7-f1bd-49e1-af85-cf10c81fcf0c", "sighting--2d981b15-a4fa-4269-b15a-de2892f06117", "sighting--a56e76fc-2529-4c23-8266-9db822142ee3", "sighting--549f1e81-4609-4de9-8944-0d3d1ff97841", "sighting--15ee457c-a775-465c-8e41-f92b3d124e72", "sighting--f668e6fd-5da1-4895-93f8-03b308a208d0", "sighting--3baa8428-989f-4d2c-950a-6904707f2002", "sighting--04204de7-e664-466f-b600-b93060bb8774", "sighting--1c2218ac-4b3a-400e-9475-73c0c64567de", "sighting--68ad69aa-9c1d-4a44-850e-df22d51cba2f", "sighting--9e1de46c-05eb-4349-81e6-e7ba6e8ee016", "sighting--9181f20a-7013-4f81-a6b5-b4a23ed6fc68", "sighting--f64c5600-5db5-4546-b825-f8bf8b17bf34", "sighting--eaf55079-d1bc-4005-ba43-868c3f5530f1", "sighting--8b302433-f242-42cd-8cd1-3276eb91b20e", "sighting--605017d1-a426-4562-9d78-e0bc7ca97a85", "sighting--915a6562-8f3d-4464-b88d-4919315241fa", "sighting--bc85e219-e3ce-41a6-9526-b02d92648da8", "sighting--4f664061-c61d-4c1a-a34b-3c7de19f8ee4", "sighting--e9ef3c1a-3dc7-4fee-b8b7-3e6414f2c28f", "sighting--0b9cc5cb-816b-4fda-8f4a-1b96c28e1f6f", "sighting--9fbc4bb9-cc5b-4051-828b-e44dd0d31f90", "sighting--c31ca836-7e0c-42c3-9411-ac6d015b2ca0", "sighting--dc7db326-81ea-4a74-8e26-f293ae860dd6", "sighting--05354261-dca4-4f71-a024-193fc8e693e9", "sighting--f4bc4c3f-a2a3-4556-96b3-020aaa017865", "sighting--a14a25c8-cd3a-430b-aec2-b919935ac048", "sighting--10cbce02-076d-4bcf-b06f-97cd66800ad2", "sighting--6ada5628-7c8c-4015-aa06-0207e90cf2e6", "sighting--35215646-6c1c-422e-9dd1-7b2f6e6eb8ce", "sighting--0ea198bc-3d2d-47ce-94f7-b7936b5536bf", "sighting--3040d94c-d43b-477c-b193-ac64e0494c25", "sighting--b7154300-bfb4-4f2f-beed-a46e13cd895e", "sighting--d1435686-7451-49f3-a9fe-64cd7cdfb2f7", "sighting--71935b7c-e6e9-4392-a445-517a75cb74b3", "sighting--5513c83d-1bac-4ebd-9a21-76dd118c8bb2", "sighting--1f22f0c0-e9c9-4b59-8b7a-372c180fda24", "sighting--0db683ca-530d-4442-a5ab-baf04f6da264", "sighting--1a22c99e-3c34-46d1-8c75-00cba897a4d0", "sighting--b49b2e15-8e1d-4135-b542-7c848572da6a", "sighting--9a426f97-b25d-4b26-8d99-b1aac46ba9fe", "sighting--69f6c50c-53d5-4d0c-bf06-a37ec728fe12", "sighting--2f663ce7-052e-416d-9f4b-4c24a48d16f7", "sighting--36d80f3a-cfda-4807-8806-27714fea4d6e", "sighting--b1cf1472-45cd-4878-b053-535cfa0cd6fd", "sighting--78004e0d-3d08-47ff-8aca-20f66d893ce6", "sighting--d3c0b4f2-03d2-469a-8ea7-2ac8dcac8b9e", "sighting--5ff43477-07ba-4c8d-aa32-8fdcc04c18c9", "sighting--6f4f8814-e4db-42ac-bc01-81281b8166ad", "sighting--54e044ec-45d6-495c-9c29-df9b7ae12ce1", "sighting--ed6099a7-05b2-4998-977f-9c9263dc87d5", "sighting--de287e90-11ce-4406-aaec-cf29119020f0", "sighting--d994adf8-fa39-4364-8fd4-4073550a4a29", "sighting--fe57dc76-3887-406c-a559-a17a15c490e7", "sighting--d720fd72-239f-4116-a86e-9296da64c11d", "sighting--aedce2ee-6f31-4948-89c6-9febc9ce9ee1", "sighting--67a80715-abc2-4548-a165-c1796247db45", "sighting--aa998a93-2795-4e5e-9dda-d351a15e58c8", "sighting--530456c7-1775-435b-847a-4c8ae91dfefc", "sighting--ed2e4154-e490-4e6e-b1c2-ceca36c8a631", "sighting--6c4212ff-9948-4930-9d42-4c5c36320184", "sighting--f6c3f9a8-bad1-4f1f-9fa5-fa553810f7d0", "sighting--44118b3c-6e41-40fb-b9e0-4431686f75d7", "sighting--42c46e64-711d-400b-9f07-dec54167ade4", "sighting--0695a961-aab0-40b2-98fd-170468ff6d73", "sighting--c5c76e08-7b58-4aad-acc0-3e759c2e472f", "sighting--db78351b-9575-41d1-a549-2aa7b8cd359d", "sighting--12d9781b-ed42-49df-9028-c0acf154d38c", "sighting--7a3d80ad-4eec-46bd-845c-e638f6cee920", "sighting--8bfd9ba2-2c8c-40de-a343-8c2b237ad8cb", "sighting--c4361792-3f87-48a0-af84-a393b9f044d3", "sighting--24328e78-1053-4ce5-865f-077765317827", "sighting--7224394f-44c0-4047-8a65-36e6e79d8e99", "sighting--d910bfe7-7efa-42a4-b9ac-2313abf3fe5d", "sighting--8638bfbd-f12d-4465-ad5c-48af658954aa", "sighting--ea9882f1-9e0a-4803-bc99-a0cf54654312", "sighting--7725d07b-ac11-4bd8-87dc-a785e471988f", "sighting--367938b1-507c-4338-8b73-a6b6b035802b", "sighting--8cb6b9a9-82e9-42f5-8cd2-fecee75bb551", "sighting--2c698dfd-7422-4760-9545-481dff96174e", "sighting--194ab334-e69b-4880-ad15-50f744d53139", "sighting--0a9609ba-ecc4-4215-a495-ee7eec027fed", "sighting--fec0022c-759e-4613-a987-804627dd7637", "sighting--546e007b-bb71-498a-973d-a711a1ff8950", "sighting--34cfbe85-5a21-4b77-909b-0f2d02e05739", "sighting--b4b30ea2-32c3-409c-b79c-2d402ffb321c", "sighting--97611670-0bbb-4657-ba1d-e5b487fe1467", "sighting--960d3eee-f665-439b-995b-4155edf47280", "sighting--a73aa9c8-dd21-4306-900c-260c1f891425", "sighting--67a21c64-0609-4769-a00f-f30763143bf8", "sighting--7fa31a40-23e8-4cee-947d-7f760f3e4dea", "sighting--9b5307e9-50c2-4f34-8a54-8fc12a4b7583", "sighting--7835d48f-aac0-4f47-a45b-8e23cb489418", "sighting--eae118a2-0cf1-4ebc-8392-831a958de79c", "sighting--950051d9-2622-462c-b2bd-2037945ad9ac", "sighting--052e1bbf-b7d7-416e-81cc-f3b9ea11f94e", "sighting--eefb9e63-0487-4a74-9877-f5f5e7524ca0", "sighting--222117ff-9017-48ab-92d6-25cc2bae3620", "sighting--920e4f09-04ed-43f7-b063-b917d86fcdf5", "sighting--392278db-d306-47f1-a815-96b00c62e1d1", "sighting--b9442f3a-1a9a-4a27-a3bd-4461bbee2743", "sighting--9849b7af-6561-4107-b528-c1368692e62a", "sighting--4fc43d49-7158-49f1-bf9f-d5cc2041c2af", "sighting--fa0dc7a2-d6d3-4d46-8207-75b11ffcda6d", "sighting--68e8e1b5-50ef-44f6-bea5-b26fd9883922", "sighting--49a371b2-0ed6-45ed-89ed-8768c4aa550c", "sighting--6ed7bc5f-4fb1-4813-83d4-d8fb469f1c55", "sighting--452a2d46-6f49-44e7-999b-a438ee91b886", "sighting--69923447-018a-4d91-9f5c-02e777d3e470", "sighting--2f8befdf-02b3-49a2-9530-5fe94f907f0d", "sighting--88b55f3b-0687-445a-8ebb-be105507f99e", "sighting--20a63661-8cce-4b58-adb4-0a0818eeaed0", "sighting--6e0efbcc-0c71-46e0-9907-43a770d0fdf0", "sighting--3bbc0c59-9220-401a-88cb-2c4b9f6b1980", "sighting--61613ed5-ba13-45b7-bb1c-1019db23b8b7", "sighting--c9f98aeb-c2bf-444d-b20e-3ef1d8cfce96", "sighting--4c64d0aa-b549-4955-89e8-7d1b14421ad9", "sighting--8b131d85-cc19-48a5-a9d4-662c0b829194", "sighting--aa9730fb-f1a2-4de9-b709-c7381ef4cf6d", "sighting--6c166164-d0b1-4545-9a66-9b636ce8661f", "sighting--4fc73a04-3441-42ff-aeb1-89fa842454ee", "sighting--41ba2e99-2b15-475e-8c25-f0b7ed1604b4", "sighting--874f747b-a1bd-450d-96f8-83ea3147ffb4", "sighting--fdc8e292-a90b-4ce5-810f-6dcd195f0e44", "sighting--676d2a72-2702-4d88-b45a-2df3b2809be5", "sighting--555c6f77-2dcb-40d8-857a-f1f5a5eb1e42", "sighting--bd3596f2-7067-43e9-b12b-2a4af24c594d", "sighting--f1e24404-e571-404b-a326-3f9ca6a3fda3", "sighting--20ab4622-19e5-40d1-9fe0-2b2585de8021", "sighting--2c149cf4-f7f6-49a7-9fd7-b0097739ecb1", "sighting--915cc842-d57e-49c1-92ff-4c8b152a9855", "sighting--b94f64ac-186c-4e75-b587-d826edf474ac", "sighting--ec99cd63-bb7a-4b78-a9d0-22a2a19cb7aa", "sighting--5dcc0458-7c8c-41f6-a0b6-4cd2d65c474f", "sighting--620742ce-4054-41d3-b6f3-20fa461e4cba", "sighting--b84c648f-5b1f-4c83-a737-a1b51b81b9c2", "sighting--521e61ee-8b5a-44a1-bffd-6940bb1f1aff", "sighting--cacccdc0-7331-4e9a-ab44-6fff960348cc", "sighting--6daf7d1f-32ef-4ffe-b19a-ce0c17286e02", "sighting--9e204327-0d1c-4498-9936-5fa34f0bf9fc", "sighting--44e6ec73-65fc-472d-afcc-873d7e469970", "sighting--2a4e8a29-63e2-47fb-86cc-9a6d6c08e340", "sighting--28482eb5-7595-484a-997c-c0a7f07bd7a6", "sighting--443f6c6f-61cd-4bc3-b0bd-60e859133ec4", "sighting--e16409b7-cfb6-42bf-a6b8-6c3e1a22a412", "sighting--557104c9-f0bc-43b7-bc75-eed38a406efc", "sighting--50295ddf-8508-4c2b-922c-e4a7a797d8ff", "sighting--6a73dc2f-613f-4589-80c4-f0871c641f9e", "sighting--afd6c4af-25b6-4329-9b9b-5f4651493e0d", "sighting--992856e6-c1b0-4312-acb5-b52bb7ece932", "sighting--2ce8642b-b623-4846-91cc-c90d3b312ce9", "sighting--3c73a8d6-1fd9-4e63-9f0a-2fd72d8aed3e", "sighting--b9dda1f7-c09a-43e4-8f4b-b928acb84ac9", "sighting--8e9174f2-61b3-4edf-848c-9b5e746aa319", "sighting--31e37e73-dd95-4a59-aae5-ad1fea9ccd2f", "sighting--e30f7263-815d-4983-b3f0-0ed15e187b1c", "sighting--612d6f53-2060-49d4-9023-326d108b41e5", "sighting--22e97d80-1176-431b-ab1c-6a0df5895650", "sighting--acb48860-89e4-478d-8a27-a961131b4342", "sighting--ccad3445-d19a-4404-8cbc-fb0b718332f4", "sighting--f0046dc9-7701-4816-bf3b-4cc3b96db0bf", "sighting--aa40d93c-23ea-45c8-b22b-4db4217295eb", "sighting--bce06105-27b8-4d8b-a34e-840874afbf3b", "sighting--3fa1b4f3-e9a9-4420-a36b-9e08a14a3db0", "sighting--01b892ae-cb5d-47d4-8904-35996d05e8ad", "sighting--1fdcb86e-881b-47ef-954b-87de908730f8", "sighting--aa6316ee-d843-43af-96e0-dc97728f59c0", "sighting--edf5fb6f-0095-40b6-96be-7a85f08958dc", "sighting--30e15ba4-4359-49f9-9002-c889a983ebf9", "sighting--4a630391-8a17-4d9f-87d8-9f483a956f49", "sighting--a7c2552c-aca2-4242-9501-3160e9af3652", "sighting--9c516888-4886-471b-b143-259ee531c41f", "sighting--b35c995e-cd86-4bbc-93cd-082a23514d7a", "sighting--46fa0de7-9dcf-4c8f-b61d-4e5f2c6ae2d4", "sighting--3bc18860-28c4-4ba8-8c27-05072db46286", "sighting--4014c60d-f521-47dd-8851-20e2b816ec98", "sighting--1ce5e231-f073-451f-b719-b951804d0709", "sighting--2f8c5d00-b0d4-4fa5-af86-2062efd2a2f4", "sighting--cd066e5b-c7c5-49ae-8390-4e91bb0ee938", "sighting--acd29ff9-9536-4173-a4b0-7e58abd963f9", "sighting--c2986b03-7952-4446-b20c-241321526a44", "sighting--ad91757a-dc58-402c-b4aa-546a5c648536", "sighting--23622d79-b11d-4e5d-8e32-603a9e48c696", "sighting--83cd5302-fcba-4edf-8704-0902d462ee11", "sighting--6af930db-f264-421a-8183-907505df8cc5", "sighting--5d24073a-4df8-42ac-bd39-45f8fbc11ac0", "sighting--21097bd7-3bc9-4aa6-b37d-0e75cbee7b39", "sighting--096c0b3a-6343-4a0f-a72b-c8470d660255", "sighting--c630f33e-fa83-4615-be60-c65d96a0c585", "sighting--fdde9d52-397c-4519-a6e7-0b250dbb141e", "sighting--400b6cb4-ef13-406d-a101-7151680a6f63", "sighting--019815e1-a3bc-4c9a-9987-601cb942105a", "sighting--6ee96382-fb70-4411-8717-6fa51804b54b", "sighting--81322883-bd97-499f-bd19-283aa43da754", "sighting--b29c5201-fe93-42ce-9c58-68e5d80dc3c0", "sighting--b90d4373-d216-4a33-820a-b630988d2052", "sighting--c26bb40e-62c7-4125-adfc-bfc77df146b4", "sighting--9d765106-4ef6-4627-84af-69216a02dac8", "sighting--258d619d-c9b8-41f0-a818-e81fcbedcbcc", "sighting--d1ca6938-a2e8-477e-8ce8-6081e1e0d0bf", "sighting--2d5c331f-17fe-47de-a4c5-dd96c0dc4298", "sighting--3b41272c-1435-4407-8af7-46b15fe71ff2", "sighting--bf5ed801-8e0f-4206-b742-fdf3b80e456b", "sighting--37fbe72b-64ef-414e-80b7-430cd9fdd996", "sighting--ce937576-66de-4111-876b-9c11d8ff7f9a", "sighting--679893c9-c770-496c-a011-0f041f905736", "sighting--7d263234-3d0c-4cf1-b512-9e4fed1feb25", "sighting--d76489a7-635a-4ca0-b73f-30dd2c2b6947", "sighting--c762d01b-b7f5-42b0-a97f-d0bd61c66277", "sighting--d3b06e00-6226-47bb-87b1-1361d6662b46", "sighting--2758d7f1-b546-4467-8bf2-bd51a370d515", "sighting--0d4708a5-9eda-4657-8908-3c5e1e46c8d3", "sighting--f119efe1-bf9d-4fa5-8aba-e393f8d99b22", "sighting--f71878f0-2c81-4f9a-9fae-4b5a024d0fc9", "sighting--15f58937-217a-421a-a028-aac9b98c6c9d", "sighting--c43a5b2c-e895-4400-81d0-82b4670bd6af", "sighting--17ff9e5f-ca87-4f1e-a7c7-7113a7873f19", "sighting--9f627293-af57-4b9b-96be-a2fb1ea52292", "sighting--e1adae3a-77cc-4e8e-ba69-c1be336e17b3", "sighting--57246414-702b-434e-8f53-9202a9df3acc", "sighting--4944e2f6-fb2e-4c8a-b0b0-9d2f6184c0a2", "sighting--a947da97-4895-4e83-87cc-84f8fe3dddc7", "sighting--b9942a8b-f8c5-4571-889c-fda85cff5e58", "sighting--c0ccee03-f3b8-42dd-be54-49d95433cc83", "sighting--b8147e7c-fcf5-4444-97eb-16726f4a4847", "sighting--08967369-6453-4649-bc34-0a90e126361e", "sighting--72e5e0ad-0965-46bb-ba0c-a47c0544b2cb", "sighting--f37e0835-ad77-469d-80e5-a7989e84e1ef", "sighting--f08ff52e-e89f-4ce2-8842-c7ec290eb510", "sighting--70ba2164-40ce-48b2-966c-0364195a17b3", "sighting--210d1b5a-4733-46b0-b3ba-05b2200c62cf", "sighting--47d77901-5c92-4a0e-b410-211180ab776f", "sighting--34013a33-a235-4f13-afc6-b3cc01856ceb", "sighting--be477100-56ae-4062-88ee-a1d8d7989956", "sighting--ff275dae-8fd0-4fa5-97e3-093019345aa0", "sighting--13075808-565d-4b03-9c2e-3c4d61dac539", "sighting--b4afbec1-e214-49ce-ad4d-ad40249a0524", "sighting--08bb791b-b1a8-4af7-b9e2-87a4e426c553", "sighting--d9a0b09c-6d01-4f6a-9539-22cc54244145", "sighting--28484776-e5a8-42a1-8ff5-d64b0de85d1e", "sighting--2c64c36a-61e7-4eea-b1a7-62e698b18a34", "sighting--61ac67ce-a15d-4504-87cb-f0cd78bc7c83", "sighting--07205296-07cd-4dc0-a808-a46485dc5d0d", "sighting--4a06ec6b-fd6b-408b-b1bc-cacdd7382511", "sighting--5001e8d7-f35c-4e4e-9e62-a0aa020498cc", "sighting--e845266d-dcc8-4ad9-89f0-7603208822c8", "sighting--69fff8d2-5804-4f63-b2ff-b2bca91e8fe6", "sighting--0d04ea81-2138-4a5a-96de-751400230ffe", "sighting--b112a86c-831c-49d1-bb8e-382f3f83d8e7", "sighting--d0f0db1d-afcf-4ade-80e0-62c30cb28ba2", "sighting--c5de41e3-1932-4ad1-80b5-ad7d41d0ad83", "sighting--d56aaa65-fdd4-4e40-ad4b-d2c0f5783fd3", "sighting--acb1d41f-fa9c-4efb-87c9-6d6a78bdb00b", "sighting--9444fe62-0023-405c-981f-11d272822f33", "sighting--97b003df-c775-4c5e-a95e-1ddd9618a0aa", "sighting--1d91e0e3-76b1-4d76-a85b-abc66e1db81c", "sighting--7a82e563-b6e4-4300-bfe4-b6391d505d52", "sighting--ed9d99e2-a12e-4473-9ae8-ccc7eba16192", "sighting--34548bd3-1743-4305-98fa-9a5e2004c1e4", "sighting--62c98d84-57b9-4e1e-bc66-bd562d334066", "sighting--bcca5b62-e423-4794-826f-7fa130d28ee8", "sighting--f34005ac-6101-46ef-9e10-cb4921e593a5", "sighting--d0930b60-9b09-4cc1-8e4e-d18b06e62718", "sighting--e7a1bb74-1eab-41a7-9e63-ca737be31d41", "sighting--22bca6d1-4788-4637-88fe-e719ef2b9dc3", "sighting--84551488-bf31-41ae-9853-5482bf10481f", "sighting--d24d7d00-9641-454e-9b14-5ae4fff42d2a", "sighting--1d16ad4a-9b1a-4ea4-891e-9daa987863b1", "sighting--31ce3638-974b-48c9-8c53-dc51f21d1237", "sighting--f6c74c2f-f0e2-484c-ada5-7c8e4daa7041", "sighting--d0ed08e2-1c0d-4bbb-82c1-9381bb5ed3ce", "sighting--e1e1ddc8-9bf6-4b44-9ee3-a088b3b725f5", "sighting--03295ff3-f4eb-48ec-9037-8d020e0b84fc", "sighting--d2e49bf2-dd65-40c3-a743-0784003d6072", "sighting--ecde6d49-3a07-40c3-9092-0d0cbf206212", "sighting--0818558c-6de2-436b-b893-de401a661ee6", "sighting--2c6ae065-6988-43e1-a8f8-3685d187d0f1", "sighting--5a6d06f6-8086-472a-93bb-6bfb5e198afd", "sighting--ae2e09a8-dbf6-48f6-802c-30374b399d07", "sighting--22faaa7d-b3b4-4339-89a4-200e85874124", "sighting--71e3033e-60fb-4cfd-bbea-87a2cb6436fd", "sighting--a05f1e79-dcbf-46ba-ab69-6ce01cf344a8", "sighting--4ec03cee-633c-46e0-b96e-8372a217e42f", "sighting--4ba2cc66-e84d-4e85-978c-6c5ecf444bea", "sighting--85b4194f-7832-4c28-a901-1d5e503a4bb8", "sighting--193386d3-5f6f-47c2-9b21-f12d22301580", "sighting--4b6fef4a-9586-4a93-8516-938fed58d74c", "sighting--50f89d06-8fc6-45a6-8f3f-1605df26ea0a", "sighting--9bfa9b64-bbb5-470b-84cb-9190c2a96c8c", "sighting--2f565e64-8488-4678-af8b-fc1ee24d224d", "sighting--fef1aa8a-94da-4064-864f-141bd7132ca3", "sighting--e30c773c-c22f-4960-89e6-82776c7876eb", "sighting--c381fed1-0e15-4d47-a9aa-23305e88e276", "sighting--f1905732-db79-4cb7-a9d1-c54766bb5e4f", "sighting--0c1aa0aa-6482-4558-ae92-1b33982e521f", "sighting--b6384987-80c4-444a-87d3-37db923a26de", "sighting--7f5f1c44-9fb7-46dd-8441-6e54691cb7d4", "sighting--43ff8733-4d10-448c-b08a-9e3d842a00c2", "sighting--1a151abe-7bfa-4700-b8d4-7461ec2f75ac", "sighting--849ddeca-7f0e-444f-981a-75081fefddd7", "sighting--1291cb1e-dc82-44a8-80a2-99d497fddfea", "sighting--5ed7d0a4-8fea-4f78-b001-a63fe5d5441e", "sighting--768b7652-9ed9-46d2-aad6-5cea85d92e42", "sighting--e33dfe08-3409-459e-a150-44f235de42bb", "sighting--58c55f26-800c-4c7b-bf28-618741fe6987", "sighting--7fbe01f6-a31a-45c6-a95b-961fdf15964d", "sighting--3ed4b89b-28f6-405f-aca9-f8c1102c05a9", "sighting--e56ac472-c6ae-4507-aa96-5d8686ed3e9c", "sighting--64c134ac-4661-46ba-9a11-6726e1e39314", "sighting--f01ea2bb-ddee-4809-8c50-ba1ef671e5a8", "sighting--e05cfecf-266f-4473-bc46-1acfcbef7ebc", "sighting--e7e04ce2-c7bd-4acf-ba7b-73abbb62893c", "sighting--1d5b6990-3ebf-4224-a842-e368fa710d41", "sighting--6d925eed-5be2-423c-b3b2-11681f62c687", "sighting--a784f004-1235-47f0-a047-c86bf217f715", "sighting--529f6bfd-6838-4552-a6ad-c76992c960ca", "sighting--3e5ea3f5-7065-43cb-bbfa-a3cbe0b880e3", "sighting--c52510ce-f4c2-41d6-9c9d-5e793674d534", "sighting--a6750110-52f2-429f-890e-28b1cfce78bd", "sighting--611b1907-d091-4552-a94e-053bf844fd95", "sighting--fac9aef6-603c-4a5e-a2f1-15fd8e564491", "sighting--afcf4477-e133-4102-adac-5db2fcb89727", "sighting--b1b92ca1-8797-4dde-9fa3-31827f14f1a6", "sighting--6629eb84-11ad-45b1-ad79-1021499f5a2d", "sighting--fa6293b5-efc1-47ec-a9fa-0da0541ac154", "sighting--8151e644-a3f7-487c-9186-71dd8b6ca718", "sighting--94998564-cc9b-4126-8d22-426126996e30", "sighting--a366491e-83e0-4ab9-8cc2-d7f7264fbc7a", "sighting--ca4beb4f-160a-4e10-8cf2-d6336503dd74", "sighting--f3ded78c-0144-425d-9591-f6274d06abdc", "sighting--b0d85c0f-7a1d-46e1-b42d-7776aa412a01", "sighting--46904b35-9268-49c5-bdae-fa91a8770934", "sighting--8949be9e-11e2-4e32-90d5-9dfb25811b96", "sighting--cd49dbf6-8896-4866-b1d3-50a9ad8633c6", "sighting--5c34cc79-ab59-4f68-894a-b819fd2b2937", "sighting--2d30c798-15fe-48df-9dcb-2a77ac6689e7", "sighting--c186bd1c-c56b-4f97-bc02-e491fd31ae48", "sighting--98e9bce8-2bb2-4acb-aa49-eab3dae6dc7b", "sighting--bd799997-d51b-4606-b4e3-4c92996127c5", "sighting--b9a59a2a-8fa2-4638-9969-2a88e4475bec", "sighting--54d60b45-16f6-4bc8-8c45-85134e25f305", "sighting--60af8ea1-923f-40dc-9044-5afb94b6bc50", "sighting--d9e9ad93-9274-4cfb-a720-117bd0b0222e", "sighting--97f90084-ab90-4c89-b479-e2d9a14d8c27", "sighting--67e6c1c1-8f5a-462d-ba03-7f2e92476a23", "sighting--592ce443-8ad9-4366-acde-4bcf9557aa63", "sighting--6dddcb51-7c6a-44b8-8f7c-e1222e12ee59", "sighting--ad170fda-78a8-47d6-9d97-4b4cf3801b7f", "sighting--16224fa5-b74c-4ced-9ff9-1625bf6f5faa", "sighting--e87cf878-6c88-4340-b63b-0a516045b0bf", "sighting--16432043-e8de-423a-8726-ecb441dca4d3", "sighting--298ecb19-bf19-45f5-823e-17f9a0cdc38c", "sighting--6e16fa4d-f2e3-43b2-864a-a238550f085e", "sighting--360684e1-ba3b-4b2c-bd23-40da05b25046", "sighting--5e06d5e0-c706-4fb8-87dc-a38a7784377b", "sighting--92da6cc7-9d81-45c4-99f9-3ae7870b5c9c", "sighting--7b3e2e7d-f0be-4896-a1cb-e924ff49f82b", "sighting--de37dd8b-4cfe-4f8b-a676-7a537a431d75", "sighting--34820651-c3de-40a8-b3aa-ee9b4f813185", "sighting--b3ced666-0ce8-4c01-948a-4a3283b591c5", "sighting--3a7101ed-6902-421b-b897-27e59aa39f03", "sighting--6d687cab-1bf8-4f7b-91e7-1c7d9a3a6192", "sighting--6cfd99c7-cb65-4ccc-96ba-5ed10ddf0083", "sighting--ccbbbdf7-b3fc-41b5-b291-bca4adbaed53", "sighting--63816366-9f85-48d4-9486-0db52b9911ac", "sighting--fc600da3-6936-4aa2-a271-01563b257c9c", "sighting--90bc424b-ba44-458a-99c5-19c688bd67fb", "sighting--8d9ed4d6-d921-4893-b18e-5b704de0072f", "sighting--e581e89e-dddd-48d7-a772-f60de6630ca3", "sighting--46832029-7338-4ca5-bed1-1991da95f8de", "sighting--fc1a0874-590d-4e9e-901b-5ff065539d9a", "sighting--fd26a297-0086-4e99-bfc9-378897956707", "sighting--5342b092-7e8f-4e10-b5f4-ffa7db256671", "sighting--2ba584a5-34b2-4fa0-ae6e-4a659b8f7c06", "sighting--3ac1d09f-fa6a-4e72-9b67-e833a01a17d5", "sighting--3a0291f2-e32a-44ae-a7c8-1bdcf4141247", "sighting--bbeda486-6866-42ea-bce5-2e6652f4fa60", "sighting--17f3f605-1b12-422e-9475-674c07c61016", "sighting--caac2de5-edb8-4595-ade4-d1a3b226a977", "sighting--1a70691a-293f-4ba6-8f2f-0d37e1f41043", "sighting--b6568443-75e0-48ff-997a-bfbb62da1f31", "sighting--7ff3f03e-0c70-4e3a-8d72-b5bd4d81bbbf", "sighting--90ad35f6-4c7a-462c-b277-b1e6a0128dde", "sighting--d6012dfc-3508-4179-a6cd-2907029b05db", "sighting--b099b3c6-fae5-416c-88f1-4e5656e2e2ac", "sighting--b252bd42-a7ac-447d-a9e0-300699858fef", "sighting--004d63ca-27f9-4496-9e59-2f98c2c98e64", "sighting--aadca485-a6d0-4901-9354-bdf8c5d9066f", "sighting--67571a35-5124-4367-8197-10779a66109f", "sighting--aeec2ed9-66b6-4e66-bcd1-70039a0fe2d1", "sighting--6384da97-8df4-4b5f-aaf2-ff0708f36d06", "sighting--4e77a1a3-277a-405e-aa72-ecf9e14197da", "sighting--f09e436b-b212-4957-9bf6-662dc9a5f11b", "sighting--f24182ed-55eb-4258-afb9-8e4f99a7ac63", "sighting--2233069d-b175-4de5-9aaa-878e35c73451", "sighting--0195508e-8ef1-4984-b5e6-c9c3342ac3bf", "sighting--1684483d-20db-46f0-86d7-ce2552d1c03d", "sighting--65ea45fb-2de7-4f0f-ac73-d2dba68ed618", "sighting--82d637ee-b175-4815-9656-358bc36df008", "sighting--a288eb20-c29a-414a-ac0f-2c112e08e632", "sighting--b4c231d2-abfe-4200-8bae-5422403a78cf", "sighting--20c549ad-0fac-4537-90af-e9b7a70714f7", "sighting--87c6bb6d-aaa3-4357-96e7-e7515b4b313d", "sighting--b7f514b5-80f2-4b3a-b834-e5d08d9b526c", "sighting--86a6513b-6079-4ffb-a7be-c7a288ce0e76", "sighting--ab666ee6-f9a0-4485-a6bf-2a8359ffc35e", "sighting--f1a97819-8e44-4895-b48b-ca85205630bb", "sighting--7fa0c7ca-73a2-4abb-8788-c41bdbd314dc", "sighting--7e90b864-1d4d-4962-9da6-805495732966", "sighting--543c1996-0bfb-4b0b-bbe2-357d05dbe4b8", "sighting--639ec1e5-cb0d-490f-bc1c-27e4ef1525e6", "sighting--53c768a3-f617-45dc-990f-115429efd9a9", "sighting--6bba93aa-7e4a-448f-9e33-01c0e6e51807", "sighting--600f625b-085f-4f32-825f-27c7d9895736", "sighting--a50eebea-32f3-4f83-8cf8-901c6ad8798d", "sighting--f76cffd2-87da-4d9f-a6ea-9ad91394911c", "sighting--0417b7e0-67e4-4914-ac62-047998efac33", "sighting--cc34c048-c14d-4a7b-bf81-019d6ed0fa94", "sighting--051bb922-7b45-4d76-b2b4-fff4c3c697cc", "sighting--6a85e1ca-b0e8-4653-bc59-6d03405e2453", "sighting--e7204c9a-0246-489e-8422-176f99a924d4", "sighting--a778fb10-10ae-42b3-b77d-7a999760e61f", "sighting--4eb397d0-a7d0-4547-a12e-534f64401a58", "sighting--05ffc596-7596-4c4f-8305-69701ad81f43", "sighting--227a143c-9e44-497d-b3f4-d3ae9f5337c6", "sighting--5702e200-40a7-4511-ac0a-ed4284fc4474", "sighting--ebab2bca-8c01-4a61-b428-d5a1bb6b87a7", "sighting--7d6be056-601e-4633-9061-ef948cd58ae2", "sighting--15922887-8f26-4eea-8e52-6e36c7dfb062", "sighting--e015d25c-07b6-450e-a22b-884456868ea7", "sighting--ea3fd1de-0533-4936-8f0f-d217b104713d", "sighting--f5d1f500-adb6-41f7-9636-a5afc9d76d5b", "sighting--edcd2130-f879-46ad-ab4b-def08f13cd39", "sighting--25568dfd-9dfa-457b-8ac7-a66c678ccba2", "sighting--df16f0ee-2a17-48eb-8bca-ba3298c7a78d", "sighting--8db271e0-3b7d-4aca-9a05-53b8cc3d0503", "sighting--1b45313f-f075-445b-94f5-a64e604f62b6", "sighting--7f1a4438-1c17-464b-8197-2d6f2cd434ed", "sighting--b36417a5-3fa2-4519-976a-66ffa2e7dacb", "sighting--9d22995b-9241-4bad-8834-7068b514d682", "sighting--46cae8a3-c113-45b7-8741-e6db3a5d715b", "sighting--71c2e5e8-987a-44e5-ab86-ca25af1c6bd7", "sighting--832d8762-cc5f-46d9-9721-468e302a56e9", "sighting--d2a39558-8a19-4d49-9015-a9298da84da6", "sighting--8c2428e7-58c5-4415-b11b-514242ed66a4", "sighting--322cc991-dca2-4b1f-821b-4fbee64bc0fb", "sighting--b55880f8-49c2-4112-abd8-0007d1b49c74", "sighting--faf6ec07-351c-4560-bf6f-7b723b150596", "sighting--4a50bab4-7096-41b7-8815-02dcf9fff16b", "sighting--a9e8cf32-bdde-4cdf-8f32-3b49d9e31eb9", "sighting--2acfdccb-bdf5-45c5-96d1-9c591629cd6f", "sighting--7f3a8cdb-615c-4e53-9882-74763aef9cf3", "sighting--35351937-f036-456f-beb8-1d433940f712", "sighting--34c32dfe-0f34-4870-8b9f-b99414bd4a09", "sighting--1198412d-0b5a-4bd1-b863-4f07f6c46db7", "sighting--3d17cc38-6b37-4daa-9c54-e8e1d31494d2", "sighting--d9a474d1-0455-4b83-b78d-9024dd4d0f84", "sighting--7b7b5a93-4bf8-4c47-b4f7-a669ce5e5be5", "sighting--738c459f-d810-45a8-9049-949d0b30a618", "sighting--2859aede-5acb-45f3-829e-6f9652d0d0a5", "sighting--d7c99f2e-e006-4c54-a346-fca70753869b", "sighting--28af65ba-6739-416a-bd07-fb0644211e0f", "sighting--b54c35c3-ef6f-43a7-b538-e6891e8acde0", "sighting--75013dfa-fa36-4642-acd3-6fe663ac6034", "sighting--28f5ea40-13dd-4e50-8f76-dd530bb26d41", "sighting--a95cbf8c-fd31-4dc0-9cd5-d99be5352356", "sighting--69d53f8b-2b6f-4ee3-8f18-eca403d85461", "sighting--43753fa1-67bc-4c48-bd77-94070cb316ca", "sighting--4b5abc1f-b376-4114-ae8d-2880f4094457", "sighting--35a49a7f-f66e-4fe0-980d-5d91606a7f1c", "sighting--5ffb923c-2d53-401e-9d09-0ae449aef0f9", "sighting--9299304b-f101-4e19-ac98-82f0dd135572", "sighting--1af92146-6f08-40bb-9636-e1dbb877ce80", "sighting--ddb9b1f7-27a8-4a42-9f53-7adba563927c", "sighting--779f6e2a-e34c-4f3b-8240-51cb310297a7", "sighting--108eacbb-0742-4640-8cf3-bf6bff8c5afb", "sighting--f8fe4546-a7aa-4b07-94fc-12d36e9255d2", "sighting--69c5df75-c9ae-4ae7-ab40-782acd22411a", "sighting--c6e231c9-7041-41d7-b527-5c08849477b1", "sighting--1665da5f-5701-402a-91f9-592d8a86a0cb", "sighting--7ec7ace3-1285-4ba4-a836-b60784f0b4e8", "sighting--c2aa4c57-f597-4995-99f7-79ebb2084690", "sighting--240d9e3f-316c-403d-98d0-e0ca3e65390f", "sighting--cb02f384-032b-4126-ba31-b29f276e7b6a", "sighting--b163a07b-a025-46dc-9f0a-7bfe156d8a64", "sighting--7c846b32-51ae-4065-a034-843b80aa7dc8", "sighting--e2bab478-996f-4629-befe-6abe16a305f6", "sighting--78201896-58f2-41b3-ade1-b23c7c5fea2e", "sighting--6a431b89-0d8e-4e2c-b42b-b42e1cb80ae2", "sighting--fb3ffd9e-cf89-4a86-a4e0-1bab357f41ea", "sighting--a68655e3-00cd-4b97-a764-f69434cb597e", "sighting--93ea3910-3dc9-4002-81bc-b68cdfc8e2c2", "sighting--c429be93-0e3e-4864-9349-1b2aae3fa331", "sighting--6e4a076f-e55a-45c4-be3d-ccd6d446aba7", "sighting--51e517eb-9a74-493f-87af-0a9a7d21a1be", "sighting--b2ff657a-7e75-4c11-9e30-34cce72e6ff9", "sighting--9643b199-ecee-4938-b77d-94fe4894f638", "sighting--388ac603-818e-4d88-9eb6-55e8a92bc2f4", "sighting--8c205dfa-cc67-40b0-a250-f39d99eb78d0", "sighting--32df496a-68c6-4864-8c86-70e83804b587", "sighting--00658277-57f5-4b15-b447-38737ca6395e", "sighting--331505c1-3aba-4a68-b9d5-5ef2e83224af", "sighting--f9225344-b58e-42a4-b8cd-0412824d3a1d", "sighting--f225f321-57c8-4966-a280-1a490b2afdd9", "sighting--e0526690-dc1f-481c-aa0f-76aea6d2d003", "sighting--b9576ab7-4410-45ac-98a4-198037688943", "sighting--371146d2-1dd8-413a-9752-ee0740ab6536", "sighting--8529e633-b1f0-4b1b-b6df-70c1856f1087", "sighting--2c6e7dd4-0729-48e6-9e45-ade2f21aa6ae", "sighting--ad263acc-7530-4e61-9a81-37153f388bd1", "sighting--9c53a62a-97ad-4ce0-9c51-aff230922ba6", "sighting--3f310e14-5802-49c6-a9db-29ad8f56f08e", "sighting--5323978c-7287-445c-a3b8-455dd97c20e5", "sighting--aa44e840-9dea-4ab9-b28e-e0f83beaf143", "sighting--106e6a42-a7bd-4492-a5b8-dad877c6d95a", "sighting--aa0b83d9-eb04-4383-ba26-f6de9462ecb0", "sighting--574705d8-881e-4896-a8f4-5a52a131fd88", "sighting--df3c6c31-592e-4e32-8ad1-a6d8b23bc3cd", "sighting--800c3467-aa4b-4a5b-96c8-3c4e5bdb7f90", "sighting--ee474cf1-8ff6-4da1-ac31-403b5ca68a75", "sighting--f37c3975-dacf-483e-9804-808ac06e74a4", "sighting--be7cc72a-60da-4c9e-bdbb-e48e69feac30", "sighting--aacef165-c6e9-4911-976d-734e3e75db40", "sighting--4ac63f58-0da9-4cb4-bd6e-afa14a8104c1", "sighting--ed7d8d12-9ccd-46d8-af96-7bf2adce6b18", "sighting--0172b396-fe7a-42fb-a368-97913a01b6c9", "sighting--d0f0cf20-6757-494c-a125-e4399a233743", "sighting--88a96731-bdb3-4652-96ae-bb1da66c3564", "sighting--a509f620-1129-443e-b9c3-801d79a2d2b3", "sighting--f7093c79-316c-4ddb-a3b5-83721c37d3c0", "sighting--cba9efab-2c8a-4036-8e7d-3217ab0b0508", "sighting--e641453b-dfcf-4077-9a9a-7cf40efade6d", "sighting--b14328b5-ffff-4542-9642-22ee718fa86a", "sighting--1bdc613c-656a-42ab-b042-49a321c0c32b", "sighting--3ea342bc-c518-4ea1-85a6-0ec23dbf1379", "sighting--e81bdf1e-9f81-4fa3-8d29-dff63a178f3a", "sighting--b449a9c6-025b-42d7-b20f-23abe2ac6fb8", "sighting--0c81e50b-7964-4341-a7ce-4b62142374ef", "sighting--db39bb26-e2b6-4c8d-8556-a2e576cb8488", "sighting--a2f5f271-780f-4a01-aac6-0dd67454bed0", "sighting--94c09cb1-2296-4a91-b1d0-04d5665624a3", "sighting--855e195c-b40e-4d03-a719-6c4c81239040", "sighting--1e2b924e-aac4-4dea-8003-35335773a8e8", "sighting--590c815d-5b0c-4320-b118-e87cf1c6a10c", "sighting--832cac2b-6f11-43cf-9c5e-90ea754cf19d", "sighting--e180d340-260a-4b83-a56c-0fe61a536817", "sighting--7cf4d318-6e4f-4e8a-85a5-7000eb524181", "sighting--6df169f3-5aec-43c2-9b6b-5f23d4b296e2", "sighting--9f6dc94d-a9a8-401e-80a6-96d8042c062d", "sighting--adea25de-4fa7-4511-a373-8604af10fe7d", "sighting--d03eb856-c9c8-417c-b7a5-189d0533b955", "sighting--574b1443-a0e7-496f-abb3-0b82a328cd86", "sighting--cdb29d38-f19b-4f71-a750-c5f1b1a05058", "sighting--e0b7e343-7677-4a0d-bc11-ef0d5dd4651c", "sighting--427ec963-bd97-4c4e-9502-d7651fe03f52", "sighting--7106023b-4396-4500-b314-d8f288b3a7bc", "sighting--9af2eb4b-0ff3-4390-9b89-c237fad5dd7a", "sighting--d1bfa24d-8bbf-4fee-a1ca-41e4c9e803a8", "sighting--f40283a5-52be-454b-ad91-4cbf8e1faa94", "sighting--35e3a4b1-f0ea-4493-9155-0081e20d2811", "sighting--7ff973c2-c7e9-4449-9fdf-09f7609d904c", "sighting--62b3ee30-e39e-40b6-8461-659626598d75", "sighting--c06ee8ac-05c1-4170-a22f-66f52e1ec438", "sighting--007ef070-80f8-4f92-b4ff-f8f97e31a5b7", "sighting--3174bd35-01c2-4c53-8071-7657f2a470dd", "sighting--dfa33b88-b39c-4822-9213-90f89a4fd8ed", "sighting--493a7370-5060-4110-ad2f-b9a9f978122d", "sighting--3ff7b835-95c1-4616-8d40-9cf113e78d7d", "sighting--38a3dc8c-266b-4045-a54d-d374d6d98b21", "sighting--834466a5-1dab-4273-8bfa-89df18fef872", "sighting--aed02c42-520f-4fbc-a445-c435cbf146b2", "sighting--66f90ffa-b01a-4021-a6fc-87ccba48dc1f", "sighting--56c11439-341c-4f6b-bc4f-158777cfe915", "sighting--fda87d7d-649f-4b9b-bfee-5d6f6c378948", "sighting--c3a6b0a8-99d0-4278-9c63-e913bb1dc95f", "sighting--b0e28335-7b15-4fc5-9514-9663e9b414c7", "sighting--840d2cdf-76c9-4628-aae0-76f377e86912", "sighting--e120a7fb-f3ef-4b0f-b5a3-f9f11918142d", "sighting--5320e760-82d7-4452-b4d8-337c1aa27e10", "sighting--be99317c-927d-4cc6-b6a4-d5852475a2e9", "sighting--19bc661e-9f4d-44ee-b275-1adc3dcfbdc7", "sighting--14af18a8-292d-4f78-9587-c6a37e6250c4", "sighting--dbc0d6f4-1165-4c99-a2e3-450b66202b5a", "sighting--6050680c-4e53-4826-a8a0-230e3256881a", "sighting--0af5a656-8b92-42d6-9bb2-65bf1b3c38a5", "sighting--e853a722-240a-49b1-b26a-dd25ea93e530", "sighting--81c0f49a-bc15-4e68-aebe-bc3fa035ad37", "sighting--437f0518-b026-422d-80d6-6437dd79e362", "sighting--58bb93f7-f8d5-4fb4-a724-b7836b1f40ee", "sighting--3f6f01e4-3fe7-4991-9a3c-68dadc615c45", "sighting--b7a834e4-1045-4f58-949b-32d862cbaf52", "sighting--5df76894-0566-4673-9c64-ab1fdd2942a0", "sighting--e0fbbb15-eb33-49fa-948a-2b6a1112c42b", "sighting--c961bfc5-7e45-432e-8f6a-770788588e7b", "sighting--8c7062c8-9fa1-441b-8d0a-f6d48392c34b", "sighting--eba23a64-ed49-485a-8b56-d898077139c1", "sighting--b8beeeda-1816-4b94-a0b5-9b84549d191a", "sighting--edd7996f-e57f-4850-8eb2-99c0aec339ec", "sighting--b57fb2fb-bef4-445c-aae9-435bcb6714f7", "sighting--e3449fe1-d3ae-4fe4-a5b5-da37115b61c0", "sighting--0234a507-3c31-478f-a941-2424957038dc", "sighting--1cd993c3-b638-4ecf-81e2-9cb820d71b1c", "sighting--37004f4f-ac1e-4bb7-a757-423272bc8d36", "sighting--ceca1d27-3f7f-46cc-bf1a-b3de63cd2100", "sighting--6f1753a6-6271-4c11-bec6-167093410b4a", "sighting--bc74ddf6-891a-4f77-b2b3-333bd2b39686", "sighting--dc96b23a-e379-4f78-9960-e9143817c12a", "sighting--5f0d6218-4e1f-458f-a6b9-9bde20fc02ba", "sighting--19136a9c-cb14-42dd-ae6e-8e8d0747fe4e", "sighting--b9fd5ab4-6807-4763-8816-f87fa8d04a2e", "sighting--2dc8b812-9292-4a8e-96ac-edb122899535", "sighting--a0a496ed-4fd1-4a5d-8d0d-b01394ba30b8", "sighting--01a35427-6eeb-4bf7-aa59-8e46a6d530ca", "sighting--9bd8386d-b8e0-4bd9-bfe6-35416a2da237", "sighting--e1da7918-056e-42a5-91bb-6efa1acf37fc", "sighting--619219db-199d-4f1c-8699-7d6f788dac67", "sighting--0a43cc04-024f-44f5-8be2-7868317e5063", "sighting--b2f40d46-2130-4973-8801-0285e672cf5e", "sighting--6307276c-056a-491e-9a32-d0f687abe9d5", "sighting--f7f8dde9-af72-4637-aa86-55025f14e376", "sighting--a553f6b4-b8c2-4294-a925-8e0ded762fe2", "sighting--837143d1-875a-4b24-815b-e9f48eaee290", "sighting--bf6fa213-9b5d-4fef-a3e1-27defa308ecb", "sighting--b30eaca4-8888-45ed-ab86-e4ce5463251f", "sighting--86b9584c-2545-4930-bfe8-4011242d13f0", "sighting--4b33f254-1a8c-4dfc-bc4b-fe0bf3a4db72", "sighting--8c31b117-ee4c-4437-95e7-da1e8df0f61e", "sighting--f10a8f0e-cabd-4135-a0ca-ff5face73791", "sighting--7bcdbebc-9b17-4cea-b3f5-fda781ca77e9", "sighting--1a610aa1-d690-4cf6-b0f9-e252236be7aa", "sighting--9b287bdd-4959-4a4f-a34d-692e8a28fb42", "sighting--fe0a106e-33d6-487b-b59b-c966d8812681", "sighting--44caa924-721f-41ab-b42f-54cab6c606d3", "sighting--d4fe9a03-5cbb-40f4-9da7-27b92523f645", "sighting--d0978298-4427-49db-9e93-34b734251da8", "sighting--883fde0f-94b5-4501-8e68-9ea545fc6128", "sighting--8603929f-ed4a-419d-9fe5-713783cd96da", "sighting--fe013242-343e-4a51-92dd-7639a24def68", "sighting--c95ad57b-9a3a-4144-b206-53603ce621e8", "sighting--fd2913ef-b403-420a-ad0c-85c6a50759a2", "sighting--5f720318-508b-4830-9433-3275cacd309c", "sighting--e938a25c-bbe1-4aaf-b876-72705c2d9d22", "sighting--5054ff78-c252-4cfa-8a31-43a46fa87af9", "sighting--be2d733c-8679-44da-8178-901223574211", "sighting--cf063821-0d6d-4741-84f5-6890ee5f38db", "sighting--9566f140-3386-4bb8-8d6b-e57096e005e9", "sighting--b9dfa97a-598d-4805-83bc-6b1c5caeb2fe", "sighting--e55caf92-0ff4-4bcc-b2ec-e5929df6819c", "sighting--ff9b6799-78cf-45b8-bd4d-edfe72c37bd6", "sighting--3e306460-f987-4bec-8e7b-2d0ef59949e4", "sighting--d4d15ae2-3280-47d7-80d5-97edbf689dab", "sighting--3c367d60-2f50-4818-8a0f-0b7b72d71b65", "sighting--202a81fe-2a94-4e0d-b3ea-e675c7cc0f69", "sighting--6ee674d6-bd38-49e6-96bf-2f404ed91657", "sighting--47708066-70f2-4d54-bacf-584c3c2ccb1c", "sighting--966cb1bb-01e7-4b6a-bad4-ce5ccd21decd", "sighting--ddd27f5f-07a5-455d-9683-2be5db572417", "sighting--b0d6cf5c-778d-454b-a792-4850328dbaa1", "sighting--4d58372e-5148-4c3d-affd-6d08c688f319", "sighting--9d87d1ab-656c-4fa3-b78a-f76c12337fa3", "sighting--02cf2974-33e9-4b90-9bbf-235c10cdb80b", "sighting--be690b9e-e1fc-4bdd-8aa1-ef6ce833ceab", "sighting--6735a599-3d3c-4464-9c21-8a3c5c5c2363", "sighting--f0261901-4c65-4966-ad5a-f915f8426d76", "sighting--e7e18eda-7781-4085-b94f-97900dfcf41d", "sighting--f15169eb-34ba-44cf-9246-1a8406e944a1", "sighting--6f092f41-9647-4def-8d79-eaad142cf1b1", "sighting--44c2131c-55ff-4eb4-a28a-69113b6e80df", "sighting--f58ecc85-a174-447d-8571-f37d873225de", "sighting--d1979484-0253-48b0-9dd4-285bc1f6447c", "sighting--1ea22b76-f141-4836-a439-9ffe66b9300d", "sighting--8d234735-fa48-4dd1-a758-fdde88057156", "sighting--b6e663bf-a77c-40f8-aa42-febd35ddcf9c", "sighting--0a234fd7-28ea-4ae3-90b6-5f75b94517d6", "sighting--f0fbcce1-02f4-4feb-8fc9-a74a9eeff802", "sighting--87a87459-c5f8-44fe-acf9-f15dfb1e43dc", "sighting--71c2d2db-dd52-43b5-acb1-22e638592f23", "sighting--3f017ba8-55f6-4bbf-b13a-e81b5001ac23", "sighting--177801af-5091-46b4-b4fc-6de7cc81823a", "sighting--0da095e9-4f0d-4058-ba41-134784115902", "sighting--2deebbe8-600b-4500-8202-c8aff790d5ca", "sighting--faedb002-cf61-4806-b49c-0a3c041dc2b5", "sighting--305473c4-d3fa-46e6-bf55-1b120c91ceb3", "sighting--2d433b21-fff9-4e63-913d-4e66a84a89c4", "sighting--51869b61-5203-42ff-8025-68f898e60f77", "sighting--5a8c9ea7-6e04-48da-a868-f0f563779cbd", "sighting--0c6b7eba-12b5-45e9-a41b-147a897cd8a5", "sighting--c6d3f764-8f7a-4b8a-b663-a372a1909a23", "sighting--2475f2c4-297e-4664-977c-519bd8e04c06", "sighting--ff4ddd3b-18b2-40e0-a1c3-ffc58d672b24", "sighting--78d72f0a-d8ba-4222-bff3-b6660f9714c5", "sighting--af4d9574-c0cf-443a-92da-5fdf8e901439", "sighting--a61f918b-bcdd-45bd-b377-a2eb242798b1", "sighting--ea54d7d3-6be7-4e70-af95-b2f639d11331", "sighting--b1cca9d2-49c5-4504-baa4-9f5a001342ce", "sighting--cc1c570c-4d89-4e8f-b127-02b45900d418", "sighting--3cf491d7-87ac-4f04-ae24-ea46cc665edf", "sighting--907a69c3-a0f8-4f22-81b5-4e114a80173c", "sighting--cd0b6761-6c49-49bd-b039-48bdcbcec230", "sighting--162f3ffb-e16e-4ac4-987e-578f6bb44c43", "sighting--d0040b28-9465-4e99-be11-518fd0d3f1bd", "sighting--9f102134-9722-404b-be7a-93c6face4595", "sighting--fbdc5b1c-723c-432e-996c-cda234ff0709", "sighting--f9b931c7-19f8-45f0-a4fa-bfadc4a5314b", "sighting--7fd1f9b4-28c2-4c73-8ae7-3dfa2272e59a", "sighting--ce2c2f3f-1520-446e-bd2a-376d41ee55db", "sighting--248cc429-fdca-4b31-9090-68dcb866980a", "sighting--22ffb87a-c837-4b91-90f4-9452670731fd", "sighting--2b46f574-9e89-45f4-a608-3bfcf8ffac34", "sighting--42333153-b30c-4735-bce4-60ddbbe70e62", "sighting--67c98e44-9a7a-400e-86a1-f3696c9c0cf6", "sighting--7bfa69f1-de62-486d-b471-213aaaa04163", "sighting--45ff7d15-54e2-438f-b564-ff91773850d0", "sighting--320a56a6-e9a6-4ad8-b35d-77b13ff79ea3", "sighting--53695cb9-a98c-4df4-8938-a78211e948c6", "sighting--24fce240-d17e-49fb-816f-f0baff7ebb2a", "sighting--981424e7-4e67-48b9-8e5d-2394b9bbc4ca", "sighting--ef1145e4-b722-4cc8-ab13-24e66bc08084", "sighting--cc6e310c-55ce-45cc-b400-85cb65fd1ee2", "sighting--71e6a89e-e049-4aa1-8485-287f02d06751", "sighting--4351408f-45e4-47f4-8108-c8f6e974bf03", "sighting--201e14e9-1f64-4775-ad5a-7605d3277d83", "sighting--23db069e-07ba-4b88-9db2-c33ab9530b9f", "sighting--841bf382-be1e-4879-beb0-a86bc57520c9", "sighting--e69437e6-cd00-403b-b9f3-0f156f4870af", "sighting--2eb5f18f-466b-4f92-9b09-686cc381bf9a", "sighting--410799e6-c036-46c4-a126-b168f8c64d1e", "sighting--64bd4798-68b6-4b7c-9541-e029d4650f16", "sighting--fcec7223-957d-4d68-adc7-e131e6f67668", "sighting--6d68c2f6-7546-4ff9-8678-471157807a4a", "sighting--b67916a6-afab-4f1a-87e7-cb43a566433e", "sighting--84a00816-9acd-418e-a5e4-aa4876c173e9", "sighting--b37b2869-ecaf-4eca-9f58-e142781d7ee3", "sighting--162512ae-dad1-48c4-8e21-f1fa7fadcea3", "sighting--fa90b60b-8b6d-475a-b51e-c1211a3d2b61", "sighting--fb330530-719c-431b-93e6-048bed50d905", "sighting--60729a9c-cb86-419c-b06a-f067c8366f9a", "sighting--f37386fc-3595-4253-99fb-901d908b9c37", "sighting--40e6ab5f-49de-4efb-a168-2fd4cc638bbc", "sighting--f3272557-d11e-4590-9800-54042c1e9ca7", "sighting--4fbb17ff-becb-4daf-82a0-3004fdd84069", "sighting--58682d8d-7535-4010-b113-e4d6c4d3550a", "sighting--ccba4918-1104-46d3-a724-f9c42398acfd", "sighting--5f43209f-b920-4294-b72f-41afbabbc2a1", "sighting--194b4aa7-1bc7-4736-927b-3a1b82870fb8", "sighting--452e7e6d-8654-41c7-9da5-bd4257f3df46", "sighting--8d18940b-4e0a-4386-90ed-bdb9919d325e", "sighting--76dcb33c-9302-4cac-b085-9f1777764b72", "sighting--7111c0f9-b10d-4260-b1a4-57acc7bc5bdb", "sighting--8884121d-9234-41fa-a470-881a62001a9e", "sighting--83eb1618-bc25-4c6e-bfcf-13fa5c7e406c", "sighting--25768c67-a8d8-4d34-9bba-27a488405f2f", "sighting--96c62c34-9384-4fd1-9e85-ca169724b45c", "sighting--dd1470fc-b6bf-4770-ab40-75580b5ea808", "sighting--c86e89bf-a428-4cd6-908b-8479b0cd3d09", "sighting--ae90fa91-7f42-4cf6-8fa3-a6aed9ed9f95", "sighting--8492ed27-2197-423a-9838-43b65b27cdea", "sighting--9c8f4a3e-b8c0-4676-8837-29d0f2ee7187", "sighting--7d8837dc-5ce1-4da1-8057-1f8443c39210", "sighting--f0f2c78d-62d8-41ef-8da6-19c2684fd341", "sighting--9a5c05d4-aee6-4f51-ba62-1f8909c571fe", "sighting--9e6c6f23-69c1-4cab-8273-f22070d4c1e7", "sighting--54e8a5d5-4bd4-448d-a7fb-f065df609d00", "sighting--ad03fb6f-fc5c-465f-b4c3-9e08623ef0db", "sighting--01a7cd13-c451-433b-99a4-446b999a3328", "sighting--9a1173b2-756d-44c2-b444-b881092aa674", "sighting--01814861-cc1b-447e-bf5c-31ce2a1a1f6d", "sighting--2445d516-b238-4d7b-bbea-21a8bf66fe6a", "sighting--70973f32-a435-48af-9498-9ef38c0ad7af", "sighting--8e043798-fd02-4bbc-a31a-7dc9071770fc", "sighting--dddf73c1-23ab-48a6-b4bf-e04cd1918c3a", "sighting--87147add-e80d-4569-9637-f4304dd3b4c7", "sighting--b323a9ca-7187-4604-8702-139a64b48748", "sighting--4d34931f-12c6-45a7-81c3-309579480be6", "sighting--8e2fdc58-a68e-4731-b382-4025309081f6", "sighting--de0c2bab-0c10-4251-904f-4fa27ef458bf", "sighting--1c17d4bb-0f2a-4234-a443-2af3d7993824", "sighting--231aa152-1ed4-4420-b61d-ffadf08b5fe2", "sighting--6120239c-9a99-4de9-a415-05bc00d05206", "sighting--bd6e274b-318e-40b7-bf3e-624c974fee47", "sighting--79f6edf5-d5b4-43fc-b06d-72918a3a2c51", "sighting--d5b9ffbe-f458-4745-b2f2-c2d91ca91fbb", "sighting--66c30c81-0fd0-4857-b444-79711cf8f576", "sighting--ccb3ecaa-0cb7-4465-9a71-cc2413b5cdec", "sighting--b92eaefe-aadb-418c-862f-5eae33031a88", "sighting--5c0f0312-a6ec-44e2-b039-035c9a3d9c33", "sighting--fcbe9b78-b1ca-4fbf-8754-dff5b44b598f", "sighting--b81cd15a-ee2f-47c8-9225-a233895c4e13", "sighting--f244e2d1-203d-4aeb-811a-5184844c1ae5", "sighting--39497c2c-839a-4cd9-96cc-de20c6a77284", "sighting--ac2a0baa-3f20-4f23-a76b-802fd01ee0ef", "sighting--a109e67c-633d-4903-9bb7-712131758abf", "sighting--e36c80ed-4409-4ace-87cd-d0be302c1c26", "sighting--67f5fb3f-a434-4af4-b315-f88eb7dbbdaa", "sighting--f2c75fd9-8c9a-4156-b8a2-9196d8cb2957", "sighting--7d1930ad-40a9-4826-96d6-b7704ac04bc9", "sighting--c8ae22cd-a312-43f7-bb94-140e18fd1766", "sighting--6dbeb543-0aeb-4208-95cd-e16e70a01636", "sighting--73850705-71c3-4d96-aea8-1db3fdd1da9e", "sighting--b39f9712-9e87-487e-be05-489b3dac0192", "sighting--325a63af-bfb9-4eaa-80dc-87d710bbef57", "sighting--7bc6b3d8-f217-4479-8f59-ed03cc3820e8", "sighting--21829b2d-8e32-4590-8d6e-9440e24e8731", "sighting--55764f5c-f963-462a-9c9b-e8311c06cb33", "sighting--a676ad49-e13a-4507-90cf-3bca2368e0e0", "sighting--69934d47-ddf8-49e8-bc35-eec0244ed974", "sighting--aa4fa850-3c9e-43f9-92f6-3b9e0b1967fa", "sighting--e25c2888-7621-40f1-a5d1-1054874e20b8", "sighting--f38df046-cff3-4e7d-8731-09df2bf7b309", "sighting--b16315d3-975a-4a0e-bead-bae2fdb88618", "sighting--2ccd666e-72e3-4d24-afdf-5a71d0a1e351", "sighting--cae95430-fbde-457a-a37a-bcf661e164c1", "sighting--25e0d566-02c1-423e-8ca6-d22eeca9d2d0", "sighting--00b99481-1f25-4175-94c6-6a7dd686da70", "sighting--68553a02-9e25-40ba-bce6-cd3b9199cd08", "sighting--63197a49-8db1-4537-a9bd-dffc6a790a81", "sighting--d6a82e7e-2c5e-49cc-a961-ebdeab0b7f47", "sighting--eceb52da-fff8-4410-8ba8-836af29e5f83", "sighting--a3b6c40c-0998-4c53-9e5e-76d511772b7a", "sighting--e7cbd558-2181-4973-9951-51bc893a0bba", "sighting--9a6879e6-7989-44f2-bf3f-e60f49216835", "sighting--36b69fec-bebf-45c3-a7da-519077467ada", "sighting--2de81190-f055-48f5-a5c4-7fbbcc6cef00", "sighting--5769988c-7659-49f1-ba4e-b5aff28d02a5", "sighting--4c5bf771-476d-4dda-ae59-5eb72f9e4f3a", "sighting--f4e9e06e-c9f1-420f-8e59-a90225c8f8fb", "sighting--b269ed62-aabc-4896-aeef-f92bab7d7f19", "sighting--a3193233-a926-430c-b8b1-286b7ab0b812", "sighting--be7f3863-6ed1-48a5-ac09-1639953c131b", "sighting--64c5f942-2216-48e4-9dba-2451be277da2", "sighting--c2eb5eda-ddee-4034-8868-3a9c884b2416", "sighting--96b377b3-1ec5-452f-b2d8-64f77a2fde70", "sighting--dd3b895a-f4b4-48f8-b2bc-09fbd6182b25", "sighting--38a2a19e-7bf6-457e-8d52-455de2540a82", "sighting--2335023f-2dc2-45ea-a57d-cc30db9daa2e", "sighting--b04c4c68-6c8c-4c2b-bc41-3868018f23b9", "sighting--dfa5e827-c9ed-45d2-9f5c-c7d497d02b1b", "sighting--ea377d33-eb1d-491d-a529-9cb9bb2414e9", "sighting--72bdf6d7-5f45-47a8-b6a3-1bde222dc751", "sighting--539b9da2-41d5-411b-9bbd-b08ed71f2c8d", "sighting--4a0ff611-ca70-4609-a584-1053178b2e7c", "sighting--b541dd11-5414-4dd1-9599-f1512dbb6f62", "sighting--90622446-7c46-4290-b828-bde7189f317f", "sighting--6ad65d95-7783-49b0-98e0-874e424a8f18", "sighting--1d262dd0-f593-4283-8664-c78796a045d9", "sighting--665119ac-a9a0-4e09-bbdc-f6efd4a969a9", "sighting--10e64cbd-724c-4c98-822f-52b75facf6c5", "sighting--4b3c3fb9-6681-4fdb-97a2-a0bd76d92ccb", "sighting--427c2dad-b102-4b02-b917-565b98ef763e", "sighting--8d07075b-841f-45ae-bcb7-c69ce84c501d", "sighting--984d2f3e-ccf3-444c-944f-b5c1914142ab", "sighting--fd4699f3-48ec-4007-a895-a06eb2416af0", "sighting--0a0aee5e-aabf-4d5f-8f94-f51b25c08c08", "sighting--24ce933b-89dc-4397-8cf1-697e65b1c0f3", "sighting--6720f62b-7c67-433a-b955-ccd40eebce60", "sighting--331997ad-9c81-4cde-918a-f10877280376", "sighting--51bf50e4-f20e-4324-97aa-b230e73a244c", "sighting--ad0cd9fc-a652-46ef-b430-9573e4c57c59", "sighting--0a1cc36d-524c-4695-9aa6-5f744ae4a4c5", "sighting--91c5e018-4c13-49d2-b71f-6be48def6c1b", "sighting--c283d546-9aed-4e38-a2be-87fd78c836eb", "sighting--05da3ef7-399e-42d9-858b-0fb36f70ff81", "sighting--222b1496-f652-4633-b70e-07cfc36fc7a3", "sighting--4f1321e0-a93f-404c-9de6-53f05a04b62d", "sighting--8cb568f1-e055-4ceb-a1d0-d1de26ad4f16", "sighting--3f548a04-75a6-4cf1-96fb-0da552f144a5", "sighting--a9561eec-aac4-466e-ae3f-3c9b6e24eabf", "sighting--1a9b6b4b-ae35-43aa-8f91-5ff89dd017ed", "sighting--b1de8a00-a1e2-4fed-bbce-5d7923d7d6aa", "sighting--0310cf94-f39b-4798-af59-5f64830b5cb3", "sighting--99ebf8af-0862-4535-b712-1967ac9fa3b4", "sighting--b53269b7-d2a1-487e-acf4-3913a3fc12da", "sighting--9e67ce96-5340-4d5f-8ffb-0ca0d051b44b", "sighting--f39e0eb7-59db-46b7-bd42-0ef3bdcace5c", "sighting--dcb30d16-025a-4768-ab7f-8c2b3ae127ed", "sighting--c81d36c7-c58d-4998-b41a-6add43587020", "sighting--ea0d6350-90ee-4860-9844-6ebaf592fbd7", "sighting--b0563246-d4ba-4a7f-aa86-ac2e30edf9fb", "sighting--4886c7d4-f15a-4685-92ac-1aa607631538", "sighting--d4f4be6c-7830-4e39-915c-1a4cfebd37a0", "sighting--7944872d-1aa4-417c-b27d-0d533fbdd8a0", "sighting--d92de9f1-2c15-41df-8f4e-3a891e41150d", "sighting--dd9334f7-aac0-456a-9b45-909786847014", "sighting--89422e78-eb00-4a7c-8f69-fa9fe05fbe72", "sighting--3569eaff-7ce0-4590-8b0d-a311b904bdef", "sighting--a00e2bd8-20ff-4df2-a75f-c9f8c43e957b", "sighting--2e6f4364-6368-42e6-9f36-0bf8389796ef", "sighting--9b0f3c14-f213-4911-8b48-a3b5b4aa9c3e", "sighting--78f8419a-ec7d-4227-bf9f-41ffc5b31734", "sighting--d2d86082-1ef9-412f-923b-e700b91969e9", "sighting--04951056-0f16-4c47-ba5b-38924f5664ec", "sighting--5b8baa60-aafd-4032-9630-18b08f6b7c81", "sighting--992a49d0-fdd4-40f9-8d1e-a66b67d16538", "sighting--b0ce2004-29c7-489b-9984-88cf50f98578", "sighting--3d97083d-4048-40f7-8f60-ab1eb5615732", "sighting--dd123404-bf5c-4421-a44b-b5756635863c", "sighting--031c8e7a-62e0-42df-ab83-3fc0fb0045a1", "sighting--e17b2652-85fb-4546-b87b-c048efdc2597", "sighting--60afe826-73cd-452c-8957-9f3618540705", "sighting--73c01c1a-7ec5-4215-92b9-b68842ba8119", "sighting--4180d72e-3ee0-425a-af56-11d4727f0371", "sighting--a978905b-f23b-4421-955b-a8fbf03fd5dd", "sighting--cc336464-f3e1-4f12-b3f3-0e11a8948c9b", "sighting--350ac031-fed1-4fac-8cd2-943f87a4f157", "sighting--6580b3f9-6070-4692-ab6a-81297c322d56", "sighting--82934094-e5d8-4ebb-984e-9d1de8a3a93d", "sighting--ec3ab02a-cfe5-4b7d-9ce1-35cbceab8dd8", "sighting--1a6b83f1-40b6-435b-b9c5-eac27d9495d9", "sighting--015a1d7c-308c-4c44-bcb1-fe261efe8732", "sighting--c376c528-740a-4aff-a194-114a5ecd2dac", "sighting--529f91d7-a2c8-4e3e-8510-41db3b7dd725", "sighting--05a1320a-5b8c-4abe-8000-0588a2136e3f", "sighting--75a1f3ff-e31b-4b04-b5cf-9e1442b0e2d6", "sighting--8ff21b33-90c6-4482-b52f-3750d1cb03a4", "sighting--4effa4a6-d61e-4696-a709-9a7330604c9c", "sighting--e6e19291-388b-45fa-990f-59d8600fad9a", "sighting--fd70faf2-6ab8-40a5-bf84-af238836df5c", "sighting--55830899-19b8-4873-b18b-ade7715f86b4", "sighting--b1126fac-2ea3-40a6-b78b-41c06f5ba52f", "sighting--55f6794d-b7f5-4fb9-b051-9c7770494a15", "sighting--de354930-1a6a-40bd-811b-e5d50c4630c0", "sighting--0f051daf-c976-466a-b1a8-b45a884e67bc", "sighting--e48e7051-66b9-41ac-9ae1-0390a7bf0b60", "sighting--599d0977-82f2-407d-96e9-ae905c5a4aa2", "sighting--58fe643a-7879-453c-ac3b-5d14b1d54061", "sighting--cc32adfc-b4c1-4b3e-9911-502825777458", "sighting--aca506b6-183e-4d9b-8d0c-ad12c99ba87b", "sighting--b20cbc77-3058-403f-b8ce-42a0efbdc7c8", "sighting--0dbacb24-9715-4084-bdd6-618aa41ded47", "sighting--cc6208d9-0dee-43fc-9f83-fccf5a32aa75", "sighting--9da39539-a2df-4562-800e-a87f65ab77d6", "sighting--55c0f11d-392a-4cd2-9267-fcaf9299052b", "sighting--6e1834d0-73f5-4ba1-b62f-8563c380b81b", "sighting--325764ca-e9a4-4070-96bb-00cc633c4948", "sighting--39c8cffd-bcfd-4f83-bd66-4a85ee229b90", "sighting--1a28a90e-1840-4ca6-a623-371a515c87e8", "sighting--cd48c44b-221c-4a01-b9aa-545617bb33ba", "sighting--bd1f8d98-8b40-427c-8944-a2c7e08f04db", "sighting--00e76ec8-e5c3-4d4e-8eda-174a0289b6b5", "sighting--532a31a5-ddb2-447f-af09-8ca982cbbbec", "sighting--f694083f-f5d3-41e4-97bf-3bb62d3992f3", "sighting--1355340c-f198-48fb-8e08-3188e4338d69", "sighting--71d098e0-8047-4129-89f5-6a73a71f1114", "sighting--f87bfb3a-f84a-4781-949c-4a762b53dfbf", "sighting--0f150318-f9c6-4f97-b8b5-8b531fae751b", "sighting--0a2443b2-e0fb-4e97-8478-c842e670c952", "sighting--27a01751-af13-4484-8a4c-488e026f9e12", "sighting--4e120c60-8d2f-4607-b058-2ae7679789cd", "sighting--e9b34e47-fde3-4587-aa98-35d6b1fac82f", "sighting--e3e992bb-d02f-4b4f-95fd-f9a74687ef02", "sighting--85c87b1e-4c0e-4a33-8225-db3a5187a8c8", "sighting--0b92e373-610d-4651-8eae-1e2fa26f9b47", "sighting--6c21bc16-33ff-4f72-8a10-ea8de64cc132", "sighting--9359a88b-c8f3-4c50-8a17-2a6051b0bcf8", "sighting--0e135ffb-d442-4903-96c1-e29452d3cc51", "sighting--ec714979-3f23-425a-8cdc-9337645a8d84", "sighting--fc35f978-4f55-43f6-9cd5-969b8999fb5f", "sighting--50ce6e89-1199-4632-9a97-9f75849be495", "sighting--8b7e6106-41fc-4a2f-9e21-f1e5da329f4e", "sighting--48373611-6b70-45c4-8a62-5d966d8303dd", "sighting--525ea2e0-fa87-4f01-b3cc-611fc4bb268f", "sighting--247f7901-c914-4666-aedf-87941e926fbf", "sighting--b70abc80-115c-4bfa-aee7-1602a8a50dc6", "sighting--2b426ed8-dce4-4842-893f-ab747f52272a", "sighting--f859f250-5769-465c-8952-06a45ba013b0", "sighting--452ab35d-6dce-464c-bb5e-10579a5bc7f4", "sighting--f83ca355-fc28-417c-94ff-8426d8fd6960", "sighting--c8935f61-1e71-422d-8221-3b0bd2f86337", "sighting--7a0c08fa-2ec1-488c-a5ab-98ad17f8b627", "sighting--6134cebe-80b3-4445-a565-518bfef7ab24", "sighting--b191e7e2-ccac-4e20-aa49-263067d88d81", "sighting--187f1c94-7fe2-4aa8-9c74-f9d518d58aad", "sighting--14be5a12-3551-4981-9691-240b75c86aca", "sighting--4f4b2e14-9242-40bf-a1ac-f997bc8a82ab", "sighting--efc2538c-2752-4309-8e40-0d26507229c4", "sighting--9ca5c044-e6f1-4ffb-b806-80598fe7c856", "sighting--43845438-f079-49f2-a74e-34fcff32a1d4", "sighting--a7d496c3-46f7-4d86-82b2-40e1481fcd6a", "sighting--1d325d8e-7032-4d2e-a77a-f7c0d3f47ee6", "sighting--1a8ee2f9-af75-4937-89b6-b22b8b963ebb", "sighting--bcb8a46e-e24b-4265-823e-af75be4ae080", "sighting--d183fe51-c026-490f-b218-c1a8b098f128", "sighting--706fa197-9665-4720-be11-477c3755b8b0", "sighting--0a33f96a-1d08-4e43-85e5-97166bb8d947", "sighting--2291664b-a2eb-482c-98fc-6c24cf12a3a7", "sighting--c9be6948-7a94-47be-ab0d-f982f8ebf399", "sighting--6f3e4832-9f54-4718-8d72-6c26808d5b77", "sighting--6c2211bc-09f2-4774-beeb-73aef81ed8ef", "sighting--e27d70cb-ff10-4464-9c7a-2813f82ad2f4", "sighting--e64ff28e-ad6e-477b-9e83-3b4d963d4759", "sighting--5322259a-5948-4f46-a72d-016c0266a032", "sighting--deaa1795-75fd-4540-83e0-a66c7e788762", "sighting--fbe7afd3-0614-48d9-a443-7f29e2d008d1", "sighting--452f792e-8ce7-4175-b565-bd0f081dc138", "sighting--3efe3ca4-4199-4ce3-91c2-8804e1c6aeea", "sighting--6e05bef6-e473-4ab8-a18f-d28befc56f1a", "sighting--0e5a076e-b12a-41a9-a8f1-b4167ceb644c", "sighting--23d4d4d2-7889-4943-a92e-d4486b83a89b", "sighting--26c6c24f-9822-4e3f-8e1b-8b864fed53b5", "sighting--f458bf50-4341-4d85-b020-fda44723e965", "sighting--93a7bad3-947e-4372-b4cb-53a50d7b85a4", "sighting--b1ac8b52-d457-438f-bb21-ab18d844348f", "sighting--d37bdb85-1f8d-46cf-8d5f-b850c7e4c5e8", "sighting--246733ea-f7c3-41e9-9189-8c8271d178ee", "sighting--c7224c2e-c049-4620-8359-023758d4ebca", "sighting--8aca7b78-b5ae-457e-b325-8486f2b40fe8", "sighting--8060a1cf-15c4-4430-b09c-83295c96d307", "sighting--6936ac17-6109-4a65-afd7-2ee24388cf71", "sighting--c33a7ba9-89b2-43f4-b459-b7e76f55d300", "sighting--4edb80d4-8933-47d6-bb1f-ceac624de00b", "sighting--3072f6fb-53ff-4a38-8b69-e92559691f55", "sighting--4329e833-8fee-479f-abac-bdb033668c15", "sighting--68a64d2c-a032-41ed-9f7c-9fd78c0b4e65", "sighting--5b7ef9dd-3585-4280-861d-05c79dcbbbb3", "sighting--030b9026-4551-4368-8dc2-f94633d5c139", "sighting--eb4b35f1-3912-4f27-af08-da0de36008e0", "sighting--fb05cd57-4067-4d73-ab92-a68a634495e4", "sighting--076148fd-de05-43a8-b619-c353ab998900", "sighting--7ec52c3d-90f8-49ad-b0aa-44538321888f", "sighting--8faf8dee-b130-46c6-b3e7-b471a0349386", "sighting--3bb1b0d6-f50e-42b9-8abc-5eae56350afd", "sighting--3a6d7d38-4aef-4c9c-9bac-3128091bb541", "sighting--81f76c04-2566-43db-bfa8-5dfbc0e4fe60", "sighting--04eb5149-b64b-4042-88c4-8252e5a2c887", "sighting--8ccd12de-9ede-411e-a056-760e199f33c6", "sighting--b08b970e-d9b5-440c-a38a-b6161f9d066f", "sighting--81915a50-1703-45fa-a33d-4af3dcd0dda6", "sighting--cec20697-b1d6-45bc-9aa9-7dd86d9573f2", "sighting--51814a46-52c0-4dce-9d82-4ed994b861a6", "sighting--32bf1408-cddc-4377-b9e3-09fb18bd8bce", "sighting--e09a05fd-e6d8-44c7-9268-4a56880ffd72", "sighting--8cff4ac2-c8c3-49a7-a772-b2bf1ee221af", "sighting--005cdd3b-27ce-44c4-bb5c-e5604278bab3", "sighting--e5116ef9-d5b2-4968-80b6-78bea30540fe", "sighting--3f7cc65c-fc8d-4b03-b7f3-85d3646d8d3a", "sighting--c764742c-9534-4f61-b6a4-d6f1e3bc85ce", "sighting--c34cd5eb-4bfd-4cd6-8371-c9d08f8b72d1", "sighting--3c3333a9-ebd5-43f0-9d3c-2ce7b7beb388", "sighting--7d3fe723-439c-43bb-ba49-81babe970a8c", "sighting--80983b8b-235c-417d-9f03-7dd4b22cbe62", "sighting--5ad0c54b-f237-4169-a310-1684e9ca78ad", "sighting--c2981382-aeb2-4620-912e-29bd7a31a352", "sighting--0d8818a8-f718-4098-8032-fb8e0b90fe61", "sighting--c29961a9-157f-43ec-9f51-1f0bbbdbda74", "sighting--cd9f73f5-ddf1-4fc0-b1c0-fd74e3420c41", "sighting--b0530328-8b66-4004-9240-f69a17a8cab9", "sighting--5bb6d979-3e4e-4d23-80a5-350db1a470fe", "sighting--524ef560-2d12-426e-a1de-0bdb6374a662", "sighting--c579ee91-1c41-421c-a46e-64113d2a264b", "sighting--2768c5ca-ef2d-4618-8731-2d2fcd4ea871", "sighting--2df90433-d13d-41a5-a9a1-b5ee62ccccc6", "sighting--c2a75739-1e72-4d6a-a1dc-e9c01b2cd27f", "sighting--626ba17b-9c99-42b3-bf83-a88b5d356acb", "sighting--16f02a69-4e4d-46cc-9199-330828be845c", "sighting--e69cdb07-320d-48f6-9a42-589f3706b354", "sighting--f54c3c17-0594-452b-b767-fed4ae1b78f7", "sighting--69f4e4f7-21e3-4446-81b4-074c347bfd35", "sighting--7648daa1-f92a-4568-9e27-5f4813e4c57d", "sighting--218581ab-63f0-413c-900f-a6417cab0431", "sighting--f705855d-64c9-4609-b43e-e92a2abceab3", "sighting--d283e491-9139-4323-a489-f7f043518257", "sighting--682a2aaa-8f7b-4a0f-bf23-30c39bad65bc", "sighting--8fe1b817-87e2-4db9-9790-4fc8265ddf90", "sighting--a0895ef3-d8db-4848-8197-3a737102b498", "sighting--f58495df-ad67-4a71-a600-64981f4b2c1c", "sighting--6d10bc17-96cd-4ca9-baf0-e84f14156bf2", "sighting--5ad0247d-7f8a-4950-a41a-66c232533f85", "sighting--000a189d-9705-40eb-ab80-862e37b8e15c", "sighting--12e485a0-0d22-4785-b60f-ffc056b1fa7a", "sighting--1c119b7b-c711-4e4f-943a-413ce36669ee", "sighting--98fb4421-5c81-4d88-b2ec-16babbe3f00b", "sighting--ef227b40-1f72-4e95-b8f4-274606e2b150", "sighting--7799a16b-0675-4b91-ac07-7f6b90803775", "sighting--466824cb-4a69-4e94-beca-3eac49d1f9f5", "sighting--c2d78737-d639-43dd-9bae-9ef20a8e84af", "sighting--26e4a3ca-82e3-4b4e-89bb-336387c52d14", "sighting--ebd4e3c8-7599-4e57-a2b5-e2a6a59eada3", "sighting--66774438-4ab4-40c0-b8cd-299a4a1f7c8b", "sighting--e83a11c3-4bfc-44ab-b97d-ab7a8f1d0cc0", "sighting--70db6886-ebec-4532-941f-c32ea7bcc053", "sighting--cf48da18-3df2-444c-9a9a-99efe1561bc8", "sighting--beff9ae1-de2e-4599-a7b5-2e1c184ebe6f", "sighting--a114253d-f65d-45ed-a647-a947973b6f15", "sighting--f0ee0f87-3917-4350-9410-62b4b914f079", "sighting--67794e13-250c-4b32-8199-5ba67240d8fe", "sighting--e020bcf2-6359-4ce0-bc7a-3cf0b1ae7ee4", "sighting--8d66db4c-205d-4763-9dbe-51fd623bcfef", "sighting--bb8e47c3-1132-452b-91b6-a8b4f367f1d7", "sighting--af56a067-500a-4552-a23b-041fcff6b909", "sighting--a4a5b2af-922b-4460-85d2-4a6b3f822838", "sighting--50634621-640f-4075-a9c9-d095b89932aa", "sighting--11692ca2-740d-4be4-a2ac-f2f6cac51a11", "sighting--56cc2088-e88b-457c-876f-ecebdcd061c7", "sighting--a5aa2bf6-70fd-4c40-9349-d28b4da4bccb", "sighting--263f4f53-04e3-4d7a-a479-0fae5e2a5e5a", "sighting--24c2b96c-5984-4535-bf43-9ae712aa7f80", "sighting--14af1ea4-698a-4b44-8d93-0ebb19a20a90", "sighting--b6ca9012-a61e-4abb-87b6-6fe7b4dbab5b", "sighting--2da146cb-4746-4e30-b079-22af5c5d592f", "sighting--525f75ca-305b-4968-bcd4-9dd244a65cb1", "sighting--75f709b8-64a5-4101-9cc5-4e9c354f7a38", "sighting--6ce3e894-5689-44e6-b6f4-c77472c5d7a3", "sighting--02c86146-d7f2-446a-bc13-d15a45298d59", "sighting--f94aa6f1-34d8-4821-8053-769dc68b8770", "sighting--27e9c79c-894d-44db-a837-cb6b99bbd736", "sighting--98bd8aba-5329-4ea4-9721-cc015c1d8727", "sighting--95995562-f3b3-4d38-9db0-9af934c7c551", "sighting--ea1ee67a-57bd-48f8-8320-c0c7b4313e7e", "sighting--3ec02e9a-29f3-4e8b-9309-2a4469e4254e", "sighting--5558a0ee-bcde-441b-a996-0877cc24a50a", "sighting--f06e1513-d1a0-4d00-b106-41f205009c67", "sighting--1734e201-b844-4c28-9c54-fa1f4cf5d876", "sighting--7b971cb3-e62e-4729-9d4c-e21f4535dee5", "sighting--922decfa-be09-449b-8b05-46309b7306e5", "sighting--784054e2-f8f8-4ed8-a45f-45fc1baed964", "sighting--12904e66-a2c2-4aca-86d2-f3717f0c3dc9", "sighting--bebf30ea-9cdb-471a-9a68-2fb31c89b01b", "sighting--3d9f4b21-ab2c-4840-8129-db41e211a0e1", "sighting--bb78c42d-ee12-497a-b137-4983d72f3bfa", "sighting--b0a8add3-d01e-488c-b38c-d043c5aacbeb", "sighting--76b59f65-0dbc-4cc7-b572-00b066e66de7", "sighting--7d933edc-2d02-44c1-853d-a30f2391236a", "sighting--ccbb3621-c757-4669-ab81-c976af7da5e9", "sighting--daec1785-7e16-4f5b-950e-9504f8492b1e", "sighting--ed5dda97-cb78-428c-a753-4830a7c53615", "sighting--220599ab-7f0a-44a5-9e19-a8191f1fd819", "sighting--3b13f224-29e9-4604-9114-2f58132b557c", "sighting--36352a09-8397-41b6-8c01-fdb56d480f1f", "sighting--47714dae-1ae7-4e61-9504-40af02feb3cf", "sighting--2d51f612-1699-4994-a325-1b79f65f1c6f", "sighting--41c2490b-d26d-49e2-ab39-26d26a408150", "sighting--4f8f129f-1c84-43a6-a1f6-17bc9b624991", "sighting--dc6f23f2-432e-48eb-849b-067f24749c90", "sighting--f51630e8-99b1-488b-a81f-679a8c6f8cf6", "sighting--6a19ced8-28e5-4c81-a5e6-a28afabedd5f", "sighting--18ee226b-789d-48fc-9a9e-82b341759b69", "sighting--35c52e95-f06f-49f3-8ded-aea5cebfa6f4", "sighting--9bb93598-05ef-4571-9bde-964d5350c525", "sighting--63505d4b-7d3c-4462-97dd-daf416964385", "sighting--575fa300-686e-41fd-8a3d-e3c73cf88105", "sighting--b8545473-5fa5-4039-a9d3-bf97adab9617", "sighting--17e60bee-7d97-4075-bf91-92e76e014b8c", "sighting--728d545b-3874-4560-9c01-e9cfc488f218", "sighting--5eda509e-dd21-4c20-a5a2-fc895121a9ae", "sighting--e52dc278-1729-4d41-b5a4-c6bb945c2927", "sighting--cff44151-3dd7-4bcc-9aa4-d9139140b393", "sighting--f41e4933-e88b-4aad-bc03-bd9c73998960", "sighting--479464be-f255-4b45-a013-860ffd9a5955", "sighting--b420375e-264a-481e-8157-cc4ed241c3f6", "sighting--6a22eb1d-38e1-408d-9502-268aa786f800", "sighting--d9978350-2c36-4e32-b034-c1af453f0f88", "sighting--0b934241-1e24-42ed-904b-49d67672a999", "sighting--69edf51a-7541-46d6-b3f0-3dbce34316f1", "sighting--9d26ead9-7f92-4f9b-a917-b9bb8100de8b", "sighting--6c1f004f-8a1b-49fd-816f-1fa3f36c9786", "sighting--30a0ed1b-74c1-4e0c-8f18-cf05767883dd", "sighting--4fba031b-9db2-46cb-a53e-0e426374ca2b", "sighting--f7d7e668-c426-444f-aedf-68540ddf9e96", "sighting--00b778c0-fb35-4bc8-9d77-e0734e6e3749", "sighting--f8e8d145-7747-4e2b-9e60-5af5f453b724", "sighting--1ed575dc-784f-44fc-b27c-8bdd98837802", "sighting--100282fe-d7f9-4ba5-925a-283215787930", "sighting--0cef5057-70e4-464b-af53-97c135680820", "sighting--0c860766-2bc1-42c2-9561-28684a35cff8", "sighting--4e631df8-0868-47b3-bb14-9072997b3df0", "sighting--103ba5aa-8e97-4c67-bc00-e4b4505b6c48", "sighting--68b2b5ad-8bdf-4e1f-ac40-f83b8468db6c", "sighting--5df49544-124b-4d34-b2e4-0b14ffb209dc", "sighting--16b4fbbb-69e9-49b8-bd7c-a15d33847bff", "sighting--59782683-90da-4674-8473-307d9a78b2d4", "sighting--0bf3f242-8e43-4320-910a-98585d9e4404", "sighting--8da4cd96-1a83-437e-b0af-b4f2f59e5ad8", "sighting--44693a48-3e57-42d2-a077-173881a68a8e", "sighting--ccd6f7c0-7f54-4f4f-9e60-5a5cfbcaab48", "sighting--ce74be5e-3d22-4fe6-bfc0-9e7c2464532a", "sighting--4f115705-2e2b-40c9-ab78-993429f00b84", "sighting--729e570b-10a4-4461-96d0-6b7f49893381", "sighting--6105e4a3-1c43-4538-8ebc-de1edd3f8261", "sighting--9cdc4fa5-d39f-4eb0-98b2-5238e7e6fef2", "sighting--3a95f41e-1045-4040-88df-3b43acadba8d", "sighting--90626aaf-5148-4f09-b77f-9a93c94c8ce1", "sighting--aca39da2-02ea-466f-827c-2b887602e441", "sighting--e93fea4a-f8c5-4378-95c9-6645aa973799", "sighting--3dbae565-1c59-4de0-9b97-3457433b90d4", "sighting--592061bb-3eb9-4beb-97c4-ee6e561b57dd", "sighting--5ebe3e8d-dcf2-4603-98e5-63d0dc96b584", "sighting--7b9e8d75-3a47-43f5-a56c-a01e50242dc8", "sighting--4e5a2ae1-aeaa-4f3b-b8a7-ed48a53021de", "sighting--c52e627d-4563-4236-8b50-276c963ae5ac", "sighting--ba88b7df-1c1e-4679-84a5-78c03864d2a8", "sighting--06c7fba8-17e4-4384-8df2-dbdc198017d7", "sighting--31f9466c-c0b5-404b-9b7d-bace5d7c1f36", "sighting--f73f2feb-f015-4b15-ae36-93ddb75dbddd", "sighting--9c57efca-7568-4258-aa78-a3afca3d2504", "sighting--fe7e2226-0392-4eae-9ed7-d86fc18ab4db", "sighting--a2b42e05-9ca9-441a-b1b0-57d41046fe3f", "sighting--7fcbf140-10e5-48e5-ba51-cc004070bc9e", "sighting--3b343462-56fd-4aee-9ac7-421feb9954df", "sighting--043a62f2-6666-49d4-a434-56e2bae89191", "sighting--b11d19a2-a715-4499-9387-bb47c7575a5b", "sighting--cb8fd1b4-0a98-455b-97e8-8cd214a087c5", "sighting--718c1fe9-5590-4678-b8f6-83aedb365f65", "sighting--029d95d8-9c2b-4757-9487-5dcd442f209c", "sighting--65fd4e5f-4d00-4cc6-88e2-f71e27df1dd6", "sighting--e66b51ad-9752-45a5-b449-2cadebfd42cd", "sighting--72a6ccef-4750-4601-bc2b-dbb36620dfd4", "sighting--00e53031-242d-41fa-a637-fb6004fdf476", "sighting--018cd72a-00f3-48b8-a2c3-4c3d705eab1c", "sighting--6c4a6ab2-9447-4974-899b-dc290644cb2b", "sighting--8e53a3df-cf17-4915-b048-cc993883af96", "sighting--d340e2d7-cce9-4d45-9da4-eb790702e33e", "sighting--1de448c2-e91f-456f-9855-46656b0ed167", "sighting--9ad82ed5-ce7f-4a27-931f-3c86385dd60a", "sighting--72aad0c6-bccf-410d-91be-18c4724a70a3", "sighting--5835e888-23ec-4308-9fcf-fcc282f01bf1", "sighting--2193d878-b409-4bf6-bc69-2c55a6c59858", "sighting--29a7491f-7452-4d36-b17f-29dd4012e5d1", "sighting--1adb1588-a47f-4dcd-8c48-062d16e91d53", "sighting--0e0af948-62c8-4589-bbc7-6ff6bfc1aff7", "sighting--c8095c62-0d90-4f4a-8f58-019ca25327c5", "sighting--97ef3857-00e1-48d4-a1c5-625da2bc05a2", "sighting--9d4f02c9-1fc6-4643-bdbd-6595c4017553", "sighting--a3d254c1-c418-413e-8d9b-38838262489e", "sighting--1a941d40-dd7f-45d9-bebb-b4e5c22c337a", "sighting--a27c40fb-9ebf-48c8-b557-b253baf35ff1", "sighting--a0a8f39b-9e60-4f50-8c91-5d6b5b36ad1f", "sighting--837537a0-37bb-485e-b4b3-15f4b22c0724", "sighting--16f6f400-67a8-48e0-afcd-4512f6150b79", "sighting--100ceb0a-74b4-4785-9aab-14b35d439bc2", "sighting--0ca82722-dd06-4dac-8569-4b55f55febbc", "sighting--c3aa206a-180e-4888-9719-eb29e65866af", "sighting--d31a076c-a882-4451-ae98-dd3cade5491b", "sighting--90a904fe-f164-4140-8771-27cd3dba9b6a", "sighting--bef98d60-75a1-4c19-b5f7-ecca7f7ee59d", "sighting--983ddcc1-e403-4f8e-8bc6-57edd690d2a8", "sighting--5cc6b43c-932f-4af2-ab78-7e13ad4c7b75", "sighting--6369965c-7b12-42ef-a3ae-5895914dcedd", "sighting--8a5b3843-ff8b-42b6-86ee-d862c1f6775e", "sighting--ff7fc3c3-287d-4f95-9a36-198c77b14295", "sighting--f36d8616-7dd5-4a87-8c83-a3aab557c1ed", "sighting--a114cd6b-8953-4d78-bc46-3c2501be86ff", "sighting--894efbbc-775f-459d-834a-c3f6f9295128", "sighting--37b35936-3da5-4d64-9e99-28c41396a7ce", "sighting--dfdf4073-6334-4c14-9294-4814d874e43e", "sighting--733c073f-46c1-42cd-92e9-5afb83a0b365", "sighting--a106f7a8-5693-43d3-9ef5-7571800885d0", "sighting--007b4e79-dca2-4f27-8d03-e32dc283dc95", "sighting--d87be4c5-57d0-47d1-89cd-6b564a2e826b", "sighting--b82bee46-4009-4a15-9eb9-6e0996410b5f", "sighting--c8893f05-c1df-462d-bfbc-db8112aa564c", "sighting--adb42ee5-222e-401d-aceb-7ff42deea98f", "sighting--84f2e24c-03ea-44e4-8800-9c8d3f906190", "sighting--1dd0b567-3ca8-491e-ad3a-5f15b93710c5", "sighting--f8b9f67e-6371-4dd3-af60-6e07826fdb20", "sighting--e4f98daf-df64-4cf4-9906-f47b22ea8ccb", "sighting--7826a69a-2065-4f62-bba0-c28597ddf60f", "sighting--9f7081ae-c647-42f3-ad17-56bea292a4eb", "sighting--9fca19cc-a29d-4ab8-96eb-58cda7b2476c", "sighting--9ae8f94b-c969-408c-b039-a9d4676aca15", "sighting--eff99145-a85c-42f8-9ee7-c718b6c454f2", "sighting--2435ca6f-e129-4b8b-a6a2-6ce862010605", "sighting--92bec98b-013b-48fa-8160-9a85f601cd79", "sighting--e92a7f2b-3875-4d51-a242-d7b9e2007d8c", "sighting--d7146ec3-b67d-45cc-92ed-34f596727faa", "sighting--a4dbc07c-f955-4615-9b06-8e0558bcf11c", "sighting--ac098992-aa23-4dcc-8fc9-acadb071fa8a", "sighting--6dc922b8-fffd-4d35-9b7c-1c59cf6654f1", "sighting--70820b7c-b2c0-4af6-a31f-1cbb0adecdb0", "sighting--6e106df2-1e36-4ed4-a96d-48c490a31fcf", "sighting--8fc58925-d2b6-4a44-bc17-6d3799ebb612", "sighting--d950f028-3bf8-476f-a950-3f196793efce", "sighting--3e4d7a79-1d22-461d-b524-59b22c7d40f4", "sighting--669dc41d-5731-4958-b5b7-1f48b7ed942c", "sighting--365d8ffa-bb37-4f27-b9de-8044bf9390bd", "sighting--c3b0fb26-3402-42cf-a196-7cdfe981d54b", "sighting--a8cd9c47-231b-4177-a5ba-0885033e214b", "sighting--17b26819-4a46-4afe-adb3-62832d2235d1", "sighting--783f73b6-e159-46ed-b400-557ad304f8be", "sighting--170ffb81-ffb3-4849-a303-aad61b6b8be0", "sighting--c0bfa12b-029c-4407-9fea-324cd47d4c18", "sighting--a8a8ae9f-2b0f-4694-bfd8-28cff0373c05", "sighting--c3d954a8-a636-455e-8330-02c3be5e9a3b", "sighting--97646d59-d04d-4195-874c-22a73d1e5190", "sighting--334cd999-ae53-43f5-9249-a1f121119fe7", "sighting--e003d708-4ec0-419d-b2a6-e748a13ec57f", "sighting--055d6c3a-559e-4d39-b020-78c1be6babcd", "sighting--66239312-1ded-4692-b068-735b814283af", "sighting--a4fa0881-0fb0-4e2c-892c-457be3fcc851", "sighting--b10d9264-6c24-4f2c-8598-7911798491c3", "sighting--ea3ed5c3-3671-4628-952b-9b994dac5d59", "sighting--667b0668-7529-4d4d-92ad-5822fa838b72", "sighting--b689330d-4d31-49cc-a7bb-a43c3135a868", "sighting--34f949ce-5022-41c9-bd59-be61ae5c869b", "sighting--88ba49b4-e733-44fe-915a-150b081f8804", "sighting--3802ba3e-9f08-4244-bc3a-5599ef46acd9", "sighting--065e9ad1-a7c7-4a12-a014-42b4474d70e4", "sighting--6d7cb733-b402-4a8e-bb38-4db09391f56d", "sighting--faef7fcc-ee75-4044-8bda-97c653ae02f4", "sighting--ec9ef7ab-b2f6-40d1-89d2-c7ef2f7e1cf7", "sighting--c66f71a7-2ce9-4412-86b0-fee0d73a3ef6", "sighting--42911d50-47f8-43a9-b946-2df550fb6fee", "sighting--1cc1d6ca-3c1f-41ec-9400-0a8db8cd08d0", "sighting--cbaba4ab-6357-4a7b-b1c4-08c098bdad9e", "sighting--fcfdfb9c-0d8b-4f4f-ba0c-606137a53c90", "sighting--1bc701f3-fb14-41da-b8ea-1fcf6743d2e3", "sighting--2daba03b-5177-478d-8612-da2330789839", "sighting--c901027d-c473-4ac1-8a97-00d42612e956", "sighting--5e32e1ec-c636-4b8d-9870-5c6aec6c4f59", "sighting--bb815801-6b54-48b9-8f10-438acbf05bb6", "sighting--504e6625-89c6-4e7a-a698-28cc4e1f5a31", "sighting--357889fd-6874-4664-8a3d-bc09e137739d", "sighting--306da5de-69ce-4b45-b5bf-6f6bd2fde5c7", "sighting--2b0ae3ca-a473-40e6-8ba0-a713c0a3f63e", "sighting--91ac7da0-07ef-408b-9efa-1fda7a3b3d48", "sighting--7f558e77-d44a-4887-845f-64090c3a0117", "sighting--9d7657e4-1413-4b95-b320-adfab80b471c", "sighting--8e8a713d-60d2-4b46-b9f4-9a16435cc4d6", "sighting--e6d2dbe6-36a0-427b-859a-9fd6de2342ba", "sighting--d0461850-733e-4d56-ae64-6edd923a8999", "sighting--833a6506-9158-4c38-a782-7f9d352b08fb", "sighting--983d2fa8-f474-455b-9b45-dae88d87b8ce", "sighting--d265dff0-3602-4059-bc64-1ad0f8869ac0", "sighting--4d026f6e-fdf5-4d15-a5ad-0e2511e4c80e", "sighting--74ce5f23-a595-4dac-9635-9632de11068f", "sighting--8ddc3ecf-7518-433c-9eca-144abe4f178e", "sighting--d89b2fbb-df99-48bf-9c3f-eef8eb7fef04", "sighting--1690b37a-bfb4-4682-b319-0de285aa9b5a", "sighting--946606f2-3cfb-4931-8e27-30d52ff48a5a", "sighting--f96c0c9f-540f-4a13-b6d5-9f1fd6df8b15", "sighting--ad63ad4d-18ba-4fc6-9f25-36ef189c7055", "sighting--036a1124-017f-4e4e-a689-8255ece7c4f0", "sighting--349efe61-7526-4a6d-bee3-37cd4e2ece8b", "sighting--32905813-7e70-4952-9170-efecdf378e05", "sighting--a44eab2f-eb45-4148-be7e-f93958a1c622", "sighting--ac65c312-a23d-4b71-b54b-4df899b0da0f", "sighting--5d948cd5-8058-4cdd-829c-9b9a728fddf7", "sighting--1a620070-55fa-4ced-b7df-e3e89d9d5050", "sighting--52a00fcd-bfe2-40bf-a83f-be645112305e", "sighting--94a8d3eb-eca1-4245-9a89-a928cb64f00a", "sighting--b024b3a0-4f38-49bb-a869-c3ede30e78ca", "sighting--a941eda1-ca79-4071-95c3-5a21fe506f55", "sighting--65f57e74-9c71-4f81-a775-4d88a50a89dd", "sighting--a7b72e73-4483-47c4-9105-0316240addf2", "sighting--5887638e-b2fd-4a90-8d85-f0479795ad81", "sighting--8c234522-6f7a-4674-a1fd-7e2112bfd124", "sighting--573043e0-da6c-42dd-b60b-936d7c720a6b", "sighting--bfade981-f372-494b-9984-10430cacedf9", "sighting--9c0af26b-1cef-45f0-bfae-5b7d75d10523", "sighting--61632b4f-a1f1-4cc1-aca6-37ca43f82c7c", "sighting--b97b9a4c-a605-4d25-b05f-e8e018594d2b", "sighting--5f10a2b8-a50e-4e28-9a8c-50e5c775dbde", "sighting--eeb5f08a-b044-4985-a99b-dca5e06932b8", "sighting--f31f321f-f9cb-43df-8d27-a89887cc7fbe", "sighting--54475f65-bb1f-4ea1-a0b3-6747cb6d7d9a", "sighting--042cf07f-3385-4e39-b0f7-1d42a5be5cc5", "sighting--6113417b-3ab8-49cf-9fb1-994a5db5c4ea", "sighting--f62ff2e1-21a3-4ba2-a3fd-b531d6e5c858", "sighting--c79fd475-986d-49e5-892e-f506b56d67ac", "sighting--b520c780-78c9-480a-9de6-9a29011d83b4", "sighting--92e80a28-c891-455e-a50f-9f3cc915d26f", "sighting--48754c62-8898-4b55-803c-3d746b0529d9", "sighting--6765b8bd-e4b9-48ed-93c5-1dd60b2826da", "sighting--fef05f6c-fe87-4d2f-8c5f-1c31b452cb5d", "sighting--1ee70866-6d02-494c-8bd9-19be956d7935", "sighting--3ca9bbd1-cba5-4223-baf5-a2c228d51ad0", "sighting--bb2e5f09-e7a6-4397-9954-0c49f1f40c63", "sighting--e576535a-8a3f-42dd-aa80-dfb181cf0252", "sighting--b586aef6-8d4c-4c84-bb0c-d59bddfcd412", "sighting--10967369-6ad8-4126-94da-ff78addd6333", "sighting--406c3def-b428-42a0-a91b-9a104237f689", "sighting--90c3295e-6ace-4616-b98e-0e29c1b75f3c", "sighting--9dc64890-7c73-487c-90a0-37d033d2a624", "sighting--57d3c154-eecf-421a-80a2-158e6fe612c1", "sighting--b7e5595c-6c71-4f5e-b157-a8f5293b9987", "sighting--232dca56-d20b-4328-8261-089d0daed08e", "sighting--063ba8f9-b746-4338-adb6-f08d02fb34ec", "sighting--b6fc1720-85bf-4751-8269-36cb6e99e4bd", "sighting--593c1c7c-598f-4d4d-bda6-14249ebf4fdc", "sighting--d3992c24-0c66-4bef-b2da-5f5e38429d6b", "sighting--b172ef47-4777-4687-990b-bdf92cc86b91", "sighting--63b90c62-80c1-4a76-a162-f8389da229f2", "sighting--3b54bcfc-b294-47de-89e5-0ae19a19348c", "sighting--b0da3d05-44c4-4a5f-853d-701092717a22", "sighting--c0047d50-5155-47d3-af14-65972fcefb65", "sighting--3014f5c6-8381-4adc-981d-aa36fca6828b", "sighting--53db8e10-c418-4c6e-861f-5f9098d4c6b1", "sighting--5d785b6f-1154-478c-b916-bfead255199b", "sighting--bbe91f03-6b88-40fb-afef-b83f019cc52b", "sighting--64062967-9c6c-42aa-b7af-d6559f7be5ce", "sighting--10295d0f-64a7-45d1-ab87-1a17d7bd8d37", "sighting--b3724113-f1ad-4209-b001-9f5c0b6cdfcb", "sighting--e5cc227a-6ca0-496a-b727-f3750f30bcb3", "sighting--4965aa41-dec4-4619-a9e3-38ebc5aa2358", "sighting--88834a3e-0158-4973-8dc6-964c8d91c8a8", "sighting--9cf8329b-4726-44c2-b1c1-7bcf050f7aff", "sighting--9e4456bd-ef6c-456f-81fc-05844ad8edb5", "sighting--db3d6f8d-cf1f-4139-b390-87dae2028d07", "sighting--6caeb460-ca88-4f41-a529-4058ad86a97a", "sighting--5e275960-00a1-4828-9003-d4469c017b7d", "sighting--731f3ece-28ef-41f4-9586-2f4d4658108e", "sighting--78bb9a90-fb2f-4e1a-aada-36f11b2000a1", "sighting--53029a69-b37c-4884-a22a-efcfc83396b6", "sighting--47126434-b515-4be4-9db6-59d103ec78f9", "sighting--2caf445a-151b-47e7-9072-f78782486cbe", "sighting--137b3035-2b0d-4afa-ada0-c7bac3902002", "sighting--55170444-8143-49cc-a965-647388a27a24", "sighting--04d39d60-8cec-48af-a533-f9c336e70056", "sighting--9055217b-3ca1-47d7-80d2-1728e4a6a9c2", "sighting--9f3373d5-b5f2-4fcc-9cbc-6e52658e58a9", "sighting--1b63fe99-b43f-4937-a876-865f43e1c44a", "sighting--41c65023-8ec6-4ae6-8446-6dbb06685b45", "sighting--ca3ed7cb-0e85-49c4-8a8e-3624adfdc141", "sighting--92a72e5f-5447-4a67-9ede-f0d6aa6d8444", "sighting--494fbf68-a08e-4311-ba54-6b50c8137495", "sighting--9c3b08a2-ac01-40a8-98a3-702b12d2243c", "sighting--85a35e6a-d742-4234-a428-d2bf97f455a1", "sighting--3bbdc30f-91c5-41b2-aafe-a48d5411a00e", "sighting--c921b79f-9ffa-46aa-9d26-7838efe38123", "sighting--71264a12-43be-4f70-a3ad-2798855cbc7f", "sighting--2aa559fb-ab43-475a-9071-99790774511d", "sighting--d7acbd70-d36e-4043-8ad2-e64244c45da6", "sighting--303aefce-f2c6-45da-a6d0-2084551ae01b", "sighting--224aaf8d-b9a6-45f0-b11b-f1309ebf9884", "sighting--e5167e36-ce68-4215-a520-5c30bf9817a7", "sighting--85fcf545-cd4c-4baf-b05e-c379f2e67457", "sighting--aa283ead-2d7f-42b7-b6b8-b3281fde19c5", "sighting--69da4c3d-42dd-48d9-b3a5-c685a3e9535b", "sighting--b1e903ec-fad3-40c4-9eb7-a8278863f767", "sighting--3b7c0e8f-8772-4f86-a01b-5b788a271bb4", "sighting--c588e5d4-39a8-48c1-9a07-662ba4ab5327", "sighting--a3057379-9a14-4733-aec8-e7d5c529c876", "sighting--ec6a43d4-c17e-4084-aa49-dee621b9878e", "sighting--c3e97140-59fc-47d3-8724-cd16a64b4af2", "sighting--151ed259-1b68-4bb4-bb6b-9c00ef1bf435", "sighting--951179cb-9903-44f2-8c05-be46724d59bf", "sighting--88ce00fb-9686-4142-acd7-5e6c7842dbb1", "sighting--be5029db-3512-4a28-8156-78867c0766aa", "sighting--0ff29243-9ac5-4e8c-8a34-c71f36736a21", "sighting--1331951e-0977-4982-a1b6-7f56684b5e01", "sighting--e3cd3e5f-1253-4561-8c44-addc4a58bd38", "sighting--801dd2c3-994c-451e-bda1-ff64b716cb1e", "sighting--562d18d7-c718-4f22-84db-2f57001c126e", "sighting--5e6ad504-0ab3-4413-8edb-b16132cb328e", "sighting--5a73ddb2-edea-457c-99ba-448c768d2c58", "sighting--7bc349e8-fec8-4ebc-ac88-7417e1777bb7", "sighting--8237cc94-6db2-4ab9-8685-87827982ea66", "sighting--1f1874a6-1fae-442f-852e-698e555854a9", "sighting--d82cdc42-80ee-498e-8423-31a97bbe6026", "sighting--dc5e7112-29fd-4937-8c68-20bf81c22a28", "sighting--ee51ffd3-08e6-4848-b322-aaea3b59ad9c", "sighting--5413bcf9-b5fb-42e7-84f2-10668244a1ad", "sighting--09144736-57f4-4905-9836-91ef09254f3e", "sighting--538f9f85-3272-4031-8007-06017f1fd148", "sighting--c623a839-e7cc-46e1-9189-374af818c27a", "sighting--2b8ab3df-7ee4-4f59-b2de-866d2c6e10a1", "sighting--b06c4b4a-abfe-49bf-ac33-3f45621a4fab", "sighting--bdbb50fc-2677-4852-9b44-e183fa9cb892", "sighting--e8cffbb4-0c81-4f64-8505-fdae2a99e554", "sighting--bcbbc1e4-ba8c-4edb-a18a-55aad9f5710a", "sighting--5c89b722-1bd9-41e4-8a79-2b7f1e50200a", "sighting--7096cc39-69c8-4983-9bec-dcf816810af0", "sighting--b79722c0-6851-4550-ad10-357935def6b3", "sighting--40ecc0d8-a849-40a2-8582-dd210cfe5493", "sighting--d3e43a5c-ecd9-4026-adf9-b445d00e3702", "sighting--c17ae63a-8e79-4a9c-b54e-c30e5cb41b28", "sighting--95cc0ad5-e14b-4f61-8fb0-2ec4432a704c", "sighting--aa4ef939-cae2-4ce6-9d1c-a29592cfebac", "sighting--92729c8f-a56d-4308-885a-85d5a97a0046", "sighting--5205cdac-1ba1-4407-b7e9-a2a4cf2b688f", "sighting--ef16f74e-478b-453d-aef5-3f5a5b32bd88", "sighting--e3317852-651f-4e60-b02f-7c8df21fb18d", "sighting--1ca6fec6-cff2-4544-b14c-e8d274f2d3c2", "sighting--74a445f9-e9d5-407f-8e79-0d32e4940352", "sighting--db7491a3-d47b-4f20-8e09-117aeef4c51c", "sighting--a923ad1c-ef09-41ba-a235-90678931595e", "sighting--2f48e564-c1fb-4aab-99e8-c1eeaf72e28f", "sighting--35024583-3b2a-4b11-9bea-6472d9b3fd57", "sighting--20039a01-394f-4bc6-9496-62c909c6b6cf", "sighting--91a1c742-eabe-483a-a86a-9f01f7dadd3e", "sighting--c0c2d9aa-7093-47a7-b6ce-a82c0798d00e", "sighting--36a9016d-0a82-4e07-9721-9b4a35197c91", "sighting--63ebe99c-0544-4b48-8ed1-ea4f3d961628", "sighting--7d04ca0a-4a54-4c46-a65c-dc1b7134fba0", "sighting--7123612e-b6b3-4786-a8ac-8ac72c9e446c", "sighting--269b714a-316a-41fd-bfac-d67494dec289", "sighting--c9c19935-0de9-486d-89a8-d446b7d904f6", "sighting--792ece83-63f1-44ec-91a6-89a9894ce71f", "sighting--608e7e53-1046-483f-9387-d0828896203f", "sighting--5a2406c2-befa-4b67-8416-d2870d01d680", "sighting--5a54ffa8-b508-4cad-bc06-4dc1a8822be1", "sighting--7ae3387a-75c1-4ff5-b11a-f69ef2703812", "sighting--8c9a8929-e7c1-4a48-90dd-57497ab82f49", "sighting--0e5070a9-88ad-4758-a7ac-5f8e5571f65e", "sighting--294edb86-68f0-4e76-a978-010e7b6edfbf", "sighting--ec3ce171-d828-426d-abb8-fc2d476bbfb8", "sighting--871ae278-957a-492c-9547-d5094bd59704", "sighting--99e35794-1d29-479e-8a71-cfa49cf2a3c4", "sighting--e2456e6f-69b9-4489-9753-8be5186eb866", "sighting--2559eda8-b16b-40da-a55f-f519cb4cef7f", "sighting--0f5c9cf3-3d28-45df-9db1-6eaf93502311", "sighting--6e06d626-0167-48c6-89fd-9c1e2666afbe", "sighting--8aa359f6-5dd6-46ed-96c9-af692e519904", "sighting--433a9942-3c50-4298-b775-8cce562d3b96", "sighting--b03bd8a3-64d5-4cee-809e-3a85f5980f78", "sighting--73785301-9a9d-4344-8146-5654cd9d3be2", "sighting--162cb725-e366-46a4-9572-b5007004eee6", "sighting--1041d55f-02aa-4d99-b671-6723b11adfc0", "sighting--903f6347-bf08-4434-9440-48750bf3839d", "sighting--3ea63653-565b-437b-a7cd-c716b8c66eb9", "sighting--af49de2d-c505-4613-99bc-be394a345a5a", "sighting--ec0500e6-dea3-4b43-a027-e5e6b4c5eaba", "sighting--7037e354-c32c-4e08-a7a7-a9d289e34afd", "sighting--a2c11692-5d16-4fc9-87ee-c860a101ecd8", "sighting--a7699175-432b-412e-9f9b-866fb7dfe26c", "sighting--8824cfa2-8dac-4820-83d0-e5c80ca99a57", "sighting--51dc0f12-58c5-4562-b690-f76373d1c9e1", "sighting--d388bcc5-ff12-4a14-a367-937665732407", "sighting--045c11fa-0779-4c09-92fd-24904c934909", "sighting--2c1b5cf1-5cce-4a6c-b9f1-0490cc779103", "sighting--e65cf07f-5d35-48e3-bbf6-152602a43ab0", "sighting--22a48de7-20da-41bc-bec6-77cd1089cf5e", "sighting--cf22939c-c55b-4dd4-aade-758414fc7ce4", "sighting--b82ceb1b-7763-42c1-917b-0cdfddc32ec3", "sighting--1a700134-64fa-45f4-a038-162fbc9ba5ba", "sighting--e6b6bf7b-146f-4726-ada9-0ba359ba01b5", "sighting--48a03fa1-a4f9-4eba-8630-0dac13f087a3", "sighting--a1734df7-c22f-4b26-8505-28a40881690a", "sighting--cc25bfe2-ac82-45ed-b207-630c13791d33", "sighting--446e2967-e1c9-4537-959a-8773c7749b20", "sighting--2b3e452e-594b-4600-b04c-dcf7ad0d9e26", "sighting--5564f0bf-3f74-4305-9d1d-a3e24d98861b", "sighting--a8b7badd-d524-4fe2-82b3-a53529cd51a1", "sighting--248929ab-0df2-443d-8224-3dbbf7f8718a", "sighting--ced0924f-b1b5-4f52-8076-6fae7e054e9f", "sighting--e53e5e44-f9ea-4518-9847-71cc40b6b9b7", "sighting--2a7ccb9a-a84d-4d5b-9c17-2cd4d09ba3ee", "sighting--43412666-8877-48df-a3e6-0c499b27cc7f", "sighting--570f1b25-44ff-436a-ad8a-b7ccb5df2bb7", "sighting--b57e771f-b17c-4465-906b-2fb94baa03e3", "sighting--fc33d7e9-7d61-4ab2-b893-a8a6f22f5c54", "sighting--37e7dfcd-1db2-49fd-83e3-8aa4ebed617a", "sighting--3cfbbc4c-fb19-4acd-a1e9-54112697a037", "sighting--0714d1d3-b955-4d6c-a7d0-3ca6041adcea", "sighting--4948f9ae-e33e-4975-9152-76fef9722df6", "sighting--355428fc-a779-4f89-8ca5-ba426a7e177c", "sighting--9a8b9705-40cc-4a18-83c4-f1c760de6cf2", "sighting--f9588f6a-aeda-4508-9ca0-c00cb01c7da7", "sighting--71fd2a6e-5b6b-483c-9542-6b21cd0480d7", "sighting--c6047bc5-8e5c-4e6c-a383-9823d6509786", "sighting--920c1de2-43c8-41dd-9ac6-dfbe5b46f909", "sighting--5b260af9-b9c9-470f-885c-5806f98f58fe", "sighting--57fe3139-4067-473d-a3a0-53bb1e69a2e0", "sighting--0e8b3df4-5e51-4547-8d14-062f542cd8c1", "sighting--81304ff5-ab21-4715-90c5-77ce10215b7d", "sighting--bb1815b7-fdf8-4ee8-947f-0174d8c7b105", "sighting--7f816e91-3630-470d-b0f8-53b4ac1d8b0f", "sighting--5cbd0f0b-a269-424f-b027-89212f60f6a9", "sighting--146032cc-2039-4be6-b7a0-1b11f02455ab", "sighting--20793415-3378-465c-bb60-0cd8051fb01a", "sighting--0a26cc09-d59d-44c9-9a2f-6ec0e31b9d55", "sighting--0f954fba-5499-4507-85da-6730e15b6282", "sighting--7089eacf-72e4-4766-b2a8-f94b2d0ff8a4", "sighting--ea6e1aa6-f6ea-4d3b-ad52-159b78cdf670", "sighting--718da8af-c9ef-4e08-95cd-90ae6b2dc96e", "sighting--dd5d21d8-cf28-4d02-a54c-8dab3cb240e1", "sighting--11eb322b-1a24-42d4-a9b7-449de2a6954b", "sighting--6ee62398-d908-4d02-833a-dedbddaddc44", "sighting--fbd9f3ff-3642-4913-8848-dbc53711d7fc", "sighting--62b157fa-d54e-46fe-9678-60cb736762f6", "sighting--7183510c-4f0c-404b-8be5-845a4feb95f5", "sighting--bc8c27b6-d8b8-4233-98b1-6f1f637ff128", "sighting--afe60ea4-365c-405c-b3c4-919d6b7e870a", "sighting--bb817160-c729-447f-93e6-b7055a2b4c1e", "sighting--ae2610ef-8ec0-498a-a2de-8bec41bedf47", "sighting--164dd348-1488-4a02-bb41-e28084911fdd", "sighting--5a01b454-3cee-4a05-8631-014db0a2d9fc", "sighting--2dcf6a88-d59d-459b-8d51-0f156f519ec9", "sighting--fb6fb4b6-adfd-4fc3-96c2-7fb68fbe0e19", "sighting--b453041c-be4d-4ed5-a4ce-277878807a19", "sighting--176fcbb6-0989-4a4b-87a0-1fdccabcd5ca", "sighting--74245f59-2b57-4096-b30d-69ad90d977d9", "sighting--035bf64c-f93b-4c31-95dc-a813965f5414", "sighting--e1894f82-ba1e-4598-b529-19935d1b7082", "sighting--34e208b2-2b3d-447a-b7f9-b51f87128aaf", "sighting--6fa367eb-9eb8-4cc9-ae9a-504d59959038", "sighting--3a3dd0b3-147f-4216-a8b7-a4e08b71ad04", "sighting--727c77bf-ffea-43bc-a248-e6ef9c480859", "sighting--0dea5bbf-8e2e-4b29-bb2f-c1a1d6111b90", "sighting--969fa4a2-1448-4b96-ad80-0503f4939caa", "sighting--50db4776-a436-46cc-bfce-8ca5c434b5e1", "sighting--d5a7ce2e-f636-477e-968a-0b39c2b156b7", "sighting--3f49cbe1-7c2b-48e7-969f-1f86837a8dfa", "sighting--47ec66ec-9a41-4426-8a93-205f7afed447", "sighting--7b1a958d-5623-438e-9899-1023524fa5f5", "sighting--29ab7a07-a44e-49c1-aa2e-7acf47448efe", "sighting--1b10239a-51bf-45b6-a9b8-9c2871b8a19e", "sighting--43732db3-e8f4-4029-a356-11f694e48f05", "sighting--41fdf8e2-4db6-41b2-88bc-9a8acffc3305", "sighting--9ba0c495-bfde-486d-bfb1-cf137909684f", "sighting--706ff9ff-5dff-4e82-bcca-134e40aaa212", "sighting--99b8d00f-f2d5-4075-9049-67490e10ceb4", "sighting--31153765-74a3-4cea-b1f4-83c9ab3ee13c", "sighting--0614cab7-0a71-47fd-99ed-300ba54a8abc", "sighting--04556522-e5d6-45a3-b9f9-424a22a131ff", "sighting--416a4f6d-0f8d-4f50-838d-4bc7457df1ae", "sighting--ef5d216a-eebd-4d37-9277-5e3c3464b48d", "sighting--2442a5d6-7dbc-4e5c-82a9-41b1a7781c0d", "sighting--7cda45ab-b2dc-4058-b86e-a7a8fb56284a", "sighting--4d80a856-3d77-44a4-9219-26d4fc5b7327", "sighting--f65fff04-ec00-4758-9ca6-de95836e23cc", "sighting--05ba08ff-c491-46ba-91c1-21d5d1d0a697", "sighting--ff549751-f418-4bb2-ae94-c1144a0136de", "sighting--c4063f94-5873-42c2-974c-c9b56aa4a134", "sighting--5720f4a5-fced-46d9-877c-1d3359d4e637", "sighting--dcab263b-a591-419a-a22d-c3c36cccc3f7", "sighting--77e5f966-199d-467e-bb8c-7a135d9c1d0a", "sighting--7a0d6a07-3a3e-47e5-8294-2030ebbd80a8", "sighting--b82484d8-bb06-4138-9090-74c1e90faf98", "sighting--7ad36384-2213-4370-87ee-50cf62afa325", "sighting--93862389-d285-4198-834c-e04294c05adf", "sighting--8cc1e7db-ab5b-4bbe-a32a-13aa831c372e", "sighting--f92ddb6c-4973-471e-b156-8b6eea70d0ee", "sighting--5b2b32f5-6e71-4154-b517-6beccb6f9b05", "sighting--9338805f-1f64-432a-b2b6-cfd1dc00b0db", "sighting--e28a5553-9f3d-47a6-bfd7-50a2a8af7c93", "sighting--908c621e-bfb8-4419-a3f6-aa1b7f32646a", "sighting--020e0104-cf2a-4e82-9715-f05337acc81c", "sighting--c8686b95-ec1b-4b64-9f2d-f5a87409bf95", "sighting--6e1816b8-4e4f-46b7-aad2-ed285676583a", "sighting--3583f126-b7b2-4f61-bec3-44f3e0d4e5f3", "sighting--1afe0f99-15fa-4fdf-ac2f-521df5370919", "sighting--cb4ab386-8aaf-4edd-814c-563c345ed391", "sighting--53a5bb7d-d5f6-4137-8d18-19c3a90e5156", "sighting--7a81b8e0-8b55-4a8c-a70d-d310f5d477fd", "sighting--7345ce46-a248-44c7-8ea7-01f1405353d9", "sighting--6cd00312-c018-47bf-85a7-942f28680079", "sighting--f876cf82-0c6c-47e5-a13d-20710a0b5730", "sighting--d3dbc095-6f30-4c4c-adaa-5dda0a0e600d", "sighting--267d1e71-dbae-4455-b86f-589b88acdbe6", "sighting--79924aeb-aaf3-4f34-bcba-c1be885f01ff", "sighting--7f363e07-b8ae-4db9-9016-64c20c886859", "sighting--a9148881-75bf-4e4e-9450-feb604c22405", "sighting--7cb01e7a-b5d5-49f5-bfc3-f316c4738806", "sighting--5cfe43ab-0641-4322-be1f-119f1a50a4bd", "sighting--d4602cae-80ff-4eab-8923-d50bd382b34d", "sighting--d64c7da5-fd09-45a9-942c-1ba26dc1034f", "sighting--5ad71626-db14-419c-b66a-eacc05498e6a", "sighting--0353b7ab-da7b-4b08-9b00-cd700faa048b", "sighting--9d623056-6c24-4e92-acf3-9e60f3a0ed37", "sighting--dd7f3d23-0eb4-4cb4-8613-a45dc46b3d39", "sighting--304c858d-20bb-4e0f-b015-1677a7a6a0bd", "sighting--fadef6d7-697c-43e4-8e02-0308ddb9a3f1", "sighting--d90bd32c-fcf6-488a-8c44-a3640aa106e9", "sighting--defa470a-cd70-4430-84d5-f88c0b1a0110", "sighting--2b0b2c41-50f8-49f8-9293-df5e2c2fd81a", "sighting--6df752e6-f96f-4d9a-a77c-d65410085b1d", "sighting--d582dc16-288f-4dd1-b687-73d825263fbd", "sighting--c4f9ad8e-e368-4d53-b981-b328455d6a6e", "sighting--50a80269-f417-4376-ac61-9f00a5793a13", "sighting--6af0d573-0e7e-42ca-ad46-53021a87e640", "sighting--aa18fe81-3195-440c-a43c-65b82e7d514c", "sighting--1acb9706-45e2-41dc-b771-77e3dd0317f0", "sighting--426f2bdf-bba9-4ec9-928a-0eec978f59ce", "sighting--cd763f4b-2b4d-4eec-97c5-27cdc718cc23", "sighting--784528ed-9f77-4a5a-8fef-258f55027fb8", "sighting--020e4cff-e214-4986-98e0-9bfa1f5b7a54", "sighting--43316b91-4bc5-4db5-8290-2b4648d8207f", "sighting--1136183b-9ffa-4275-87cc-addd9f1d084e", "sighting--90d66cdd-dafb-46f5-a75a-ba2a19c291bc", "sighting--1319d941-00db-4174-b946-61eafaaa0574", "sighting--d2737587-efca-4918-921e-e3f717227efa", "sighting--b4e9786c-aa9d-4266-8b01-107c9cd556f3", "sighting--dbf86cf3-10ba-490b-ab6a-23d6bf73cee6", "sighting--172ee767-0355-41e6-9498-dace0f1af6d1", "sighting--98faed36-7b9b-4988-a752-4b149a1e453c", "sighting--84d432bc-fabd-42ad-aa46-3027a5901788", "sighting--1b1e17b8-4f3e-4cee-b664-74dccd1b6ee3", "sighting--19f269f0-8f3f-4478-ac38-2bfcf49ff618", "sighting--b2bbbb44-bd3c-459e-b42e-c76863d560ae", "sighting--ae384d01-5285-442a-afc3-227383fed918", "sighting--f5f17ec1-a92d-4021-a468-f3a8e598fb7f", "sighting--5c64cf28-da24-4f67-9ee3-9518cda6670d", "sighting--e3c6d41b-0d16-48fb-a660-2340a5b6899a", "sighting--b4ed9d12-a3d4-46a2-b7bc-220d6f6b7702", "sighting--4d22e738-105f-4dfa-84a9-ae9422bbadfa", "sighting--3ea5518e-7943-44c7-b86e-fb4356b1ea9f", "sighting--aae70748-12b7-4212-a00d-154d0fd1d099", "sighting--c9e12e16-43fa-4f37-8d8c-3c336c808ade", "sighting--d6378235-3a83-4d6f-9cab-cd35e1b3364a", "sighting--8602989e-767e-4596-b9d9-37a7d09510d5", "sighting--cbb6ec9a-a688-4545-9130-79320cb4f1f0", "sighting--250d1839-625c-4c74-a89d-3b055a1ade96", "sighting--3160da1e-8b4f-4123-9a53-82033e881d55", "sighting--4ec52799-8db3-4cac-934d-2c78e25703fe", "sighting--c9598e4a-4cab-47e2-936d-0a12e6e7f551", "sighting--8b422af3-5e11-4bce-846b-948ea981aa79", "sighting--65e3dc47-a18f-42d6-876f-de3332edf510", "sighting--cb9518f1-ad75-4e79-8c28-6c5c1bd9a131", "sighting--83df96fa-a8fe-4fa9-86a3-ec0773827e58", "sighting--ed24ff09-1a29-4106-984a-16c784a826c5", "sighting--a3df33ea-29b9-4ff5-8a5c-9a8581f2e22b", "sighting--b11bc8d8-b816-4dce-bc78-3cca5ee29596", "sighting--31ed279a-506c-4e52-9573-5ed606644c8a", "sighting--cf0ef0c5-b649-4eb1-88b1-b209fccf0b6f", "sighting--0b72bc2f-3b3b-4b49-bb1a-16989785d9c9", "sighting--d3d1473c-9deb-4126-a738-3a5b7323d92f", "sighting--49141526-c063-4333-8640-0d0c94e787a8", "sighting--da3fdcbb-3b9e-499a-8f5c-02e883940797", "sighting--6a88ada7-47c3-4fc0-9317-e3c5b7f30472", "sighting--d1ea709f-1c85-4452-965a-6b3ec9d6df2b", "sighting--ca13d138-09b2-4c23-90a8-aea062aa44e4", "sighting--14181f2f-e2f6-40d6-bb39-776f28b03b94", "sighting--4337b64b-b23f-4320-8e7f-c1b0e3221e37", "sighting--21caeec0-990b-4935-9688-c1dcec85a176", "sighting--b7bffabf-d9cc-4107-9438-b4bd9d1841df", "sighting--083236fe-84c3-4dec-bcdc-7f7c6c36c5f4", "sighting--1e2a95dc-761b-4a8d-afec-7fafdef5a51d", "sighting--b89b8ebb-d34f-405e-b024-3987e4ea443a", "sighting--c19f80ff-cf15-4253-bdfa-8ad8282158b3", "sighting--04f29ffc-8b2a-4815-accb-d104fcb2e586", "sighting--d0bcd0bb-43c2-4761-9f36-4acf114b4ed8", "sighting--7048c084-16b0-41d4-8940-0d15c63ebe09", "sighting--09416463-8fd8-4300-8dd2-d3ed050388bf", "sighting--a3d8704a-d2e7-4407-a3f2-e9047b45ad28", "sighting--941a894e-f16e-440e-8aad-21df19f82cd5", "sighting--e8d7f10d-ed76-448f-b504-78011972f17c", "sighting--4abd3302-8fdc-4ba5-a444-02efff8960bc", "sighting--b83db17f-3025-4e90-a50d-0e0ffc58f74b", "sighting--a0a7c639-8524-4e88-bf28-7ad39063209e", "sighting--b16d30b7-e235-4856-95ba-c9db713fddd9", "sighting--48117943-0b4a-4839-a461-3702fbd7a98d", "sighting--0754a2be-39c9-441d-a000-983292c83da9", "sighting--17218b57-5f2f-435a-ae50-9732c727fa54", "sighting--09aaba8f-685e-4e7f-a3d8-d698690d3cfe", "sighting--b8444478-1302-4792-9d09-0392ce380190", "sighting--59bf5337-9ff7-4c54-9dd2-1c77184e89f2", "sighting--73120c88-f5a5-4a4b-b809-0e8e210b1629", "sighting--ed1d466d-89ef-48be-97ec-2c8b1bb6a1c3", "sighting--4abfb2a7-e0e5-425f-b079-c5776c5239c2", "sighting--c0ed1e23-ca0c-4eba-87d2-1d08e66899d4", "sighting--1b6b5146-41cb-4389-848d-0b60a2f49675", "sighting--1628290f-e61f-4b9e-8c9f-a2678ecab427", "sighting--af9c6f99-f53a-4b1a-9804-984de7d0ad41", "sighting--a9d73495-29d2-4c95-8503-2e17d5d586a7", "sighting--86c72b85-ddb2-4580-8244-7308d1e2471d", "sighting--1951ed7d-a068-4858-b9e1-c16c254550e3", "sighting--ef750525-43dd-40d0-9a0c-9c825cde6a26", "sighting--d8221785-da4e-42f1-a0d9-517de6273cf1", "sighting--7a399304-2c29-4eb4-a760-7c7d606ece54", "sighting--a52124c6-001f-4963-a362-1c422c9264d0", "sighting--3de06af8-c5ee-4d2a-8267-fc572785f1ac", "sighting--883b0e14-f01b-4678-a8c1-623e6b5a9e2f", "sighting--e02f024f-5d83-4e6d-81ec-5ffb6f7239e2", "sighting--6d36e149-f8a0-4ac5-a194-f0c3a85c2cfb", "sighting--ab611413-6855-4f22-8483-bbe217990fa5", "sighting--c52c18b0-87f2-4a3f-9be7-f74cbacb8ac4", "sighting--4e9995c3-ba68-4c82-b774-05ac956ff35b", "sighting--ac0339de-eed6-4fce-bd68-ae5005500b83", "sighting--cb3536da-7777-4f86-9162-29d53676bc95", "sighting--fefcdcaf-5658-4dde-b60b-f3f3e5ee822e", "sighting--929c1349-b53b-4853-9428-939d1a97a23d", "sighting--b19a889a-2f64-41e3-b2ce-b7a0920f27d5", "sighting--3629cb51-73c5-447a-999e-5d8964e84b80", "sighting--13fb2df1-a513-442b-87df-0ba8e644c372", "sighting--0d43da15-fa49-46f4-9aa3-e747d351f334", "sighting--4a95d080-cfe9-4c11-a795-4ef1442de229", "sighting--4f13fc31-67d3-499d-8711-b1dfa6101ee5", "sighting--7adc54a6-5782-44ed-a72f-d0fde3367e73", "sighting--2ea18056-42eb-4d71-a992-3c8345535de9", "sighting--45848861-9fcc-4ddc-be30-941407a9fc29", "sighting--4961ba8b-ece6-49ad-ac7c-9ae46bf704fb", "sighting--f83c986e-d45d-48c2-b668-9614afaeee5a", "sighting--e6518204-4541-416d-a0fa-54ba74c4ffa3", "sighting--7166bbb1-82e1-4832-bd88-b7ebdbf31bd2", "sighting--46e59177-bbdb-4f5e-a025-f7086ebb9836", "sighting--b5b33495-787d-4208-a3f0-4fec529bbe4c", "sighting--4e4fc33a-87cf-4f18-9ed1-aa98b6a5d33e", "sighting--9e1095ee-1c15-4c63-8bbf-4766c449136d", "sighting--a93b7a85-b583-4114-8bf1-791d7cb396af", "sighting--e71b02a2-0278-4639-98d8-f4342d88ca90", "sighting--2df42d1f-dde0-431f-9ae0-2734bbe650ae", "sighting--746cb9f2-2071-4db1-85a0-44d5a823b816", "sighting--cad0d0a9-dad4-4989-9dd3-ee2b56ff54e3", "sighting--b36deb4c-e88f-4146-9800-be14194c2bc9", "sighting--76e2458f-80de-46ee-ab3e-ddf947b918df", "sighting--606cf702-a40b-4eae-b5c7-8a20ffdd5b2a", "sighting--f153bb14-a1e1-406d-ac53-e1a373bf3020", "sighting--57c3534c-769d-44ec-b8f8-0c0505709ad5", "sighting--228b7692-f211-496d-82e8-e4ee94083b69", "sighting--4b3d00d0-0db5-4eeb-b4a8-5b7a372c3f87", "sighting--340f89d8-10d1-4244-b881-414b249e1a6f", "sighting--e71c13f5-769b-43ab-8d2f-bfa33269addb", "sighting--0f960590-b4f5-42aa-8dc8-b1f6ef9b10dd", "sighting--d1912889-0ce7-48eb-a1dc-e38c1827f378", "sighting--19bd62f6-5fce-4ac1-ae95-a4c4b9f22a19", "sighting--83bc8be4-af24-4247-9dee-cdedead1ced8", "sighting--145b613d-1268-4fdb-814e-97d1565213a5", "sighting--8acae9ba-4dbd-4a68-a407-72bb7e7c11db", "sighting--af28eed0-d225-4058-86ae-f13bd9b047a5", "sighting--d56f0786-c572-4581-a55f-9946d02fb9cb", "sighting--911e21b3-f690-4d1c-a423-f77a1da1b938", "sighting--bae67f73-02ea-4b27-be19-d0ee70d74843", "sighting--9304dd40-47a6-4a72-b037-b023f7456597", "sighting--d70a09cc-d862-4f45-be31-93ea28539472", "sighting--14cd3703-5e89-4817-a6dc-33ae817b54e2", "sighting--a010b8a9-f434-4527-bffb-ed28c44301ea", "sighting--8aae1bd9-778e-40a8-8f9a-9d54f7a86918", "sighting--3468d382-60f1-4c84-bdea-a18c59c6adb1", "sighting--6ab6a81b-9fdb-4956-8bec-fb9281f20973", "sighting--4c89676d-dbc7-4aef-9e55-f955eaede11c", "sighting--7e74d4a4-eec9-461a-bdea-00d7c8a38a6f", "sighting--b0ef69ea-f50f-46f2-90f8-16afcf0d776c", "sighting--31904f5a-ae16-4980-9e6d-50200f22ec63", "sighting--20a29d20-e83a-477d-b7c1-f597c814151f", "sighting--bc087159-6cc2-480f-a8e6-ff291247413d", "sighting--1d3f5307-3634-4e68-af73-34369b1aa39e", "sighting--65337022-a43f-4989-be6d-b5e0529e1ce9", "sighting--978d671f-3030-4336-adb3-0b8d3ca7e175", "sighting--1741b60f-01ba-4c13-9e92-cd2c1e7cc031", "sighting--4aa6df17-3eb0-4112-b719-426eba847f75", "sighting--af2eded2-bff4-4fa1-826a-7564cfd7e524", "sighting--e57da1da-5422-49da-8f94-a9fe503fab25", "sighting--71bbefb1-d50c-4b85-a67f-8686d247208a", "sighting--28532fe4-e5f7-4467-8c85-84e808bbbf99", "sighting--5ed1adac-2c56-4e30-aba7-ec739e5bab5f", "sighting--aa781570-e890-4695-a894-bd4b47ceff00", "sighting--431ba909-201f-478f-878a-fb4af391961e", "sighting--78aaa649-ae4e-47d7-8c54-a356ad55663c", "sighting--2197b3af-6d42-4a4b-9ea0-5de5015929a0", "sighting--0d746907-b7ec-472b-8da6-4c792b4407d0", "sighting--39aa79d5-4725-49b9-be4d-5609b88e9b02", "sighting--8f1b818b-5a94-4e6a-b648-3d1710a4195b", "sighting--187f5821-bc7f-414f-85db-78369ca082f0", "sighting--f157fbaf-e47a-4c5f-878f-9cbc456e5b89", "sighting--25c28983-65da-47ec-ad48-e8fedd2a1cb6", "sighting--cd567acb-4ae1-490e-9e97-82e568d8c0b5", "sighting--aa4e2185-c381-49f1-a373-a0f02c92091d", "sighting--99d042a5-edea-4231-a51c-96bffe482785", "sighting--b1038fad-2b01-423d-90f4-a384edc1df6e", "sighting--f4b3b2ff-8cbf-4069-aa1e-a07ed3c1a601", "sighting--05d9694a-6125-493f-9da8-65afd10486ac", "sighting--e6d28da1-c72d-4e97-a87f-088183fb2244", "sighting--ff73b4d1-c702-4410-8fe8-68ce49ca9b0d", "sighting--04dbd8e7-5214-47f6-8556-3526f1d499b0", "sighting--64124b63-8f12-4c38-a30c-34f86fe074f0", "sighting--551190d4-ba77-4253-8d68-208eb52b7862", "sighting--aaecd43b-2317-4f50-89f6-89d7888550fe", "sighting--b41958c7-2772-45cc-9465-677f7eb7f0eb", "sighting--91b72423-5d2b-469c-9896-0328d6666460", "sighting--261ea246-5a1e-4abe-a9c4-f84df95d6633", "sighting--e1cc81b9-dfb1-43f8-80c0-a8977e68423d", "sighting--83b2b190-d4a4-4be8-82fa-e2d8a9e98f24", "sighting--079b8b0b-8481-491a-93eb-b5ab90d9362e", "sighting--2e5de11d-bef0-481e-a53b-c9728d3af0e5", "sighting--0f5464c1-6d51-4684-94f0-bd227053e986", "sighting--bfd7248d-5680-4d75-a7ea-3455ecd99241", "sighting--5ff89442-6ebc-4637-9c26-9d292db272ab", "sighting--47d4d87f-6fc6-49f2-bd96-9cd25f3db75b", "sighting--23ac937a-3393-416b-af5b-2bfa74cd7b3c", "sighting--623cabc2-4998-48c7-a733-705f516cd827", "sighting--79368586-2fae-488a-9e53-7a3cce269bf7", "sighting--f5a8497d-cc00-420e-818c-9dd5614cdc77", "sighting--bc89e752-295e-458e-953d-1855df01f359", "sighting--233d2904-bb62-4b17-acdb-083fadc206da", "sighting--2b875124-6307-489e-b4c4-111637574c70", "sighting--4841a237-9c7b-4414-acb8-96494fb1cf16", "sighting--455c3985-3f52-42a9-a180-c00d19534918", "sighting--f1521a73-e2f7-4d94-9bc0-733f342ccb5f", "sighting--ebab8f81-40e6-46bd-8921-9e86dade2cf4", "sighting--df9bf9d8-6557-4c88-9eeb-579e28da4966", "sighting--7d6f857a-154e-4f51-8857-56776042a315", "sighting--8e852ebd-c6c6-418c-8e0b-4ddf6fa02b08", "sighting--4ee60392-051e-4349-a834-eec898854886", "sighting--53c6f25f-3925-42ed-abf5-b055affff0c6", "sighting--40a4d505-9a5f-4f7e-ab8a-a315b8bb3870", "sighting--8ae30e36-47f8-4859-9aeb-ef0fb4e48e91", "sighting--c6c452e2-544d-40d0-8b69-cdf745423367", "sighting--deb2f433-8c61-4c09-8d97-70bf6797c1db", "sighting--f3cbe5ca-e28c-4be6-89a3-51fcce0d05b7", "sighting--f1bdccea-e9a7-471f-99d7-5d3e602193ef", "sighting--eaf51cf7-0b00-4940-adf6-741e790abacb", "sighting--2f8b1d5b-bd1a-4147-a258-228146b0c042", "sighting--788ffa27-7ccb-4736-90d1-f62af97a69c5", "sighting--60f33c16-cbc6-4652-aac6-89faa1d0775c", "sighting--e30ea46c-cbc2-4c11-a856-ab7d925dca6e", "sighting--38210b4f-c4ed-4729-81eb-67bd8c29abd9", "sighting--b2f5295a-3eb7-4bb3-8cda-94471dbd3764", "sighting--851b316c-213d-437c-9b6c-10cb96d244f4", "sighting--7b644b97-e491-40f5-b936-d8abe1724fad", "sighting--08f5c6ad-07a6-415d-b6c9-69ed02d7bb0b", "sighting--519731f0-0dcd-47de-908e-b56693a80f6c", "sighting--20a47611-e7d6-4e6b-af04-dbd07148d119", "sighting--e877f6d7-5108-4945-bf0d-2bafd3a74301", "sighting--13173924-3627-4580-91bd-4d96e4495a7b", "sighting--5c5313ab-0ce6-44aa-9aff-798e8375de76", "sighting--9cd2d8bb-3627-447a-8f00-57f2903a44f7", "sighting--5ce96ad7-e881-4420-9cf2-318b0dd52743", "sighting--cceb7ca5-0939-4fef-8bae-8d325ee25e71", "sighting--9f9cc218-a400-4f07-8e9b-06e6b5cf6e8f", "sighting--617fc718-7a37-490b-8517-12aad542cfbd", "sighting--fac9aa6e-c65a-4829-ad53-2d60abb30221", "sighting--29a6ec54-c6f9-46ce-ad6f-355647bfd9bf", "sighting--54fb9753-e3e9-4c81-b58b-fa71443e82be", "sighting--57225594-7b9d-44d8-b45d-cf9d415cf72d", "sighting--e253034a-d9bc-44db-ba51-509da1655c9a", "sighting--6df90f51-ea15-4bc6-b89c-1ecf0269d268", "sighting--f4dc9235-2899-45a3-9336-0779ab4893b7", "sighting--da5dd2ae-2687-46b2-8a21-99ea5576c2d8", "sighting--664c0617-8ee2-4fc4-ad2d-e4cffe4cd65d", "sighting--70ecab4f-82cd-4e2f-90a3-1481c1d33853", "sighting--d34d4e4e-4ce8-4e93-a798-ed5ad36f43a1", "sighting--ad25dcec-da7b-494b-a626-d842b9f4fe33", "sighting--8846585f-6d2b-4fd9-8555-fbef18efb0bd", "sighting--ff9d75aa-386f-4099-a302-74e77745cb52", "sighting--c6afccba-e4d9-404f-a109-2ad5128dc810", "sighting--be765ba0-8178-4ee5-98e4-1b73e5195eb1", "sighting--6b1aa630-b285-48d4-ac16-6f3fbb3b1f37", "sighting--0f7becc2-fb76-4abf-8164-4dfeaf9b994e", "sighting--0a5582df-81f0-4dc5-80cb-84d1e24d7e41", "sighting--97ec4139-8826-4201-9148-111a5cccca41", "sighting--3af91d1a-655e-4ef4-b5e2-28caadb0b85b", "sighting--cfb54d8c-9db9-4b48-a434-c990f39cf5a5", "sighting--7ba3cbd5-8b8e-4d2d-a750-28b753a9ff7f", "sighting--fc847a7b-b59c-448c-b221-d8d6334a686b", "sighting--ea5dfc60-a1b9-4776-a8e2-e1222b7fbbe9", "sighting--5c27823e-3bb7-4c78-8456-b0898257a533", "sighting--6b09c1b2-fb61-4016-b1de-f6d6756ef6fb", "sighting--1058e3c2-4340-4569-aca3-e8b11c18cf85", "sighting--e99c2c93-9a47-4eef-aa13-86c6997824ef", "sighting--219ede18-70cb-482b-b1b4-8ed55558fd65", "sighting--fbf4ec96-5f7f-4a6f-a410-8a2839972fcc", "sighting--91fba5b2-529f-450d-9ee6-f8bfd5a1377c", "sighting--c16ff07d-e1f5-4937-987d-6377bb3bbf38", "sighting--75199d4f-9848-4f41-91b4-0892f21964b8", "sighting--7ada7648-0b55-42a8-bf6b-205b1d505a8c", "sighting--083fc5c8-6c19-4f76-9bd7-1039a485b231", "sighting--6eb18c39-8c99-4eb2-99dc-ab9efe2a51f2", "sighting--ca6cc319-0f54-42a1-b488-3eeafe41f0fd", "sighting--19c9144b-9d07-46b9-bdb3-c03da0f66deb", "sighting--90ab46c9-3ae6-426e-bd13-db73406ba8ec", "sighting--6e7bfd33-591c-4f61-b3a0-5c8a1b2556ce", "sighting--35c4c764-91de-42f2-8639-9ec74e5d6d91", "sighting--56266c81-2af3-4c90-819f-fd1a69ff2211", "sighting--a7915829-1e24-4e6f-86d4-4c0aed8e358b", "sighting--8a44f54c-9b13-4fc0-b7be-330866495de8", "sighting--c7de795c-6096-4a53-907e-ea2205ce8852", "sighting--78b29350-168c-4836-91a3-4bbcb7826344", "sighting--6477f0d3-cb0d-4fad-ae76-c757d1bdac7b", "sighting--fff17dcb-e218-4a90-8f8b-c7ba71dc21c2", "sighting--1b65a993-c055-4d11-986c-cff5ce1a0add", "sighting--d837c11d-6813-46d2-8133-7ceed558128e", "sighting--b0d013fd-f026-4ffa-ab7d-d7a0f7758146", "sighting--b278cdce-b613-4e27-a773-b7fc6829464f", "sighting--e2fed41a-08c1-4a84-810b-b02096f77694", "sighting--822e2dae-3899-475e-84c3-33bf99dc4049", "sighting--b21d2b35-2ee2-4f9a-a3bb-20f3d6b67b57", "sighting--0a334acb-dad8-44b0-8d6d-cc2dbb9ce257", "sighting--0de23b04-67ef-4f6a-8e3d-5b0756a94b97", "sighting--c817a722-59cf-45a5-9dd7-1bdbaf19b9b7", "sighting--66c79005-bb15-4ef2-bcdd-0da72cb235ad", "sighting--66b9bded-76d0-4a01-891a-d9d3ade4b5e2", "sighting--2e2bd2ce-51a8-4fd3-bb77-92b9737dff9b", "sighting--6e28ce3c-1739-498c-ab0d-f616f693350b", "sighting--06460505-ee13-4b16-a078-4f1b15484801", "sighting--34179f9a-2f6c-4be3-9d41-7b041a5d37f4", "sighting--a3f9ea2f-c244-4f66-b002-9f8694f8f8b9", "sighting--b32bcd1d-b36f-437d-8287-07e87dd210cf", "sighting--acdee080-5881-41f0-bfe8-02e2ce93ba9b", "sighting--b5325b36-480f-4acd-87e6-417fcdcd90fa", "sighting--b6fe2423-3b9e-41b9-a57e-2f785057fba6", "sighting--3cf71135-c936-4a01-8f61-297618123904", "sighting--30368aa6-eab5-4ba1-8e15-09459a97c2e8", "sighting--71b1b570-8c6d-4d28-9c34-525618ab3dcf", "sighting--fca9b04d-4ade-4ada-9f51-2dfb734d4317", "sighting--402b1d75-b69f-4534-ba2a-af4f5314a0b1", "sighting--84764a50-da26-4f42-8231-6cc393498955", "sighting--48205989-97b0-4470-a619-0511c2975b29", "sighting--d466a52a-d629-4156-aa13-d1fa35500ccb", "sighting--1e854046-118c-43d4-af09-5e2bc4437ea7", "sighting--071cac22-c7bb-481f-884b-d43f48d0e356", "sighting--a67a7195-a186-4dc4-b2a5-368a4682639f", "sighting--54bc7e32-b2fe-429b-9692-e5e809576470", "sighting--832d6d87-cb1d-40cf-9e57-9d8cb60ba810", "sighting--710fc38d-b497-453b-9899-f0053f2e2670", "sighting--3ffbed92-4cba-4be0-a97f-5c58b7634083", "sighting--36366262-1138-4580-bb9a-80f855ff85fb", "sighting--88c2fa30-1995-426a-a360-5164eaf0fcfc", "sighting--2a1efce5-1400-4f2f-80d2-981ced936b0c", "sighting--5996bfda-12b2-484c-bece-bc906847a80b", "sighting--86551eb2-b135-49ea-9c55-fcd727de481d", "sighting--bf6181f9-aec6-432d-8aef-a6b3670b1596", "sighting--617e7e04-1063-4530-96e2-7dfb7bac84c7", "sighting--04df1258-ea5b-4910-bdb0-16a83b802c2e", "sighting--0bdc7b79-7330-4bef-ba19-2d439594f065", "sighting--c9b16d85-5bde-4330-88c9-d9198b34a2cd", "sighting--b4ae3495-122c-4124-9274-481d046967de", "sighting--fda2e5f5-2b98-4629-86e6-5348cb138a68", "sighting--caa106d4-8f49-4de3-aa0c-841e57dc2b5a", "sighting--77ca04ee-cad0-414d-8ad1-e5f31ed54b35", "sighting--680f7094-0005-40b3-ae24-81c98a4b7ef1", "sighting--609a2298-5577-4ccf-9546-96e30bd96743", "sighting--2f5589c1-c0bc-4a6a-aeda-b4687a4269aa", "sighting--3452b739-d234-48bf-b72f-30b179f53d2a", "sighting--0e105719-cbd2-430d-9727-25060351fd8a", "sighting--8f973029-6113-45db-ab43-a82daecaafd5", "sighting--8196763f-ad33-49cb-871a-1c32482b7165", "sighting--a006d816-9e79-4fd0-a5d1-4878a6423659", "sighting--7b322fc1-1efe-4805-87a6-cab180ebd072", "sighting--aa0a0c21-4be2-4150-ba6c-2956d105d94e", "sighting--e2657767-c5dd-4ce3-8fa9-d3aadececdce", "sighting--90cee2d8-ca9b-40ac-9e9c-3c968f7db790", "sighting--fd0ca29e-2242-482a-9e04-b5652020531b", "sighting--9265a09f-9d68-491d-b4aa-f2e0b63a1832", "sighting--a441af6b-7b3b-4b5a-9463-b68f48948b0e", "sighting--790921c6-6640-46f2-8a7a-1c426afc63c9", "sighting--1d7423d4-d5c8-4c8a-9693-6453d2bbe386", "sighting--daabb947-fdbe-4a8b-bdde-489f00a20fc0", "sighting--9c5669db-ea8c-4f18-be4f-a6c9e6ef6ccf", "sighting--8b35359e-faf8-4e2c-99d7-8fe9b984ccc0", "sighting--7d841f8e-aa89-49eb-be74-58a00df8ef8b", "sighting--8a8a03da-4a95-463c-874e-7d100fde08e4", "sighting--1ff730a9-00cb-47e8-8f4a-cc3ce6865552", "sighting--2aa0241f-4bd2-41bb-9171-1539ef057e43", "sighting--c2ff9a08-1f6e-497c-a1bc-ab0455357efb", "sighting--628da0b7-890f-4342-8a5c-611d012b8803", "sighting--20666876-fd96-4199-8a93-be70e9aa7400", "sighting--4319b6e7-bee5-42fe-82ad-4a1b7d95d4c7", "sighting--d84d5353-b6a3-4e58-8a36-cbdf25d5e964", "sighting--55f1ec74-70b5-4b08-89f7-6df2d93d1bae", "sighting--c9e17ed4-4626-4973-8b34-b988952118a2", "sighting--b98191d8-166d-4680-939a-1d46cc4261e0", "sighting--49f72afd-2250-4d68-8784-6cfecdc30f3f", "sighting--acf4f667-bdc0-4617-96cc-7f38bd8a061c", "sighting--1ea76de9-5df9-4f7d-8df6-d45440cd1da4", "sighting--2a402b10-ff1c-4892-8616-5f98e3777f5e", "sighting--b4c676e8-3660-4bb8-868c-667d0dfea389", "sighting--65e40954-2ced-4ffa-89e7-ec4462f350d3", "sighting--a2483bbd-2c01-46d3-9dd5-25b948d58958", "sighting--36ff8ded-133c-49f7-8190-eba66d0d5441", "sighting--e4fb4b90-33b0-4a42-9b71-b2bb5df44eda", "sighting--ade16a54-037a-4fae-9bbd-db6d793c67d3", "sighting--e42df4e9-3608-4d64-8cb4-0eafb91b4324", "sighting--97bab6e4-4b6e-484f-a8f9-1583bc7bbf50", "sighting--cee8ef6c-c1b2-40d8-a8a5-e2e903ef49d5", "sighting--11f91704-bffd-4d99-bd28-cd5285103afc", "sighting--a7917f2a-be7b-4782-997a-6e6058274a16", "sighting--b9049426-744a-4524-8bad-573878937d81", "sighting--4eaee331-28f6-40eb-b345-e3b09d3b1b25", "sighting--5b73fd70-6272-4bc0-9e03-07f962da260b", "sighting--cf47459d-47da-4088-89f3-21da2f69da05", "sighting--25b526d9-c2b4-422b-83fd-3d4bfc8804fb", "sighting--9532c38c-9421-404c-aaf1-cb7594a36132", "sighting--94aff354-8567-4097-add4-2391de136b11", "sighting--90fd7fe9-2e9f-4292-ac0e-b8eda3c50190", "sighting--faa769c5-ecf8-49ac-a417-d7813be23a58", "sighting--737ef71d-0ac1-4722-9daf-e6da33b016e4", "sighting--a398e0bc-083d-4ef5-8396-ae388dcda38d", "sighting--05f7cb40-afc4-4a8f-8485-da12166cb7ca", "sighting--ae6b7a02-0520-4e96-9454-75787a51c935", "sighting--af213acb-d93a-4ec7-9cc8-a1b1d7de3f37", "sighting--dcc52431-1be0-4aa9-93c9-0dd381576150", "sighting--cdf72384-ab5b-41ee-b749-aa1d34324d30", "sighting--85674398-56b0-451f-a27a-100bbebd758d", "sighting--653a7e1b-e014-4ee7-9073-76132998f6dd", "sighting--9c43cb02-a5c9-488f-bc84-7846046869ec", "sighting--2711baa6-d0df-443c-925d-1c82313e169f", "sighting--8158ff58-8340-403a-af56-ab503454301d", "sighting--6b515783-d3bc-4339-b3a3-ea1cf9196531", "sighting--c54fb8e8-98e9-413a-88db-efae1ce6b536", "sighting--1a318f19-5dec-4610-8178-f8a23cfa5b92", "sighting--d1cee802-f8eb-4035-805f-4104b1cdc20d", "sighting--20d87227-f9ff-4649-9838-a2c919bd7505", "sighting--e7a9ee0c-dfde-4eef-9e7b-c5dee1100c08", "sighting--5ff259a1-791b-44ce-813a-7d33d818111b", "sighting--84c6b537-77c1-4344-a145-4db012106024", "sighting--9413d737-266f-4d77-a394-cc2cadd17f09", "sighting--2305bc25-a745-4608-8adc-c29ac44cef4c", "sighting--2a2908c3-6165-4c3e-b72c-206cd1629174", "sighting--400699ae-6d94-440d-9cfb-7b4692dc5d16", "sighting--2f098594-fc4d-49c4-ad4a-c183ab405645", "sighting--06200229-c708-4cc4-bce5-de801244ec7b", "sighting--7574409f-7a85-4949-a6a6-157a62a47be4", "sighting--3febe791-aacc-42d8-9429-1834a15a4c50", "sighting--93efb64b-6207-4062-9cad-b69b500e3cdd", "sighting--4b0afad3-8558-4896-ba75-52b4ed354c07", "sighting--6083e59f-20ed-4ac9-84ce-4c00ee6b29e2", "sighting--acaca15e-25f5-429e-b03c-440dfa1b0222", "sighting--f7be2c42-a4f4-4b5b-b8a1-7497c27fef81", "sighting--cbd47618-f4ff-413c-b676-d8ffa805ee1c", "sighting--7175374d-be93-4c95-9670-b43151b6584c", "sighting--5ed3c419-93e2-46df-99f1-43ce4fcfb164", "sighting--689eec8d-ba21-442d-aa07-03f32157c34b", "sighting--a1405e41-d131-4477-9df8-f9f6ed46a9e1", "sighting--d9b6ae1a-5708-4681-95fa-373ea7f1ff21", "sighting--5c2b04af-a30b-48dd-bf86-e86bd867f1e5", "sighting--849e0768-8c61-4f18-943e-5f5e48a641a7", "sighting--e4dcf3e7-c6eb-4df2-8e95-971d37d7d477", "sighting--03306b0b-b5c7-4633-9545-710e41cfd301", "sighting--6b12cb3f-c272-4441-835f-396de35d74ee", "sighting--b0dd2b0d-5d4f-4b67-bf01-d8a7bc098d19", "sighting--71e96b4d-5665-41e6-8c94-6f3b6e9c7d96", "sighting--0483faed-dfa3-492e-aedc-b8d05ed2ea3a", "sighting--b933f13e-6ec8-4fb3-aa83-04aa53ab2669", "sighting--8d63d4ca-7c61-4a14-8c52-c44f442a331f", "sighting--e644b8a4-e48a-4aa4-8f41-52425b961291", "sighting--64f002be-1e35-4581-827b-9f1ba7cbb1f8", "sighting--74871d4e-7790-4d41-8a9c-fb07897ceaaf", "sighting--418794d5-1985-42e7-a6ee-cd0fc513581b", "sighting--b3a8b5e6-0cad-41d9-9c89-d46a4bc9d682", "sighting--f2521d2d-96c2-41c7-b698-7f34774b419d", "sighting--fa2d1b7d-b172-4a4a-87f8-d06af3b630cd", "sighting--91a49f32-d5b8-4b9d-9c52-812657d37969", "sighting--26fbe6f8-2cbc-4f8d-8abe-85800b01b74c", "sighting--d4c89e66-6830-444f-8da9-97bd2476e2f3", "sighting--4dcb1faa-0734-4433-b344-c0701c2e95ac", "sighting--faf90031-c277-4730-8911-4fe03679f03e", "sighting--925678cd-07e0-44cd-a15b-c1d14fed6e2c", "sighting--a975425d-8890-4f97-bb96-9a6962d10e62", "sighting--3895632e-ad97-44e0-8955-e482c9137520", "sighting--db423ab0-000e-4583-b04b-8155e14b9146", "sighting--086a6f1c-516e-4a05-b896-b9126027db82", "sighting--db53292f-23fe-4f47-9e12-cd390033c8f1", "sighting--1eb2ba9f-d99c-448d-a500-ef7b5d54b3a5", "sighting--a8a909b5-a133-4072-bb1d-b51b906803f6", "sighting--22078b69-098c-4495-b702-e1fc68fcdc80", "sighting--0e620f64-8059-4074-8b24-fc44e14061a0", "sighting--0497eee5-a1a2-4034-88db-5be5550b5d9f", "sighting--735da83c-595f-45f9-b4d9-fe6f3453ab10", "sighting--2af9992f-8cdf-4bcf-82dd-cbab991b2ef6", "sighting--cd554d2c-f192-4af2-8d4f-c63d28ea40b4", "sighting--93b75eb5-db3f-4dc0-91e0-bb8d4b41606b", "sighting--a7865516-702b-46b0-b1f1-8af1c03330b0", "sighting--752bd1e7-f92b-4e9a-ae50-16b0d1fead63", "sighting--1d6d7d61-c920-47de-ab6e-dba28eb5473b", "sighting--76630184-6fea-4dfc-8a18-582c0aa0b555", "sighting--766c071e-3c13-469f-9956-1dca91cde63d", "sighting--ae5a17b3-4ca9-45b4-bcd3-fe53b775a89a", "sighting--ee954594-0066-4daa-9588-3e0c391dddf2", "sighting--10a5c960-c92b-4549-ba2e-f2fe55535c7e", "sighting--cb28e194-662e-40bb-a9a6-b2e1a9421033", "sighting--c2550634-754f-4970-8b35-31902edce6a8", "sighting--e97470db-eb61-4105-a958-9ac4ee4d8c77", "sighting--c67b16ee-fdb9-48b8-b938-4f9f53c1a672", "sighting--1a9535a8-a42e-4312-951b-f665523dbd96", "sighting--b947c237-763a-47ef-a6a4-f8f8e382b145", "sighting--ef0b24c5-67a2-4617-96b3-11774ced4ba7", "sighting--68c825be-8468-4f25-9e7f-1fe9cb814a24", "sighting--31775b86-e523-4cbf-b216-eb0adcfddf9c", "sighting--d6ecbd0e-c306-44ae-bd6a-a19cf6f90bec", "sighting--44e87a63-e9e2-46c0-bab2-9ed809a2bfb5", "sighting--3962de11-8003-4707-845a-055c8fca3fa7", "sighting--7e5c44ba-bc67-409e-aa0c-80b187839357", "sighting--902f2b0d-96e0-4aeb-9030-0ba2d6fd8818", "sighting--c308b3bb-5980-40f7-8451-208076c2ea1a", "sighting--a3d330f1-674b-4032-8268-023041ff8563", "sighting--c5197741-09e7-45a1-a182-d00238ff10b1", "sighting--7ca3718e-8e8f-49ff-b85a-3fe3b0eb94d8", "sighting--7e9a04eb-0791-4fb7-8acf-00c8086efd33", "sighting--87a85547-2e43-48eb-a990-d471564f407e", "sighting--d97854a1-1527-4879-80e7-f477b825bc5c", "sighting--61fac4c3-0249-4044-9658-bb9d41d0c686", "sighting--d016ecee-c246-4bcb-9a36-447973c499c3", "sighting--55fa80bd-4f43-43f3-b70b-e79ea733ec67", "sighting--de10caff-346c-4409-89c7-22f9c1d7b985", "sighting--40369e83-f52f-4a6b-b21d-a0f7e4b97c45", "sighting--aba0c5aa-abed-47aa-95e9-1d7191920fd9", "sighting--abbd4b98-d9e8-4bc0-990e-d9c7ac5afc2d", "sighting--98f895df-d8f1-43d7-9d93-da5ac9dc718b", "sighting--ebe7e660-af5a-42a2-b5eb-229d4761a8bb", "sighting--7048e43d-a9ad-4760-832f-c4e03178bea7", "sighting--582ab089-d065-4bae-8e49-e55466d19451", "sighting--d8713d5b-668c-4113-b4cc-12ca56a47397", "sighting--44be9ec3-2dbe-476c-a0a8-bcd6bb1b02f8", "sighting--69681385-aa1d-4bc6-a7dd-2d6dfdad21bb", "sighting--eca57242-7552-4128-ba45-2d0822d687a2", "sighting--fba3db26-5614-4a27-83b2-0a2d800b0a96", "sighting--29479dcf-b4d6-467b-a711-023f5a26cc81", "sighting--a6fab3e4-919c-4b49-967a-e77bc8ebd42e", "sighting--e142039a-ce48-4539-9bdb-422af868f9df", "sighting--44d18a97-9e91-44c0-924e-c90a91fef029", "sighting--6f46b852-5520-475c-bc64-f1d5116d5cf6", "sighting--98880ec1-b1f8-4ed3-be08-1da6ec185f41", "sighting--34510eca-1f7f-4953-816e-f3c93ea54e7c", "sighting--d94ae4b8-18c0-4aa5-860c-14d7ec54b2c3", "sighting--131383b2-b87c-4d06-87c7-852dce681ab1", "sighting--128748e0-4d9c-4797-9746-b4ad73eee392", "sighting--b546eb5f-91b5-4dbe-a53a-62860288868f", "sighting--7152bc30-9a0e-43ee-b216-aa04adcd773b", "sighting--0c92b2c9-619d-4ad1-a16c-d6392548479e", "sighting--d678adec-cb91-4037-9d02-135be35ce8b1", "sighting--8eccc4b1-6d0c-4913-a262-1d2e33ee89d2", "sighting--f6315de0-1092-4006-b088-79a414276aa5", "sighting--d8d6c86e-a33f-40bb-877a-caa22454eaca", "sighting--42b33715-7fcf-4d99-8481-93512273b073", "sighting--40106484-5f41-4648-809c-f04314c2d0c7", "sighting--dd7574bf-de4f-4f76-ae76-3b1a93dce81b", "sighting--0ba2f384-9d9e-44dc-9c21-050921922649", "sighting--cb6e3b86-7188-430c-8d50-2acad94c0e2a", "sighting--ca51aedd-0e01-4f1b-92e9-e7c7f7c99974", "sighting--3d7f643a-8b43-4770-aaf4-6c0c1a4461c9", "sighting--2d49d192-71e9-4f67-a880-5fb8eb4130aa", "sighting--6c6bce85-0d85-4e14-83cd-bfd8cb1fd7f8", "sighting--74d9a0a3-674b-4178-86f9-c601fbdfefd8", "sighting--69752634-e38c-4481-b833-a9d77b36582e", "sighting--b92d58b5-2a5f-4eae-82de-0f1e7445c6df", "sighting--7487d0d8-a777-489a-b68e-a1fbaa76a065", "sighting--1e92998c-9c18-4b88-bc27-40638197476a", "sighting--47506a66-aa84-4ece-92b5-035bc7949932", "sighting--08ebcf72-f80f-46ab-9a6a-cc15d60ff19f", "sighting--94430a87-0cc3-4cbd-865e-9f339cfc7d63", "sighting--f3454b07-dd32-470f-8297-474e797d5270", "sighting--6a405d7f-a4cb-4a0a-bdfd-2a77d92762ac", "sighting--74e1ec7f-62e5-43c6-9131-728b092d1bb0", "sighting--fb7038ca-1bb9-46fc-b36b-0df12954d03d", "sighting--3ff0f3d9-4ee1-40bf-a1fe-d9d5ca9a65d8", "sighting--0d981119-9985-40f4-8736-56a08a0c126f", "sighting--a19fb279-105d-468f-bacd-3361146693e0", "sighting--b72c443f-6513-4796-ae51-767e28c8bc22", "sighting--f4c5073c-9adc-4103-baca-1fbee39b79ec", "sighting--1124f054-b520-4459-a5fc-2d453f0589b7", "sighting--2c741e02-37e1-4512-9b42-c877cb6e3ddc", "sighting--6a6cca40-7dc9-4797-8b61-1f3db2e05511", "sighting--60f6b99f-59c4-4258-b950-4148dffa5807", "sighting--1989eb82-106a-4cda-aeb6-d0ff66173df6", "sighting--219a3bbd-8138-4aaa-8baa-a73411ce77e8", "sighting--8ba066a7-ad30-4eba-b3d5-5c9e88cbc4df", "sighting--ff75b296-2e46-4ed9-aa00-cce1b0f9866d", "sighting--e03f8739-07f3-4bc3-9392-e6e1b0446c71", "sighting--01c98430-aab4-48ad-8ebf-e9dae85dd173", "sighting--ffc129de-73f6-438f-be5d-41c515f3f204", "sighting--f8f07e98-5a9e-45b4-a1c7-595644e8057c", "sighting--97f562c1-c10b-4d44-b33f-fc6d5e003463", "sighting--85af4ef2-e3f3-4ea8-86a4-3ff6a1f4db66", "sighting--529c1250-65db-4ddb-8153-a53c5e291fb8", "sighting--d901a4b0-d9ad-4cbd-8e03-d91c5e01d08f", "sighting--a2d91cb1-25a1-43d1-9761-caf470f3e214", "sighting--e0887be7-6d11-4e9a-8da2-06e0788c5503", "sighting--ec4dafb1-83a7-494d-9b4c-9d9efe0df6c3", "sighting--02746d68-a760-43a4-ae82-2cbf41d33df6", "sighting--1e8281f8-62c1-4f07-9e5f-907f5aa5e95a", "sighting--2bca9bcd-9f9a-4caa-a122-a6ea9ce12eaf", "sighting--4ab65074-9289-4758-9c44-451c0d3c1478", "sighting--f5261347-5494-4976-8814-783be607d34b", "sighting--dd3751c4-6dc9-4780-be87-8df631bc255f", "sighting--6700d0d2-2477-4c66-84d4-4a4c23c7727f", "sighting--b241fd1f-c417-4f7e-a081-d9347084ba99", "sighting--050c19ac-f0de-455f-8711-ba41031a5c1a", "sighting--74168e78-7d22-427e-af19-48035e144096", "sighting--52676871-aa3a-4651-a2df-e1ebb9332a82", "sighting--6fc1018c-e5b7-4089-b564-e4b251b7c470", "sighting--fec82523-e8bd-4a82-82e1-ce29e16f45fd", "sighting--3d66f4cf-7d8e-4277-a090-da5fdb902419", "sighting--fb26d726-18a8-4122-8d71-e8ece68611f0", "sighting--8468cdc5-13fa-44d6-91c1-181fbe64365d", "sighting--1dc31786-51fd-425c-8be8-c46454433967", "sighting--47d0ebce-b747-4032-8e26-b6f7833f827c", "sighting--5e41c650-971b-40ca-b5d5-1aaf784c42d7", "sighting--42d2e35c-0aab-49fb-b674-89f3cd32ca5c", "sighting--92659771-5096-450e-8732-d63b85891c96", "sighting--e80508dd-3c49-4dd0-8b89-8fb7a400c9db", "sighting--119a64f2-0ddb-4841-9aec-6ac7bdac51fb", "sighting--4b7c848a-2c0e-47e9-9396-b854ef148b33", "sighting--992d3490-4aca-4c18-bfb3-42daa7beb271", "sighting--55283d44-07c2-4930-b071-075ea5960edf", "sighting--e48eb389-3a5d-4ac7-9e10-3eca2bf74963", "sighting--0c5656a3-bb4b-4f39-8123-96eaeaaf415d", "sighting--6833312c-cd8e-41db-918a-ead3a0edb57b", "sighting--3540ead2-8a93-4056-873f-001e2cb71b6d", "sighting--905d94af-a62e-4ce2-a305-53f5c289419a", "sighting--c2b45ae2-664e-4897-81b5-081853074f0b", "sighting--666033f8-5ea4-4557-992f-a43218570764", "sighting--3d6bbf23-28f2-400b-b8a2-927ff99d9269", "sighting--9281b59c-0de0-4273-8286-695dc63536a7", "sighting--e3aa35f2-d2bf-4c98-bd4d-3a9c53c0179f", "sighting--2fd60348-9f1e-4cc9-be77-04ae4962067c", "sighting--cd010b8a-fe32-4ef5-a7e3-a5739b5e7d07", "sighting--6467d675-b9fc-4229-851d-17ef2e31ab17", "sighting--99b48608-f08b-4c95-bd06-5a0297f8d6e0", "sighting--e37bc8b5-356a-4404-88bd-732a8eb7e899", "sighting--49b01cff-98e8-468b-8653-069502ea0fcf", "sighting--3944ff00-f3c3-4584-93d7-10fd8f0d33ae", "sighting--94aaf656-0327-465c-9500-ea5866cff30a", "sighting--3c770263-fd36-4a6f-a2fa-5832cfcf0c32", "sighting--1e02b856-a181-4e3d-888a-3f1997534911", "sighting--2e4249ba-abca-4645-8f02-f645949315aa", "sighting--5811b9aa-e4f3-486c-8a4e-a7d1ceabfe3d", "sighting--f9436c34-c69a-41d6-b037-e58921ed5422", "sighting--cea9270a-1db4-45b1-856c-26bf07af7021", "sighting--47c0c5af-0f6c-4911-9566-7d28d63aa6b9", "sighting--c331e31f-9e1b-45f1-87ca-6b3d41698461", "sighting--4981539a-2365-44e5-9d89-e295c7207498", "sighting--7b0c44e8-4d9c-4b6e-84e4-e55a2565afd6", "sighting--4a183ae3-6f87-401a-974f-1c0db81a7bdb", "sighting--d9665861-d0c7-4b09-af4f-c9b21b7f1e75", "sighting--1f00d1e4-b55c-4872-bc54-697d7acb0943", "sighting--66cfb8ab-74c5-491e-922a-ed7d6e4aa7e9", "sighting--807a9f49-a6b1-40a4-a24f-b223390b517f", "sighting--88f5999b-2231-4cd6-9484-7aa4c9b89043", "sighting--44f0630d-cc63-4355-a7c8-c6012994d831", "sighting--6ed39f06-d333-428c-98f1-2b93d33e78b3", "sighting--dc70bf44-7e8c-44c2-a9d2-c47aecbcbaf2", "sighting--acac1016-09ec-4e93-b518-dec1007d06ae", "sighting--7a577545-3f86-4a6f-9e40-ebdfdebe4af2", "sighting--7ab8ac3e-4def-4951-bef1-69844d6f9024", "sighting--6e0bd96f-3d08-4833-a4c6-83b69aef2dd1", "sighting--08dbb9a9-f042-4e7f-b93e-de188511d3b4", "sighting--fce2ae03-ea8a-4e1d-96b3-a0c86b3471b6", "sighting--f037117a-6148-4725-93ed-5c215e11bb9d", "sighting--3a0dc1ba-92ba-47ae-94e1-6dae2dfc6d73", "sighting--72c4d0de-5069-4c50-8b6c-68028e53c1fe", "sighting--adbd08f0-c93e-4751-a148-a86317136b5c", "sighting--b7e51bb7-3fe6-41f2-92f3-f0755fe25b7a", "sighting--d44d89fb-886c-44d3-bdb9-8e7dc389f7e9", "sighting--5452384f-59a8-4829-bb24-a3436e965407", "sighting--5376ffb7-84c5-4369-991a-8ea733581226", "sighting--3dc64f1b-18e5-4665-9c10-972b99abe6ca", "sighting--3e6d991f-3b1e-4877-a069-a5c7d8398096", "sighting--46092df0-6706-4b7b-838e-e7908cd8dc14", "sighting--c803b669-c772-459a-bb87-4e45c5c15b8d", "sighting--6351d330-089f-4ecd-adc9-58655ce8e2ce", "sighting--e681c675-ebce-46f0-9a07-13ff3bc9e41a", "sighting--b32d422d-17ec-45e6-b9f6-c2c46751a5c3", "sighting--a16e54cd-f60f-4a9f-a1bb-2214ef3ce3a9", "sighting--62061f2c-1e84-4184-80e3-5567b5e72d41", "sighting--7e55b036-3784-4524-aba4-689392861762", "sighting--74d6caad-5296-402c-b1e6-52505404e747", "sighting--4a76c716-ff38-4d8d-a4ee-70c50875eab4", "sighting--fd5e24c3-465e-49bd-bf87-210b46ad1324", "sighting--4ee26f70-1401-49e5-a45e-b8aa382c5fe9", "sighting--1b5d15f7-28ec-4c0c-90da-6a0ff149450b", "sighting--d0d8bc9f-b0dd-4c69-932f-e07a400b0322", "sighting--f3a46af0-1c1f-402f-9f7b-52dcd119585a", "sighting--718f8913-6d3c-47ea-8ea6-efeb4b4324ad", "sighting--7e9d3399-e14d-450e-8229-85f936609c98", "sighting--a6ea3743-b601-4e96-98c9-0ae954a9771e", "sighting--33b33439-6202-4a2a-ba60-ec7e07285d3b", "sighting--a5f1c3d9-a50e-418d-bb67-b6ab77056ad8", "sighting--09ac5ec5-f343-4818-a012-71bbd477b8a4", "sighting--2ad603c7-5b9f-4121-8081-dea832def726", "sighting--6c457f71-d1d4-4269-b391-8edcd2db8bd1", "sighting--3383c6aa-5945-40e5-a9df-5a997dcfedc6", "sighting--4827d241-5eff-40b0-b19e-17ccdf5af1e4", "sighting--980f5ef6-3e87-4e81-abbb-d966685f7692", "sighting--8fe064b6-04c6-43d9-b434-060960075e01", "sighting--266a303a-2534-4e69-951f-3f0cf74fba0c", "sighting--55f63b13-79a2-46fd-a9a2-8d1b4198d765", "sighting--d4215675-e236-40f1-8dca-8b9d58714692", "sighting--06790491-7a9f-4ea7-8bcf-ad529829f89b", "sighting--b39e4101-1557-4e23-a4c2-bf460963c39d", "sighting--0267525f-76f1-4cb5-864e-d021b7bf949a", "sighting--35b18aa8-ed1d-450d-8173-c305fd327a49", "sighting--6e0fe1c9-be79-4887-9e4f-b9b30971b183", "sighting--8e6bf86e-1ed3-4f0a-9292-26bd4909098c", "sighting--a3033e21-30c4-4a56-a4ec-9ef61338e72b", "sighting--42690698-bc9f-49ca-a6ed-27b2935da600", "sighting--c5d2e72f-a5ab-436f-ac74-0ab405c79709", "sighting--c911a0d3-373e-4ca7-9237-f895098985c2", "sighting--74429bfb-f2fc-469c-a374-805fadb9830c", "sighting--897df3d8-7151-4998-af10-8a88419df073", "sighting--3d734d23-99fd-4878-bf7b-3984ece3752a", "sighting--ece42aab-cbea-49b2-8633-b0e3a4f6cf89", "sighting--b97bf367-3b24-4247-aeae-94080c87ffe3", "sighting--52cc960d-725f-45e7-a3be-0c61d160fd7c", "sighting--2c425ecc-4aa7-4a72-84ef-d708f9a0170b", "sighting--64096c00-de56-4365-9362-c74ef93b341c", "sighting--6963461a-6c7f-4eed-ab41-d889a1fc1f09", "sighting--79b808eb-31d8-4f2f-b227-dc811d26f80b", "sighting--744c58e6-fdf9-4c6d-80f2-491ace5d267f", "sighting--1e2399b5-28e3-4519-87c5-25cca9b5aa4f", "sighting--c6c158b5-20de-4c55-aa9c-0697898f386b", "sighting--1b2b690f-15a3-408c-a2cd-1e9db4a95785", "sighting--d2ea31c5-9ee3-4b54-9958-ada730acf33e", "sighting--8852ec8a-07e6-4cbb-9ec5-6a66a20f14b2", "sighting--917f79bd-b010-4b0b-8f9f-d5257caea071", "sighting--e8691e01-9a1a-4371-9aac-870b6df7a525", "sighting--702dfbff-83d2-4704-b881-5f6ddb0f1996", "sighting--3e1bb62e-ff55-4971-9df6-d8fa61987e15", "sighting--32f40422-f794-44d2-9927-94753facd443", "sighting--991dbd44-5648-4c69-8ed1-d73441a6fd08", "sighting--0563cd5f-99f5-40d5-9e93-a9f548ee6263", "sighting--93bf8464-ad4f-4a3c-b5e0-6cb8622a9138", "sighting--35375961-e34b-449e-82cb-07944cf39267", "sighting--ee376d2b-588c-4025-aacc-2266b213a40a", "sighting--a84ec8c3-8dd6-4536-9a76-e68138bb3cf3", "sighting--5d4f6fbb-dce1-45bb-b833-4dfb23c9f1da", "sighting--af3edafd-867f-4805-841b-8d112401cd0b", "sighting--95cc4c57-b227-4686-8314-8ac20f2c8e4d", "sighting--5e7a4eb0-9ebf-465f-b6c0-c4a6cebe8edb", "sighting--155a230b-53ff-4e1d-a34c-c9065edf2a18", "sighting--60fb9cba-fef3-44d0-9f4d-0141a90d89d4", "sighting--875a5b2c-24b1-44c7-86e8-5fd11baadaee", "sighting--b051c430-e6e1-413e-82e6-3a8e76aeb127", "sighting--ced29ba9-233d-49ce-b614-88ad077a6e26", "sighting--0142221f-68a2-42a0-8aa1-6f37d34f082b", "sighting--89b53d12-8b6a-4483-9c52-f6617021b981", "sighting--e370e3ec-f38c-415c-aace-b88f07629c0c", "sighting--abd8094d-3229-457f-8c65-510fe9383e8f", "sighting--17c8d4b2-b45f-449a-8e50-65b994d9bc9d", "sighting--46d059ff-603d-452e-a394-ce6d5edef48d", "sighting--3694e1d0-1429-48ca-b2d8-834447f62e59", "sighting--1e83e66f-b7cb-4e6e-b192-e13d15ed01c5", "sighting--fb10de0c-a91c-4146-84e9-829167c4274b", "sighting--dd13ab10-ebd9-404d-9eee-ff326d361b85", "sighting--5201b66e-5026-4068-b321-1751087db0a0", "sighting--17f8d74a-d1fc-4991-99b9-fae8f08da9e9", "sighting--08060a26-76a9-48bf-ba2e-4ff90fd9af1a", "sighting--22fd157a-7ef5-4cae-88a2-dfd1560459d0", "sighting--d4b4157c-b26e-4732-baad-7547288fd9cc", "sighting--f91eeeb0-c424-4b0c-bb5f-f60c0dee7d66", "sighting--8b0f3dbd-fd15-49a5-9145-498652439072", "sighting--2dedf503-f666-408c-8963-cd376a0d0a67", "sighting--898cfe43-77a5-4146-ac48-eb19e7ca7b06", "sighting--ab384991-5a8d-42ce-9ebd-9e30f1402444", "sighting--f8a1eff9-2467-4f52-b367-6eb8bc11f5a8", "sighting--094913f5-940f-4787-984c-149a7b460d7f", "sighting--79cd423c-3496-4cdf-a021-86e4e011311a", "sighting--e284a6cb-d58d-4dee-af05-c466748d9326", "sighting--5ada4186-3e50-494c-b100-7b7e6005b021", "sighting--8c61d362-59fd-4e7a-b96a-b2662043d8c0", "sighting--05fee81e-1744-4819-938b-e42262fb4eeb", "sighting--982bbed8-2284-443d-9739-dcc7f74b6e38", "sighting--68eda54a-6e01-4ff3-955f-206411d4c21f", "sighting--73650a20-01b1-4cac-9efd-d68e6c15489b", "sighting--d1a0f566-f107-4328-a6a1-be3e46f79c60", "sighting--a6106c32-37fc-45ed-94fd-ed968f6747e3", "sighting--8ce665fc-4d8d-48ba-aa72-4c499e7c38b4", "sighting--5418c6c1-9bb4-48d2-a8db-9ba859343351", "sighting--42ebcbef-37b7-4f19-b683-ea77ae092e56", "sighting--706775d9-5afe-49e6-a0d7-ca7c2046a44b", "sighting--f2a6e7ea-3403-4262-9f75-562c845e4c70", "sighting--508eca9f-63d7-44f3-98ec-7549fee76740", "sighting--4b011099-bedd-4ee2-8b53-cfb336d57b2a", "sighting--284cde2b-3021-4e3d-ad63-d86701af1ca3", "sighting--6c4d2ee5-df80-4649-b48b-51172666c1ec", "sighting--23cf6a89-da42-4147-9371-387c4f19fc41", "sighting--aa29b082-a4f6-497c-9dbb-85b03cd2bf4d", "sighting--c3783185-18ee-4f88-8252-5a4a0bed5d13", "sighting--a3abadaa-5cab-4110-91b7-12779c7075c5", "sighting--e9115975-5f4a-4bcb-8bc7-c9e05d61c266", "sighting--d4977288-585b-45e7-bbda-c8fb7cb4d2b1", "sighting--1ce7a821-d340-4bd4-8b57-d9eed80076ac", "sighting--74c7b148-f568-4ea1-905a-95ec9bd0439c", "sighting--ba154368-37a0-43d4-a520-cb1c658b66c9", "sighting--b26c46e3-f74a-423f-a294-3811313e40fe", "sighting--2ddc6255-0ffa-43ea-917f-5fc262a03479", "sighting--d2b02725-238f-4f09-9e60-08251f14c2a1", "sighting--4e8cd6e0-8f98-4702-a15b-ffd6508db559", "sighting--c7582e94-9a36-4bb0-846b-123147826de4", "sighting--d4eafb0b-44ff-4de3-b862-dcf26b6166dc", "sighting--69f7232e-56c7-4295-b244-1e467dbb1065", "sighting--897e6c72-2577-4e67-bd52-dfa641c088e9", "sighting--659705ff-b85d-4c3a-a277-897a728fac10", "sighting--40b70f65-a377-4447-85f3-1f4c949ee40a", "sighting--8d4969ad-661b-4885-b447-efe1e2cdedea", "sighting--fb5b5d6f-89fe-43a3-b39f-842595c21909", "sighting--5f8b543b-e2ad-49f1-b7ee-001f70bcc672", "sighting--d5b3dae0-0867-40ca-9259-95a361b3c24d", "sighting--0112ff29-062d-4a8d-94fc-088aeaad0133", "sighting--cbdc4be4-6bc3-430d-b67a-b1a19f459178", "sighting--6f6fc2b4-9cc0-4e5d-9e2c-8b800f879456", "sighting--991958c2-b60c-40c8-bfe9-aac3253077d1", "sighting--fcb4d89f-656d-4ce4-b354-b2a6684e4e16", "sighting--4e703ad0-de08-4508-80aa-3abb2b7b3767", "sighting--8ae60a18-85f5-40f8-a223-20a8c81c00be", "sighting--d192e01b-4a56-40f5-acf9-76c3b9784373", "sighting--aff3eacc-0a99-4223-8061-cf52ffc14277", "sighting--8aa1ae3c-473a-4743-a1f0-362e807843cc", "sighting--99dc4f5e-ff52-49ae-81f4-a8c5ea1c14c8", "sighting--3514fad5-0f17-4007-a7de-b51447121882", "sighting--9a65b428-8a40-4d53-99a5-f83cbe54e48d", "sighting--59c63ff8-d9a5-47cf-bd5e-49c59a00ca45", "sighting--c497110e-dea0-4409-9415-6ca11b91fea2", "sighting--63d49253-9a38-4080-993c-ff4c11bb3549", "sighting--72466dc5-2318-4d83-8b9e-e415330261d5", "sighting--672feb13-9a4d-4f74-babf-ea097637c6a8", "sighting--4fa38886-eb9f-42f6-8f2e-15e14dd99cfa", "sighting--fcdd4512-8222-4b3f-b6b1-81d872d1cd62", "sighting--ca24eadf-3049-4366-a145-2b91e1becae6", "sighting--3521dcd8-10d5-4bf8-8d0e-cd7fc7dbc200", "sighting--524dc3bd-832d-408d-b26f-97d4f5cdc2c7", "sighting--e617923e-b47f-4e5a-ac65-009b7718e5ec", "sighting--69a9d181-c994-48a8-a958-f7bc22c15686", "sighting--abd527c5-ad8a-4acd-921f-01091c9f69b9", "sighting--ea4f8c86-dc8a-490e-b63c-4a4dee57e193", "sighting--f51c2383-4b63-41b9-9045-4fe2b7897a98", "sighting--0f9594b7-6d35-4d79-a5a4-a5925aab99cf", "sighting--7738e751-9f3e-43e8-90e2-073b9681e996", "sighting--c5a13b2a-2c3e-412b-9899-34787f685316", "sighting--3fae7b15-66d1-419a-833c-1de69ed126d8", "sighting--24c9ba05-c301-4cfb-995c-636db2beea36", "sighting--308364c2-73a8-4d53-9a40-4df8e0abf804", "sighting--8efa3b97-38f3-42a9-b662-e1278e47d468", "sighting--2de7307f-3d17-4ac8-a5f0-add5146a0290", "sighting--2d787bdb-5547-4e7b-b9dc-50b0b676b44d", "sighting--7501d20b-10c0-4641-8374-864560593015", "sighting--f64cc6ea-5b1c-44c4-946a-93b90155bb48", "sighting--17f79862-fc00-4e48-9cad-f8a298fdc2b4", "sighting--60537357-fad0-47a2-a75c-c6f729fa2576", "sighting--c3aa9e48-56f8-4c4f-af65-dd78354fff9d", "sighting--9487ffa4-04fd-4fb2-9084-f6b2b118ff07", "sighting--548ea2f6-2728-4a8c-920f-e9fe6ac32e67", "sighting--ea09896b-6dfe-416b-b5f5-c9d56d20958d", "sighting--0a70e103-e562-4891-8ba3-05c7c282c87f", "sighting--58fbdc54-a943-40c6-95f7-6b3d17e442eb", "sighting--ab429fe9-e23f-4509-9954-a1b18f6bab60", "sighting--96f12f1e-72e6-42cd-9a52-397d65f31600", "sighting--cf53194d-0200-46b0-9209-4a68a6ec494b", "sighting--f664f800-9963-49c3-81b3-5aa23092830f", "sighting--3cdf2ab5-547b-4623-bc40-fead33fc832f", "sighting--f8a8cae6-feb1-4205-9f6d-c377c8f2f4fe", "sighting--c0034b8e-7b35-4b88-92fb-8045e648ad2d", "sighting--9be198d1-ba0b-4fa4-bff4-80e035b8704c", "sighting--35dc0e62-e4d0-4042-8ded-42b735caa037", "sighting--6a03fe35-a4ec-4ea7-8d06-859e65defebc", "sighting--e58e35b0-9cec-4b4a-a09a-f9b052d70cf0", "sighting--59a8eeef-73a4-4f0a-839a-917026d48df6", "sighting--bfcb3014-3c8a-4a74-af2a-576685f56153", "sighting--594e9ba3-f3e5-405f-8664-b14367e0d4cb", "sighting--d254e6f1-7652-4b49-8b30-1c4c5ea6cba1", "sighting--d31a629d-2ad7-4d0e-8c92-a9b18febae7c", "sighting--d73a7085-5c3b-47f7-8f8b-53e45a6a73f5", "sighting--a5a7bf84-a18e-48c8-acb8-638875ea2549", "sighting--cffc673c-d4c4-4577-a6a0-1e8a159e4452", "sighting--1b54c443-192b-4bd0-bba5-4f532e82047a", "sighting--83be11a6-81a4-4173-8b59-d0bc2ece196d", "sighting--2928372f-de7a-4773-9ff4-be93a4be03d6", "sighting--d1047b33-e7c0-4e48-b94d-b4fdaad7b452", "sighting--83a3d602-eb95-466a-bac2-3e69ef87372d", "sighting--a48a5a8f-73b4-469e-bfa4-5af7d932e1bb", "sighting--b36e158d-ee31-4aa3-be8c-59f8134c124c", "sighting--daa8793a-e3d7-4661-9df8-3cfda224ac6c", "sighting--5db1350b-ffb5-42c6-9105-5985f726c1b0", "sighting--44f10e1b-98c0-4f8b-abe9-9318f85f13be", "sighting--1fe5c470-a61a-4e3b-b330-f2a88e65f515", "sighting--a1d338b1-04a0-4157-a88a-a27da0255abc", "sighting--9b2a3758-52c6-4788-b351-c8361c3876c3", "sighting--c8bac34b-dbb0-4065-bbe2-2b4213065c32", "sighting--e1a47330-f72c-4517-8421-7d0f4d53c2e3", "sighting--9df4ec76-2eea-48dd-8cc4-a2a6d126d5ba", "sighting--dcb63dea-cda4-45fb-8052-a914bf279d86", "sighting--6c0d4758-ceb8-480a-b68d-4c7503e5b6f7", "sighting--2fb43dd6-a9fb-4331-9b43-ce90b128ee6d", "sighting--bca0bbb4-befd-431d-94dc-1852d08f02f7", "sighting--8f6024bd-faf2-4268-9576-f655901ac6a5", "sighting--f5101628-a8c0-4ff9-9b18-1fc37f3da1bd", "sighting--ab69bafb-ad3a-4bbf-bf31-69e15bab56dc", "sighting--8b11c727-71fe-4492-8e87-049d2f4d8fc5", "sighting--8c71e0e4-8d3a-4c02-82c6-71bee03f629a", "sighting--01d6e6f5-3d04-49d5-aea2-07a8e1345fe3", "sighting--daf72cfa-3c71-4f59-bdc9-572263023a9a", "sighting--4e5c0353-8bf5-4b01-b88f-a303faa5b090", "sighting--90c4648a-fa03-46ab-a88b-81716785bc62", "sighting--6648388e-6271-4b8b-91e4-c308b4ffcd3d", "sighting--41ba2a15-c800-4619-bf5a-fb97c92d1614", "sighting--9929bbef-bba4-4158-bdff-a18ce820d990", "sighting--46320dfc-9dce-4d23-bb89-555369b62bb7", "sighting--7a11346a-c8ed-41d2-b3d0-b854c65a2b0a", "sighting--2a00a591-831e-48b8-995d-a8e39fdf90c3", "sighting--3c7d245e-10af-48eb-830a-88e7e275ee7d", "sighting--8e9904ae-f078-45c1-bfde-bbe76e05701c", "sighting--d2f01c59-f79d-4352-baaf-93d4b2d6275c", "sighting--6e139476-1353-467e-b706-c36f5f2a24bc", "sighting--08dddc97-2f47-4eea-9c7b-aa42fa8d1fb9", "sighting--18397f4b-1a4f-43c6-912b-9bb8286c7528", "sighting--1bdbb95e-b916-447c-a5e7-836f8a1f3f87", "sighting--cf67135e-57ff-405c-8097-61af673eeb2d", "sighting--86c999ff-8b27-4a87-a943-4c6ab33c1d9c", "sighting--ec8a658b-6418-4e7d-ae1d-9d51e73aaf90", "sighting--bd6b7a66-484e-4b27-8beb-b061f814a994", "sighting--ed8ae90d-18ca-4fb7-a3d9-ab9e46f1c230", "sighting--dc0ecd38-6932-4ac1-b079-a72458c97f61", "sighting--b57da0dc-66bd-4cbc-9f95-513fe7a0fce6", "sighting--15694132-57fe-4c96-a5cc-28868213ab8b", "sighting--34175b06-ca9c-4ff3-99b4-365478e28a15", "sighting--19389bd7-4b9f-492d-ab41-00584667e21a", "sighting--d65989db-1ab1-4a0a-becc-6169ca497609", "sighting--895ef542-c7f6-4d5e-b1ac-0ae6632f3624", "sighting--2b598919-7cb4-4ca0-bfcc-d540d7eea40a", "sighting--3e091a1d-620c-4071-a1b8-bea2a1853aae", "sighting--f4478148-b272-4ab4-818d-b6e760385f1e", "sighting--eb79e516-4088-4074-b6a5-74a8cc915f8f", "sighting--2202d7b7-baef-4d71-bc73-3c23ddc4031c", "sighting--f5404e8d-5279-4f20-b992-7e50c8d673fb", "sighting--0cf9eca7-f407-4937-b2be-8a24c1651a73", "sighting--aeaf14d3-fa88-48b4-93af-84e2e252ab9a", "sighting--344bc40c-5689-46a1-9c29-4fe2a4f8f676", "sighting--1ef96f9d-0275-4ab1-adf8-92d60a3f5906", "sighting--2a40be6f-e3ed-4c61-b107-5db6002ee183", "sighting--62b7da6c-931c-4cfd-87ba-8201fed1fd4e", "sighting--7055752d-50fd-4a1c-9757-75099f323250", "sighting--b58af026-bdf4-4e56-ae99-6a492769746c", "sighting--95460096-1890-4bbc-a1da-a791d5e4ca36", "sighting--e6f68bb6-fc2a-40f8-8d11-deff2093e41d", "sighting--0583ed7d-f1a2-4a67-861b-b48e1afa29f3", "sighting--205f4e0e-67cb-4935-8b7d-86d737c29d36", "sighting--a8dcb99d-3276-42bd-b4d1-7bfd6d786fae", "sighting--edbc14a5-1ef3-4c24-b9f9-1ced442a5641", "sighting--6a5ec9e9-dd3c-4cc5-b559-1192a40ac500", "sighting--db25ee1b-3f55-4b39-8740-9ac96ebfbcd0", "sighting--43dc71ef-1c4f-4474-bac3-349c6f0d6a97", "sighting--6b08273c-3b99-4850-bcde-b4872cfe706f", "sighting--91b451be-c747-494d-88ca-1d8736b807f4", "sighting--c7a4b350-cb82-4783-a03c-93ba602f7961", "sighting--c31466e0-7fc0-4eef-a462-2662f5e74619", "sighting--50208b55-95cc-4678-bee0-b86f5d955d67", "sighting--5c86cbba-5b38-4ae8-a686-aaa3a66a9b59", "sighting--846ab749-a200-4f2c-be50-ff76f3c85098", "sighting--8a20984c-399d-44a1-82f2-4443253ce860", "sighting--5b7f16a6-9a74-4e9d-beb3-2bd13770e1d7", "sighting--40a8994a-ed2e-49b6-9629-5bdd4b110551", "sighting--0d5eea26-6cf2-4a74-a29a-8b8c33a0e0fe", "sighting--bcf8aab8-51f8-4928-9dc6-2af94fc4d0a8", "sighting--37fb3e74-b820-4d35-a641-569940b19454", "sighting--f782ec17-7e2f-429c-a3c2-297df2ff0222", "sighting--4b24d050-4e31-46c8-8447-cbd0e9ef0311", "sighting--1de6494c-aad0-4e90-8f93-9e2181c6a042", "sighting--9314f164-f1b8-42a0-b1d8-3a07bdc7d75d", "sighting--4850a1a0-716d-4b48-87fe-d68057f35465", "sighting--3302d218-8680-4f11-8ddd-bf7dac46be16", "sighting--90c84e2c-a6f6-4a32-9cdf-59ed7f3b27a4", "sighting--16f29feb-9f28-412f-9c70-b8fc3cbb989c", "sighting--239bf3b7-937c-492c-8cbf-9f9f9dada2c6", "sighting--d0d10421-db68-40d3-86ea-be762600dd17", "sighting--b3f8a40c-31f3-43f0-8b9e-0ecdaa817c7e", "sighting--2c1103ac-bdd3-44b7-b3e3-a3edd236ca2e", "sighting--46eb1b66-bc4e-47a2-b93e-8473ab2d9c88", "sighting--831cf4f2-d584-4e0c-a2cc-a0936caea257", "sighting--ba6c4684-4029-432b-965a-e1294194fd63", "sighting--0c4ae55e-5625-4c81-a4f9-64a64fd401c6", "sighting--5e2711cc-8751-482b-8f9d-0526d18c2052", "sighting--22984e50-8df1-4228-9e00-4ff0fdc04639", "sighting--8a0ce481-adfe-4478-8ef7-f68c1c6c1f3b", "sighting--c4dfdc80-020f-4abe-bd6d-f8f2e2a0656a", "sighting--849c3530-4e9f-4056-8fca-816f04617a77", "sighting--37b2d128-52d4-4d6a-ba92-b8817bb97b83", "sighting--57f00667-d8da-47c6-9614-9e94c6111c17", "sighting--e0ea3716-cce8-4692-b78c-c93290280ac9", "sighting--7e9a1ea2-4789-47ed-8323-7d29be537237", "sighting--7a9b7dcc-fec4-4d80-a98b-f0d7440aab1c", "sighting--b6c22454-1d20-4eb2-907f-d0104820eee7", "sighting--3624150e-2f2a-4c89-bf29-ea3dabbc92b5", "sighting--1bd8974d-8366-4028-a6be-3df68bc684e6", "sighting--b7a256df-e9b0-4e13-bc46-43ff1fad621c", "sighting--31607f5e-0847-4231-a3b3-c01250ca693a", "sighting--4c8180cb-37c1-496c-a396-80f75f616ad7", "sighting--46d516ea-38e3-40c3-b660-2aeb1be7e03f", "sighting--b6bbc27e-aa35-4593-98e9-607957d978e9", "sighting--950d1bf6-5b0d-43c6-a4de-c0e16c23889c", "sighting--b73a563c-5544-4020-9008-c47694c17c7b", "sighting--762b81a5-a3c0-4d3a-befb-da169ce5a746", "sighting--5d385242-e0c0-4967-a529-423373c36d9b", "sighting--a76e08ab-a6a6-4fc2-b790-dff168bbec57", "sighting--31be42aa-0e25-460b-b977-42316433e352", "sighting--8682d475-7491-4661-bab5-16c46d50d41a", "sighting--9998279b-45a5-4db7-82e6-841290dc1e06", "sighting--7f1abc33-7620-42cf-8485-bb94c6994421", "sighting--f474d5d5-efc5-419e-a72c-3576ba25e972", "sighting--c895b4d4-3785-4e8d-a469-961d05314188", "sighting--7ad68a42-77c2-4f9a-8dcc-13b30ad097bd", "sighting--cad2d17a-adb6-4f0f-b185-ef0311882bc1", "sighting--36ada69d-43f4-43f1-bc52-8d4aeb690324", "sighting--e7fb0bc5-d9b4-4542-a4e6-1fbb24d83fd0", "sighting--d4a72915-0951-4a94-9a7f-acf3694b9f19", "sighting--3006fe57-1f04-42b8-a212-fc6ad2b58181", "sighting--c62fdbf9-7ad6-42ab-b62d-83c945900ad1", "sighting--4c33c3c2-fc44-468f-95dc-54b841dd15e2", "sighting--7c0a9b4d-829e-4f66-9e00-ec722fdf5ad0", "sighting--e5104741-17e1-4ded-b93f-7cdb551d9ea5", "sighting--479bfea4-2881-480b-9abb-6c30051a09b0", "sighting--fc882bb9-b807-460d-8cd1-44252dac59b7", "sighting--0db3dbd3-c5a8-4b5f-93a6-f64ce669c43e", "sighting--82584160-b045-45fe-ae01-7e08980605c4", "sighting--ed9b841a-99b5-4d10-a36c-048a88565dff", "sighting--a696499e-9837-4d8b-a463-5a9721d143d4", "sighting--b0f607bf-954e-4de9-ba4d-2948d4a67b04", "sighting--390ebd79-8805-4964-8443-4764822a2909", "sighting--e02b546d-c069-4681-ac3f-5c6eca63736e", "sighting--e613ffca-7fe2-4cad-97ae-51173c9ff8be", "sighting--0aaf83c3-205d-4ae2-9dcb-e4c81b1f6dcf", "sighting--22b02342-f44b-4b07-add7-68fbde503900", "sighting--c4ae3614-6a38-448f-a8aa-332543a7ff31", "sighting--20702672-8b90-4b7f-9fee-a8b0260320f5", "sighting--f6d4b551-d785-430c-93d0-546c295bb3f8", "sighting--54f21020-399f-4c95-98fb-6435aee2e06c", "sighting--0357508c-19a4-4fee-b8d1-05048332f8c2", "sighting--f01fa77d-5261-4894-8bdf-b0e66765867f", "sighting--7593ed16-0652-4be6-8e01-9c24f2a91ec8", "sighting--a2fe311f-5b35-43cb-82a5-01eafa88cb36", "sighting--943df27a-cf4c-47f0-a0c2-0466c5b84b6f", "sighting--b03f50fb-fb9e-43dd-bb30-2abf4a686c76", "sighting--3a6eaa2c-3b68-407c-b458-0115d861ee6e", "sighting--faab7eb6-2803-44bd-ac2a-1bd8e5d1e10c", "sighting--08c13a1c-1246-4802-bcc8-0941cb8584b0", "sighting--634ade93-7a6c-4760-92ad-28ffafb583a4", "sighting--8f454976-f13d-4643-8261-d7cb3cc0b994", "sighting--4428b0c3-4946-40d6-877f-b1797f3fddca", "sighting--56638ca0-2e68-406c-b19e-0ee7b19f42b9", "sighting--33ce86a6-216f-40d3-b79d-252b43859ded", "sighting--1176d210-4d8e-4215-8bba-2e851eeccab1", "sighting--6efe8f55-28a0-4d3b-ba3c-15ae2508c08b", "sighting--18e87f6d-3920-460b-915d-0dd89e6d9257", "sighting--1609a954-fa18-43e2-aa29-0a8c1e84c0b9", "sighting--7631d23a-a742-4afb-a5ca-68678a754b84", "sighting--9324090b-a489-477e-bf93-690a55dc7fe2", "sighting--e5a8b530-bb3d-45c5-a15c-73f14f0fee15", "sighting--4f300325-52fb-42fc-93b8-ad2dd40af7df", "sighting--073d35af-bdbb-4759-b152-96864d093c77", "sighting--00fd2440-bb3e-4cd2-a435-02517a1e9c4a", "sighting--dc8d7060-0f9e-4df1-b442-77af631db9e0", "sighting--d4121a96-4fde-4e5a-a2d0-65afb6ec43bc", "sighting--8c8a5183-2bc4-415a-999f-f93dd407693e", "sighting--0bdc6977-b5e0-4068-a005-6ac9b246d9fc", "sighting--eb43e3d2-9de7-4e2f-888b-4eabf17275fd", "sighting--3d73b19f-db71-4794-b01b-6448f1e78877", "sighting--9426cb9a-60a6-4aef-a3a5-7a06332fa3f9", "sighting--6a408305-ab80-4752-8dd0-47b59985cfb3", "sighting--01cd43c0-3aeb-41c2-8e82-767f5ebf5b38", "sighting--4d49f39d-1ba3-4a73-a326-99e9aeebafc4", "sighting--0b8a4e00-a94b-4e42-933d-144eaa033494", "sighting--3cda13a4-6e3a-4848-8353-b1296a8ee74a", "sighting--fe9577ba-4a8b-4faa-adb4-26cf41033a42", "sighting--e01794ea-d858-44a2-a7cb-eddc12abb214", "sighting--8cdd92dd-ffdd-454c-ab91-1411b95a4a20", "sighting--7adaef49-f11b-4e4e-8f4b-8e4778a7a9ca", "sighting--a8da457e-8838-4de1-af72-70ed58aaf6d1", "sighting--32aa3301-2ea8-457b-acd0-26197e22c9dc", "sighting--91329ea9-9e7b-4287-8f24-76d47e0de51e", "sighting--bffccaa9-1ddf-4e50-9a6a-93ed05e2c249", "sighting--a6cf4082-a314-40c9-8dcf-ba7fa390da7c", "sighting--6f698409-b3f6-44c3-a4b6-0eb3a1a893fd", "sighting--d3a49c7e-e1e6-4870-b0e2-1d57210e13ff", "sighting--555fce6b-ed00-4cfe-8632-e99b89097ff1", "sighting--06321f67-76bb-47ae-898e-2bd853d157c9", "sighting--b20280bd-8276-48d0-a1e4-450e64b45dcb", "sighting--333149d9-60c8-4789-8c21-39b8aa4cede1", "sighting--1d02e355-dcc0-4246-882a-1483fe07fbba", "sighting--a44f142a-d385-442a-b559-6a3525d5f416", "sighting--e838bfdb-0a47-470c-8c27-48a50b5087b0", "sighting--e7799f94-de6a-4dae-8f6c-a24eada64900", "sighting--8b258d06-2442-47fd-befd-ce3cf18d604a", "sighting--01cf9ac6-986a-4d4e-bc37-37081ff4ff8a", "sighting--76a50597-0851-4c5c-bce3-141debc72b74", "sighting--4eb85dda-42e6-4c45-9c22-94187f4e5c66", "sighting--6c3d7cf8-7e52-4c90-8473-088cba05ea67", "sighting--7e7dbb90-47e6-44b2-8b66-932fd7778448", "sighting--9d31d2f3-f70e-4e71-9fa5-00e999aa313a", "sighting--c7415618-70ba-4f72-891d-3dbded3e9e72", "sighting--ef2c6c91-bade-4dc4-8db8-e35221339b00", "sighting--aec49790-8706-4771-aecc-c4ebc70c03f0", "sighting--1a8eb2b7-4a72-4e49-b3f7-2fb84228b3ef", "sighting--c4004904-f79a-4c77-b6dc-cdb226219461", "sighting--5ad90d53-a158-486c-a932-cc88fe87c5e3", "sighting--88ace662-6185-47d1-9765-1fb8f84af964", "sighting--5a5f3e01-c77e-41d2-a64d-feda9c852a5c", "sighting--88e1969c-17cf-4a95-b7e5-408f09ffc90e", "sighting--5342ecab-9b84-4e9d-97a0-56379c95a9a3", "sighting--07180618-d158-4813-ad37-e39413c93888", "sighting--2418d5d0-1bf7-4b36-8b6b-670899036ad6", "sighting--0eda5d7a-4eed-4969-8978-c6bb2fb49030", "sighting--8319d38e-ab73-4191-ac5e-a504fa0592db", "sighting--3a622d1d-d345-4025-ba3d-3ea7f43c07b6", "sighting--11ae82fd-79f8-42eb-9f04-89cc7dd4ed81", "sighting--d9a1821e-7f9e-4f61-a549-8f6de506aea3", "sighting--21426e42-9b2e-4e59-815a-4dc4be780cdf", "sighting--fb19284f-061e-4093-beda-fe389ae895f8", "sighting--4c28a359-f1d9-4f4a-b269-b97e35835ea9", "sighting--a57df2a1-ab38-4cca-9866-f16517eae3f3", "sighting--eb81bcb4-9097-4816-af0b-c9cea3d1d9f2", "sighting--f416d7ad-c628-4be9-a083-9d0f00194f08", "sighting--38bd0532-7416-4691-8b21-4ce4fcf9ce54", "sighting--27772882-958d-4b5e-a99d-72030a22ef54", "sighting--175014bc-4be1-41fb-846b-48c6fd1480c8", "sighting--f5861ead-c444-4184-ade5-dc21a03604c3", "sighting--21e7fa37-054e-4c2c-bea2-0d11e7dc7c02", "sighting--41b28cd6-2f3a-4e0d-ba78-3f9a0a136d29", "sighting--3c42e083-747f-424e-b660-65bab14acc14", "sighting--7e31d854-f238-4260-a13a-f6dd3226872c", "sighting--f1028c49-2317-4fe4-b1be-0c0f738e12ea", "sighting--0efdba4d-6012-4599-ba9a-5b8f99facd92", "sighting--318b6dd8-93cd-4e56-b3a4-56403a028652", "sighting--ce2a959a-6498-4ce5-a8a2-8d227f275e7e", "sighting--8c1be644-075e-4924-8001-d8c86ac48d39", "sighting--cdf01cf5-e2f3-4c39-ae58-1881965310f7", "sighting--7f74f47e-bf0a-4ac0-8a7a-9a6611549a7e", "sighting--f6f4ddc9-15bb-4839-8e75-92735f6e3157", "sighting--184ed64c-ef7a-4df4-b300-e70a7c9301dc", "sighting--e587682b-e0f4-4e7c-bbc7-de9653700e39", "sighting--0f501465-bbec-441f-b8c1-b6fbaa105661", "sighting--ac7b4e7e-d9a1-4b48-9e71-5180150273f9", "sighting--ecc5faba-f37b-4100-b5b5-0b080c76a941", "sighting--22dee073-91af-4904-833e-a093709fa1da", "sighting--d8718230-295c-41b2-8cbc-dbef3861d53c", "sighting--58615a07-49d8-4c9d-b06a-9ed0b37a28d7", "sighting--d264ad49-6019-4a4f-9d1d-3279136cc09a", "sighting--bce768da-eac9-4260-9f13-d6b821365e69", "sighting--b208b2bf-49b3-4eaa-8322-700eb59ba1a2", "sighting--03c643ba-0571-42ca-9377-2d544356608e", "sighting--9980cffb-df67-4cb8-a0e2-22cd6934327c", "sighting--bdbac6a8-231b-48b0-91dd-8f7a2e658d98", "sighting--a59ccccd-83ec-4002-8bca-1b07689875d7", "sighting--017c9c37-b659-4c25-bad1-7eff3ffa99c8", "sighting--717859a7-110c-40ea-8d2a-f50cafab8e23", "sighting--5e2d50df-cc37-44dd-a6c3-82423a251ae4", "sighting--7951c44b-63f5-4bbc-9929-0e5319584129", "sighting--b578cfcc-300b-47ae-9a72-a27d83fc1c73", "sighting--b084036b-d7b0-4667-96fe-50b1125524d7", "sighting--5d8b7fd2-8630-404b-80dd-175323014875", "sighting--32cc7b3a-545f-44e6-806d-0d847de780e5", "sighting--200c4020-54f2-454c-bb61-6d07a47abbad", "sighting--a2465354-95d3-4850-903d-380672e63628", "sighting--5633bbc4-abb5-4246-8ddc-3e45a9a0edac", "sighting--bedd23dc-8b1e-4c18-a773-02aa046cb8e6", "sighting--c994c5e6-5a0d-45b3-aaff-2729a83aeab6", "sighting--a601b0e3-7cbd-4b5f-9080-6074d09a61a5", "sighting--30775bc7-9453-4d44-8ab6-185b7296ae52", "sighting--b1c2dbe4-b352-4c4d-a899-53c483003e02", "sighting--97cc2ad8-7220-44c7-b16c-16c951c33f10", "sighting--ad68c9c9-22ff-48b1-a8ec-223019076d88", "sighting--4fad1068-9a0e-4069-b708-65bfb4ee4e1c", "sighting--0f48e1f9-f856-492e-a6e6-501de06b8e45", "sighting--fb48e3ed-7103-48ba-85e8-1a6beddb073f", "sighting--31c8b2b8-98c6-4aa4-b79c-65d9e10854f2", "sighting--777e1d35-699d-4e10-9e00-70ac9ecca76f", "sighting--c7732c65-4178-467e-bdb0-90095a97a9a8", "sighting--bf4d5e0a-e179-4552-9c5d-6eed15ca6d8a", "sighting--b8059738-091c-4758-bdfd-3dab7646647a", "sighting--2d1e1467-3bdd-4724-b6e7-a6f9fc1c48fd", "sighting--c10018b2-a516-4cb9-a3a3-7e20a7853b98", "sighting--7f7c684c-9b7e-4aba-880f-7e9fd7a2c5bd", "sighting--36149c2c-1042-4b6c-8da5-a04c12a9fc69", "sighting--5255aead-1826-4695-a11c-eecbc078ea2f", "sighting--b544cc81-6ce3-43a3-ba0b-8a2a2e3955fe", "sighting--45e386ce-9dd5-4fb6-ad20-40b9a30d530c", "sighting--37e79f84-dbc2-4e6e-8bd8-d9bc25ccdecc", "sighting--f0a3771d-7b17-4c69-89cf-db0c85f051ba", "sighting--846c8aa6-d64f-416d-9ef2-11a57f936461", "sighting--43804556-3ee5-48c4-a6f8-104113a08df7", "sighting--d2eecab0-c378-4c2b-8f04-dc03a10b0ed9", "sighting--4c891190-5898-4a65-af8f-46364e685aa5", "sighting--27668fbe-25e6-44ef-809b-4bc1ede120bb", "sighting--de352d2c-9939-453d-adaa-f083c7594ecd", "sighting--394ae116-519c-41c9-aab6-373259e63e96", "sighting--c1989528-5c82-40f3-b259-b6fc33035d88", "sighting--e55a96dd-864e-473c-8ccf-3c03bf19341c", "sighting--9c3f948d-5305-4d21-8571-59a3708e2477", "sighting--82983a94-4a55-4933-b572-7b6ad8ec4f7d", "sighting--666877b9-59d1-468a-9f7f-7d3ff7865711", "sighting--f7220b8b-28bd-411a-8d46-e04ac80ada93", "sighting--4b5dda66-5756-4dd4-8496-b773948a2b67", "sighting--e9b434ac-db05-413a-a5f2-1ecdbba1ff6c", "sighting--021b7314-0d00-47cd-abd2-ed15feaa6737", "sighting--f14136e4-4e26-421b-9aa7-8fa3ad25eea9", "sighting--633bda2a-fe3d-4f9a-9019-e3176bf95d47", "sighting--80bb33b6-476a-418a-bdd7-842035ca41f4", "sighting--b398a11b-3907-4424-a768-7b9e5e38b2ba", "sighting--658f8ddb-1f0c-4f20-905d-0097ecdf9705", "sighting--553750b0-4261-41e7-978a-6d5e42a6db15", "sighting--7245e83a-8d35-40d0-800d-7c28e5b57418", "sighting--4f5ee8b7-51e6-4190-aadf-05f7e237fe17", "sighting--7713e1c8-f6e6-492e-925a-507c2389fbc2", "sighting--8667fa1f-6f89-40a5-8405-5f176c832c38", "sighting--04491fd7-9142-44af-a8ea-9b136064edc6", "sighting--0ca38eeb-7afb-414a-8e08-77f93dfcfb7d", "sighting--431a41ee-9de0-4b5f-a245-5123ba254197", "sighting--de73434b-adf9-480e-ac03-1b5bf64f94f7", "sighting--28dd6a96-6dd3-4474-bcbe-94a00576ea6e", "sighting--7972bced-073f-4c0e-9774-0a3cf76d122b", "sighting--ece10077-cdab-4edf-98e6-f5c40d85fdb2", "sighting--5d0f9e2c-cb70-464c-b623-f4c5d3513b23", "sighting--b11a043e-d627-453f-8c1f-8c95016ba876", "sighting--f60a9604-4aa8-4922-9af2-559b72938aae", "sighting--09969c8f-c60f-4154-ac72-9e0968682b66", "sighting--7da20c75-e757-4c0d-a22d-f376e65e586d", "sighting--12d6c572-e7d0-4e9d-8ffd-ce345eabba68", "sighting--a7ca235c-25d7-44ce-890e-d353f7be0eb5", "sighting--f724e14b-23c8-4e80-9fb2-e157bb014f00", "sighting--0c75379f-f4c8-434d-89f1-5e1c7d8b3e6a", "sighting--4f403f88-e056-4534-b0ad-150a5191bf04", "sighting--a0bf9e61-73e0-4a28-bcc4-3d6058ec369d", "sighting--3be3708d-2ede-4e01-8497-792084177be0", "sighting--047b6510-d280-4b59-9bc9-2b61026970ff", "sighting--7f8d4aae-820c-41a3-a98e-e12333c08bbc", "sighting--f6d0d514-7418-49a7-85d3-c3e5fdc45398", "sighting--07d168d1-76e0-4a61-a00f-c15c6a07b86e", "sighting--c24bb5e5-a857-477f-a876-b94766ecf2d7", "sighting--a70f4a36-c85c-4e4d-b6fb-8be2dd9011da", "sighting--e47c9446-edfa-40f5-9b8c-7bf5fcf56ea9", "sighting--185b07c8-bd50-4fc4-8274-0761283d8f7f", "sighting--fe6fd16f-dcbb-45b2-a5c9-2c479c280ab0", "sighting--f9369d9f-25d0-4324-913d-b29585d12595", "sighting--c13a63f7-24e4-42d5-b09f-7a718661d60e", "sighting--8d76dcfa-ef41-4f4a-a127-57021a313134", "sighting--f025c73d-fc3f-475f-940c-e4ab44adb480", "sighting--ceb9ccfc-a5a9-4dc1-a1f9-6ed248e6f096", "sighting--3644a0e9-3684-4d11-b521-5f5d4c163c16", "sighting--8d852742-9990-4b6a-a272-366f7ea0dc3b", "sighting--a9ea03e9-7a97-47bd-befb-b902c0cbb902", "sighting--edc31aaa-54dd-418b-b0a4-9b6baffd94b9", "sighting--6291776a-8a03-4eb1-9445-395c54b54b61", "sighting--0aa3dfee-7860-423e-891a-4fa1e2c434f9", "sighting--f8c23b05-0bee-4053-9671-57726bcca37a", "sighting--268eb438-7b99-45cf-bf96-04c85059ff00", "sighting--ef8c4d95-9bd3-47e8-b96d-189f2b09f318", "sighting--4ec75498-b155-4238-952c-5c89fab0ed62", "sighting--ce420d1f-b6e6-4247-979d-a042afcacfe3", "sighting--e4466522-0b1d-4e13-91ba-9a107595d841", "sighting--5842214a-6fc8-4523-be7f-e0b0179f63cc", "sighting--704bd39d-ccbd-42f8-bdd7-b7757d643304", "sighting--52ed8ca1-7993-4afa-bf79-be2c6c2e4d48", "sighting--b98d40b2-50b4-4d1a-8dc3-a38b6169b060", "sighting--759c15a7-d9c3-4038-8218-46e35756fadc", "sighting--3b73cd03-d2d4-4aa9-a6c1-dee5711d89d2", "sighting--6dbad363-1402-4371-afe0-db4f4d33a76b", "sighting--84139117-2a7a-4650-811d-ee45624c95e9", "sighting--5ec7703b-f5b1-4926-8e0a-9cb70a5d0517", "sighting--ae567daf-0214-4512-8c27-d8b0ca09891e", "sighting--632c2fac-42dc-452a-bd6c-c82543d908af", "sighting--ec05c45a-eec5-408f-8a92-c4174d47c618", "sighting--2e294b8e-52c4-4d2b-bab7-4c692fbd7055", "sighting--de4cee2f-aac6-49e1-a652-c60ba4f2691d", "sighting--9dbb7f35-7f40-45a4-8ac8-f720753691c9", "sighting--ef88a784-8b81-4055-9f0e-7740d0a9cb2d", "sighting--600c8e1b-900d-43fa-97a7-4759c52874d2", "sighting--2517e200-9709-40d8-aa24-8e5955f475ac", "sighting--563ea8f4-80ed-4bd9-807a-80babdd0d51d", "sighting--335fbc8c-e6d3-4c27-8df0-25311b67fb4a", "sighting--614e720b-2d69-458d-83e4-f576cb9ef1f8", "sighting--5b3ba287-3eb1-432f-afeb-42030c104e63", "sighting--1c066dba-bfa9-46db-833c-65a53c107b41", "sighting--ba496251-5893-4e51-9806-b370e0f09a3b", "sighting--3263481b-85f1-4154-b5c9-a93b0bddee18", "sighting--401ace56-0925-4efc-a971-26883762d3f6", "sighting--1fd32547-6997-498f-bbcd-87d1da275cc3", "sighting--1f082501-5c32-4263-90bb-d56fd455c97a", "sighting--32025df0-34bf-43e4-b18b-1f25b968cd68", "sighting--6f0df66a-dbb9-41f0-86f2-0cded3a8bb41", "sighting--4e8fd21d-6509-493d-ba04-d69115d80e0d", "sighting--2bf6d75c-5eda-4e0f-bc1d-8f7fedd5cfc0", "sighting--a3c92945-2233-4e8d-83c5-bd9e53e70e96", "sighting--633d12df-f082-4021-b01e-8aad9d4b6e0d", "sighting--5e4c5c51-6ce4-42fe-b66b-04288e340a08", "sighting--9a7d1316-1688-4803-989c-ec5beef4ef8f", "sighting--ae8cf68a-d927-4bb1-9f51-6cf2c63ac974", "sighting--4547308c-8a68-4023-b417-885c7165f08c", "sighting--7af60acf-20e9-4a97-b36f-d65f656fa273", "sighting--1b019d47-65ac-43f0-9844-d5a467d3cf99", "sighting--b0b39972-95a8-4b42-ba6a-292a5b37e77d", "sighting--255019b7-69a8-4974-958e-52d8286b8bf2", "sighting--caf9db10-3d2a-4390-8338-972b28a6fa39", "sighting--468699be-f6a4-47a8-91bc-d30c993dcdbd", "sighting--6b4c55c6-3df3-45dc-aaef-6a77e8a94710", "sighting--0c42440d-fcef-40f2-bd61-b8379c6fd9ff", "sighting--81e36763-539d-48ee-8466-f5cb4322014d", "sighting--2b1d0343-6fb9-44e1-b482-e6676c09bac4", "sighting--be2136a4-e1df-4107-a7c8-88b82f87ae05", "sighting--3bc6ebf9-78ae-462f-8752-a36edad483a1", "sighting--fcd7e61f-b660-44e9-90f3-946d1216f556", "sighting--adb8feee-66bb-4725-b8c8-e99a417bd2c1", "sighting--c391f3c6-df0a-4274-a257-0f98d38a33f3", "sighting--bc0526dd-b93d-4a00-ba10-1e2d6e016525", "sighting--6979ca23-d0f7-4ff7-8691-a0ce338e63e2", "sighting--9b992ed8-bdb2-491d-a0d8-51194f8308ed", "sighting--9e0e7047-9240-41d7-8432-f9cd3bbd1c8c", "sighting--1c5698cd-a687-4801-9295-0cc087f09997", "sighting--f19c640d-9bf7-4a24-b0c8-cca006b672f6", "sighting--baaf5526-4e08-4664-834e-f49ea9bd439a", "sighting--fee4d313-983c-46e7-acd6-599c9949cb4a", "sighting--dbc4a8ea-2797-427c-b62b-544715ef5f3a", "sighting--4cd9fca1-2062-4cab-bd59-8263014e5e36", "sighting--2b6b115b-ceab-46d2-aeff-367e848ca001", "sighting--f908331b-9a0a-41a7-b345-fe6a06ffe837", "sighting--03994414-e9df-4c5c-9012-1dbc90edf588", "sighting--46333580-2e29-47fc-89e7-5f294d5dcd87", "sighting--cc55a145-c2fb-4572-a2d2-9ad7f4444983", "sighting--791d2c35-93e1-4006-b4c7-b6f6b37ec665", "sighting--068314a5-238e-470f-8521-68d1a34cf77a", "sighting--8b7cc78f-8489-4fff-af96-ab9aeff7337b", "sighting--fdb6a834-bfdc-43d2-9000-97d54f979a2a", "sighting--092cf474-cf63-4e5d-a44d-2107d22fb577", "sighting--29d8115d-73c8-42ba-8001-79d24a19da2c", "sighting--d87d9576-2554-4e8d-83e2-90c2d095d94a", "sighting--cf8b5e86-648b-4ae0-9991-a88934d5bc79", "sighting--6ef97446-67a2-4207-bec8-68d602cff4ef", "sighting--aff34fa0-97a5-47f1-9487-5eb7c976b6a0", "sighting--450247ce-782d-49cc-bda0-d17aba45935d", "sighting--f6e5857c-f9c9-4985-8d76-1f4ffa7025ac", "sighting--0ea496b7-7d3c-4363-84cc-bf6488aaec21", "sighting--ea744a7b-452b-4a59-b325-69ea94e22124", "sighting--f2448b7b-ada4-41c2-83d0-33db8f0bbf8c", "sighting--728ee644-e0cb-4555-9d7b-0f042394f3de", "sighting--dff850f8-69a0-4efe-8ec2-433df780573a", "sighting--9cb0cd3b-4a3b-4390-8336-4d3329293a60", "sighting--f8719ab4-2e04-417b-adfd-436db8b5f100", "sighting--ab7cfbbd-480c-4837-9a80-12772ef635b4", "sighting--b62b1e80-95fe-4ed6-8132-1038b044ce99", "sighting--54630270-16a9-42fa-8009-10c8e075ddf8", "sighting--b3948acc-9dd6-4406-8e48-67ebde249cf6", "sighting--1eb5ed45-31a6-443b-9fb0-1661c17f920b", "sighting--31c2f1ee-9b7e-4c01-bd33-a7ae1d2dd274", "sighting--9da9245d-4a97-4cfc-8590-cc487da6294b", "sighting--5fade542-6d57-4180-ba92-e9556c05dac0", "sighting--f0b9701c-b0ca-4d9a-afb2-f0e39044a4ad", "sighting--f0fe77ea-2196-4dba-bd53-2d7d8e9e4861", "sighting--bf797d15-bd45-43ff-a5e5-32cc74da5822", "sighting--9de11ebb-28de-4312-83e2-0fb934e27e54", "sighting--0f14ea45-f098-473d-9a0c-1575e803fc20", "sighting--d16ef693-d180-48ca-b0a2-454693673e26", "sighting--26318835-731d-492d-91e7-ff264587b749", "sighting--f437b354-8cfd-4a02-8a70-12af8c557dd1", "sighting--3d8c14f9-6976-4242-90c6-fa724366d5c6", "sighting--bfc24049-db90-4955-8b0c-b215744b5341", "sighting--943f4d31-f557-4283-a984-6aef0803ed19", "sighting--49cbdc6f-42e6-4410-b884-6958fe725266", "sighting--7c32e620-7059-4fb7-83e4-022413f03bfa", "sighting--31f2e63f-ed83-4598-a706-f37c77353d20", "sighting--891e040b-febb-4000-804a-8a9a7b6d8569", "sighting--43f225d4-a896-422d-a40f-a301dbeeaff2", "sighting--37ff9a2d-121a-41d1-8391-77672ba92bf5", "sighting--09199d37-8c10-4e44-8f2c-f5381c9ee47a", "sighting--b813f67b-b2e7-4df3-a560-5f011ee64f69", "sighting--9876dcce-d4c9-4c23-ad31-00b76c164c58", "sighting--68a59cb7-9db2-4319-9519-2e9aeb41272a", "sighting--1d3922b1-dfab-4a2e-9ae4-0605c0b52639", "sighting--7319ac83-b8ed-4237-a15c-3b6dab4baa86", "sighting--c3ea6c2e-597d-4041-8554-5312ad79f43f", "sighting--42a8661d-c960-459c-84c0-002f3de7de06", "sighting--236c20d2-cd92-49a6-9071-de9d19faa754", "sighting--f9203a7a-d4c8-4dae-927d-16217ea32ac7", "sighting--fcb1791b-1d39-42d9-8dc1-82361a685a8c", "sighting--404a9b6a-7d2a-414a-a54b-cbf68868dccb", "sighting--52f37d11-4270-45e6-a146-6041c99f9b8c", "sighting--bb0ba130-f3ef-4d9c-933d-0d60fd502d39", "sighting--d576e48d-d7e6-4c5a-b850-0ade8aa1cbfe", "sighting--a4b09a3b-772b-4c28-b8f0-cc15b1e64af5", "sighting--9ed20cdf-f35d-4636-aac0-ecca3f3cfd35", "sighting--0428c24d-eb15-4f92-b6a6-73bca2cbc99c", "sighting--a65f1ae8-1eef-4798-94d8-625862a055e2", "sighting--a18e09e7-d237-438e-b894-d4814223f9a4", "sighting--e7f9d4a0-99f3-41b9-8c4b-98e5ff01fb84", "sighting--35cdc171-66c9-46aa-8d49-1c1899887f10", "sighting--81898d8f-db00-45ec-bb1b-c47f687aa6ea", "sighting--613cb501-19b0-4ac5-b75a-261383c43e2d", "sighting--fe89a2ec-b2bf-4905-8bc7-bd4555967973", "sighting--7f537787-fb47-48ad-9370-708b18e715c2", "sighting--75db94cd-d8a2-475c-a672-aebae02a6a88", "sighting--213c1a78-7b79-46a0-8754-d265df3a8faa", "sighting--e6b0fbe0-86f7-4a01-a581-381ac0f1704d", "sighting--1b212861-cb5f-41f7-bec5-efbfd32eba04", "sighting--101635f2-ddcd-4e01-86c6-0ddd74cbb6b1", "sighting--eb9d2b0b-9a3b-4785-a17e-7fc8073d5aa4", "sighting--bd8c64f6-ff32-4905-995b-178105badc1e", "sighting--43024001-889e-4736-8bd8-f1438840df95", "sighting--ce2514f1-4ba9-46b5-bfbf-937cbef9ab6a", "sighting--5d2a9c1f-ec2d-4515-88c0-d48fdcbabc74", "sighting--b28b3c3f-9c20-453d-a7e5-f847ce470e08", "sighting--7ec91515-640c-4cce-a01f-63d1391da407", "sighting--6597213e-882f-47ee-950f-4988869e95a1", "sighting--268daaac-b276-4285-81aa-4735c9345a85", "sighting--67eb24c8-4a8a-4af3-b20f-b5de353eb271", "sighting--c21a65f1-344c-4827-b70a-ba5249dced85", "sighting--1473fa92-79c5-4b59-82ca-c297c70a7684", "sighting--dce7279b-99e7-4a56-9a4d-ca11ae11df2f", "sighting--ed175b26-6ced-444b-bf2e-fcf5280c717a", "sighting--0af47471-a990-4dcf-a568-865e7b7107c6", "sighting--b2e29b60-a01e-489e-b277-2b8990e83733", "sighting--1eb73492-7246-48bb-aab0-36190b45073d", "sighting--4c053318-6351-4a79-b0dc-8887e2ad4517", "sighting--cf33b977-7b73-43b5-8085-99a40f2d0025", "sighting--4f2d112a-d7d5-4b2c-8d66-1a4af16bd47b", "sighting--e013af22-99bd-4ae4-bd17-60659e17f2cc", "sighting--83f1728f-0d55-472f-88aa-73bce86ca911", "sighting--41544f79-71c9-4d11-99eb-380adb0f8014", "sighting--0d2f98b5-4169-43af-863e-0a5e13901ca0", "sighting--1d7dcdda-e69f-4882-90da-40c5a90b172a", "sighting--1b4caefa-bd11-455d-a0e2-b5137d24eccb", "sighting--cd229b7d-3c8c-40f9-95c3-71706d31fa18", "sighting--53e45bbf-a5ac-4d27-9949-ff1c19bd24e5", "sighting--6af8d650-5d82-4bc0-a19f-e821766e3b14", "sighting--6e3990be-f132-450a-8735-fe72c008343e", "sighting--726aefde-4abb-4909-b4cc-9afc4a7765ed", "sighting--d45f63f4-99f8-4c38-87f5-0d019e1e9d2f", "sighting--c6602881-d6b2-4df7-ac06-53f4d6463c5a", "sighting--b42ce050-97a2-419c-b0c4-27afd3d1744d", "sighting--a8447494-f3fd-497b-986e-b9cae3ea1918", "sighting--ab9cbb52-11cd-4d8d-88ba-5968b3ce3859", "sighting--270783fb-dbde-41b9-81c9-fd0863afed43", "sighting--443513c4-d864-40ba-9b12-0482edc79c61", "sighting--b35f490a-fea7-4cd5-a8ed-d2a94216daec", "sighting--f3094f43-e332-4068-b160-60781de7a471", "sighting--107d3b46-c23c-4cbb-87cc-6ebdb24181cb", "sighting--9d437112-563a-4077-b26e-64bd4e34ce36", "sighting--3c3c4fb9-0204-4683-8d99-84b71644e3a2", "sighting--60abfa41-83ce-4707-a7a9-39d516319ce7", "sighting--94f69fad-3f02-4e7c-8b72-c1cb27b58b1c", "sighting--c3a975f5-129e-4bcb-b45d-755cddcab49e", "sighting--e317e6ff-ccd7-4493-80a3-cfde4c7d2560", "sighting--ac732c14-28dc-4042-873b-a429b2b385c1", "sighting--cf1e2c87-b082-44c3-bd01-1ec05cd55efc", "sighting--eb966a3a-cb59-4172-b9e1-ab638a0d05bb", "sighting--c83331c6-ef5e-4b6e-ba2d-1e5c1e0e8b20", "sighting--1fc21261-1457-42c7-8a37-0f84fc248491", "sighting--6b7d4ad7-51fc-47e0-a368-acff5afb9dcc", "sighting--393540c1-c00b-43ab-9ea0-4406f16f521f", "sighting--daf388e1-2f62-4e83-bb8f-da8319eb0397", "sighting--ab018561-882c-41fb-96e0-ca4915c13440", "sighting--e0dd1c75-703d-4531-bb89-577d22ef0849", "sighting--3173e241-8310-4174-9468-df88f2c0b81c", "sighting--02803158-e59b-461a-9a06-4e9b9ca48abd", "sighting--42edf12b-b888-49fa-a949-94cd020f588e", "sighting--a95dbd98-965e-4b6e-a54a-397dc7acd283", "sighting--e3c2b062-f01d-40a9-93a1-1d93c1047d18", "sighting--5dd210d4-2f82-46f7-bec6-05d23354b1e4", "sighting--f74eede8-6c38-48ae-90dc-a82654d7c539", "sighting--36d29de6-0b54-4637-b552-2f588248e0e8", "sighting--45a6410e-bfcb-4d99-93bd-9a6fce2a9d60", "sighting--d353647c-0f4e-4f7e-b7a7-6c2bf8975830", "sighting--49c67b76-efb7-4f53-a0e3-e22d543a3e05", "sighting--8c272f1e-fea6-416e-9b22-577ce556988a", "sighting--079dc8de-3b00-4d90-b0dc-45df2f46396f", "sighting--e39935b2-aac8-4579-8cea-981a82f7fe06", "sighting--c8e32603-c5ef-42ed-99ec-004741b1a380", "sighting--831c9e65-65ca-4cfe-a26d-d04c947170c7", "sighting--cf0f3a78-0437-4647-8e94-de945272443f", "sighting--8fb7989b-a524-4842-87d9-f4e813a3f85f", "sighting--cce6693a-150a-4be4-815c-cd29e3b44ab3", "sighting--23ea43e2-9f2e-4f5a-a09d-495162329ef8", "sighting--cdedda12-2896-4648-8ab3-3967c9de1d18", "sighting--574cfc5b-8fad-4490-a9b0-25ffe177c21b", "sighting--c6ad284f-577e-464d-bfa2-2d717a088c4e", "sighting--f736501f-bedf-466a-8c4e-a913ae9d4082", "sighting--2e93f221-62a9-4147-8771-69da75f14a3c", "sighting--0575972d-c001-4154-befc-8436e2a5b4e9", "sighting--af6c5037-1566-4eb8-bf0e-923fcae87154", "sighting--0e086ee8-9f14-4575-82f4-0e76b56e8274", "sighting--7085d5f1-7bd0-48b5-826d-1a96470c7e1f", "sighting--e152c910-8019-4ab7-9161-dd51c7edb651", "sighting--1fb606f9-b702-4a7e-bb03-afdbad526c66", "sighting--2915e3e4-35d8-49ba-aa5b-1a5200a70c54", "sighting--5e45c140-db75-42d4-a52e-9128418e809f", "sighting--0ec2d1e9-628d-49a4-8d0c-267d216ee9ed", "sighting--4d03377a-4aaf-4d19-9e21-f696d08c8bb5", "sighting--138631bd-ab0f-48f3-8450-0ca82256ca7c", "sighting--e5e7ec74-4468-472f-8c61-c657b6b68561", "sighting--cc846d94-74a8-428f-8aaa-ccdd4cb38a5a", "sighting--884a53d9-92f0-4518-911a-24a55a1bd081", "sighting--9ccc741a-f643-4700-baa6-650894e5e18e", "sighting--c945f14b-d04b-42d5-b3e3-52ba09393b1e", "sighting--b316d64e-048a-4eac-a2a2-120e3735f191", "sighting--fa7de5ea-e8e2-4e26-8f2d-5475f0b5bc20", "sighting--898e520f-b30f-4501-9ac0-5dafee8067fa", "sighting--1f446b89-ceb5-4291-9b95-66b79e349102", "sighting--68c88d4f-8cd2-402a-90b9-084a74ffcb2a", "sighting--43368172-d621-4d2b-8b1c-6137f421e2f8", "sighting--af2cae23-4db2-4ce0-8355-a185c1ce235f", "sighting--af7b9804-0688-4048-bbed-8a8050191134", "sighting--43843871-5b8d-4250-91bd-f1c35530a31e", "sighting--0f03119b-531a-4927-913e-2dad88c820fe", "sighting--8091dc38-9bd6-4200-b4ae-24390695c1ab", "sighting--274c4304-0abd-48e5-b913-325f0c9086cd", "sighting--a5484ee3-b18b-407a-a82d-57194b2daaf4", "sighting--3697401f-fd9a-4eae-8760-2b03a48afa62", "sighting--2c8ed928-bc07-4749-bb70-91d0ffcc8146", "sighting--d8b458c7-6591-400d-854d-e3aa206a1ca9", "sighting--b09cc1ad-1a14-440b-a5d7-b7540fb04dcf", "sighting--5a80d893-d1b2-4f23-881f-1af5b03ec23d", "sighting--5a73f31c-992e-47b3-87f9-0c1bbc7f5168", "sighting--1ea76340-3b56-4106-8a48-837fcfa4074f", "sighting--908b7017-b0b0-43ca-9870-ebcf3e3afbb9", "sighting--b93c9a24-7c81-432c-921b-65973ae41dff", "sighting--5615b457-8614-403a-ae70-edb573565e09", "sighting--9b9a9f04-a973-45c8-8e06-241569577e6a", "sighting--4a9cdfe8-7487-4c19-8f11-5ae6ba9ba883", "sighting--acccbe46-7b8b-4e04-89b4-420954095108", "sighting--ccc920e6-d906-4dbc-9dab-915b5b5dd49b", "sighting--228340f2-008c-4409-8dad-f6f45bdb8bfc", "sighting--58dd572c-7bf3-4c3e-8fd9-c12fdc334156", "sighting--e619717a-127c-4901-9dff-c194854f7b1e", "sighting--95d6ae9e-b60d-4a88-9d53-fe770a4fa0dd", "sighting--386b6a63-ee4a-4614-85b2-94dc3222a216", "sighting--36efc1d3-462e-47d8-bdf2-e522acfa2314", "sighting--1791769d-e832-4171-ac82-a97abe131dab", "sighting--83e00009-fd7d-4647-9313-281e06e124cf", "sighting--58677ea3-f19d-4523-b76c-b0d14844221f", "sighting--13262e9f-8750-45c1-9075-b558d2518709", "sighting--249cb5e4-0beb-41a1-9afe-a724ccf40422", "sighting--7c577c32-310b-4539-85a5-0a6cf45771e0", "sighting--e46e744c-62e0-4419-ad00-ceed8809a6ad", "sighting--42afd457-6bb5-4f97-8386-8bdec7f30e3e", "sighting--c047500b-e804-47be-87b8-df6405f24ce4", "sighting--0371d352-567d-46d7-b59f-97d301251c94", "sighting--56b8cf2b-5329-4eaf-a325-6dfa58aabc52", "sighting--cecee1f2-198a-4f50-a863-c35fdb6fe4b6", "sighting--e0cb1737-44eb-42cb-bc96-008547c2292f", "sighting--8c004141-9ed8-45b8-92d3-a72a31cfd429", "sighting--0a93614d-86e5-4550-ba39-b590d70da9bc", "sighting--0cfb791c-7253-4fbb-9fb0-9df89a039d69", "sighting--35d9b95e-c7e7-45e3-b6c4-2766047b722c", "sighting--a4b301db-c463-4ffa-9f45-204c89b6d9fa", "sighting--250b3d5a-b3a8-41f1-a7af-852dec4b9a98", "sighting--cabab4b7-00ee-4c7d-8153-82550b52627a", "sighting--1db5b443-103d-4726-83a4-f927719a237e", "sighting--07f83c8e-f86c-4545-808e-5fe1a3156b70", "sighting--34afd442-e518-4841-914d-5e4ed8c023bc", "sighting--615a37ee-ead6-4c8d-8b73-9de732de617c", "sighting--1d8b1def-34cd-4e47-a869-c6ee27862b37", "sighting--374bf150-ac62-4e8e-94ea-c07558f24bd6", "sighting--cfffc7a0-537f-48fa-bb83-eb79bc1f5bd5", "sighting--bf6a7af4-88d0-4bb3-aa77-b374c87f6df2", "sighting--53ba77e5-d440-496f-b27e-93ac83e24458", "sighting--4260b4a4-02b4-4fc3-924f-6e2aa5aca419", "sighting--9913fa79-83df-4e0d-9611-12f263085d8d", "sighting--02762378-f74e-4d58-8697-f438314a6b4f", "sighting--6e7f02d0-997d-42cc-b6b6-4ac4d07cccdb", "sighting--95141b23-c961-4a37-9776-77849fc23a2c", "sighting--6eb89a3f-0c35-4e31-a0ab-64e0fee5dd95", "sighting--11daa018-fedc-4bda-9b88-751ad0c4686d", "sighting--8e9ebed0-989f-4373-8bf5-fee19bba676c", "sighting--06d447ac-3c29-40dd-b8b2-23256592b188", "sighting--588940bc-b55b-466f-ba64-e4b7ec4063a1", "sighting--beb7028a-2bfb-47f7-81a6-711810d14b88", "sighting--152144f2-08e6-43aa-a19e-fa045eac5e18", "sighting--b2c968d7-7d6f-4bb9-8170-272da999b118", "sighting--d4c0a481-1c95-4e47-a6fe-41fd76333553", "sighting--5e62f8f7-09cc-4818-88e8-d27b89027d27", "sighting--71caf275-08b0-40bd-9073-976ff3bc6ee6", "sighting--b04aacff-f42d-4c8d-bde9-8dd2b793fa5f", "sighting--712e92f8-45a1-4fda-aa45-9d09a3423e29", "sighting--adea5a50-fd56-426a-b561-9e10e644832b", "sighting--c3812fa4-3403-4697-ae7c-78b3ab84ba90", "sighting--cc440dd9-dc3a-464d-9990-21c13acf16a3", "sighting--1f19accc-df31-4529-ad22-de5615c54672", "sighting--36d3e98b-45cf-49c7-956c-76ea9585e691", "sighting--041ff865-5b92-407e-bddd-bfdc9c7a38e3", "sighting--99f0dd6f-a05e-49dc-a857-ce0eb302ec59", "sighting--e9d0a8b4-8c11-44f6-a4ca-13bb2b25c312", "sighting--708a40fb-86ec-4a21-81e9-38fd36ed7799", "sighting--5942b8fa-27cf-4f31-8d6e-0a3d7d948ed8", "sighting--19f6f0f0-7986-494f-a7d4-87cc7dccf011", "sighting--6a72f218-60c8-4f30-a130-46357c209d65", "sighting--c839a244-be4a-43c1-b9e6-f761ee285d43", "sighting--ab8dbd8a-a404-4f0e-98ad-130afd4468d8", "sighting--219a9099-fefb-4e1e-acd2-0df46ce2d6a6", "sighting--99ef498b-fc45-42bf-97da-a969f6038b62", "sighting--3a45c655-e79d-454e-a9e0-69dd4533ca46", "sighting--eee1d25f-4daa-4e14-9d61-b85eaccb1df4", "sighting--c419d240-c330-43a5-8495-0eeabfdb8f30", "sighting--012c9fd8-3c91-44df-8044-60c0f7ec1928", "sighting--eda26b9c-0c59-43bc-827c-30777ec9a88d", "sighting--65ff378d-5643-4c74-8c5e-e79a81dc1af1", "sighting--c52199d7-0996-4ccd-b74a-59c555c1ac07", "sighting--79338f20-798b-4d8b-9791-8d4f3b5a4ccb", "sighting--d6a014e0-7c6f-48bb-8a91-94f78cf052ee", "sighting--87d9f9c6-a001-4a7d-9b92-e8ebe024298a", "sighting--fe6f31a2-4eac-4770-983a-efd1be57d4f5", "sighting--20c7aea6-b102-4267-9736-885acbe470e8", "sighting--b3d863f3-0462-43c9-bc98-27f8a770c257", "sighting--c48283cd-6120-4213-9fa6-32a2d2ddf2be", "sighting--58198adb-014f-47be-b099-414d3f977a3c", "sighting--3d40ee1e-711a-47da-9751-8ccd282387c0", "sighting--90961547-a087-4913-9195-104f30fc9f0d", "sighting--246c86f9-0690-4753-bfae-72159878b739", "sighting--e1d542bf-a0e3-4dbb-8d08-db1aa51b09bf", "sighting--6bd57776-d199-4898-938f-df4fa85ffa0d", "sighting--3f814e1c-99a4-4245-8e44-502593dab97d", "sighting--a9ae79de-0f41-44a8-8d24-7bb099e795b7", "sighting--0a52dee3-575e-4de1-af22-bcadd7bcb9ef", "sighting--8b749872-87d0-4952-b35f-0da199382792", "sighting--2ba3e886-d5a7-4f40-904f-f833d5ca75d2", "sighting--fbedb19b-f960-4f66-acef-fcc816fb9195", "sighting--9f9bb406-6140-4f52-8667-245b827e5ceb", "sighting--8e3190e8-d69e-423c-835d-8deb772176ca", "sighting--af415f1d-be0a-446b-8101-a358211bd007", "sighting--22e6cf87-db2a-4ded-bfa4-802eab938641", "sighting--dd46fb8b-08b0-4355-9941-5c45c57260c8", "sighting--10d9d756-7f2a-434a-850c-2c233951e532", "sighting--38ab0178-2dee-48d4-a55d-aa6155a3ddd6", "sighting--12050868-df15-4ee8-b34c-9f46801bd86b", "sighting--93285f24-eaf6-407f-933f-19cc552077be", "sighting--ee9c7893-6349-4876-8e2a-2412ce1bb23e", "sighting--d6e67d88-61e7-4053-b35c-a7c03834f2c3", "sighting--d02aa0a4-6adb-46de-b1f9-99be35ca36d0", "sighting--f1ae9375-e4c3-4725-90b8-3cae964cc2bd", "sighting--5add3a85-6a96-4ac1-ade8-acde2bff3afa", "sighting--c96c2d28-3336-4bd9-93dd-7e6eaab612a2", "sighting--5a77b67b-58a9-4763-b2c5-a0cc88b7c7d9", "sighting--ab9cda80-b054-4821-85bb-cd7d0d72f6a9", "sighting--3a57da04-d0f1-4208-8de9-5da129e54086", "sighting--988ccbc8-8c0a-471a-88a1-0942f769dd64", "sighting--015d2096-55ae-4f58-b7e6-6386642bcbc9", "sighting--dcdc329d-fa51-4fc8-963a-730037d97217", "sighting--f02d33aa-59b0-4339-aa26-952386560a89", "sighting--eecc0d95-f243-4c7e-bc22-6f005834232d", "sighting--9dbc0a65-88da-480c-b769-8207b43573da", "sighting--0bf8ccf6-5fe6-45fc-8d06-af19b9af42e9", "sighting--d39504e1-1175-4df1-9d97-cf665e10e005", "sighting--9199a4bc-dab1-40a8-8a07-a200ca73d7b3", "sighting--da37d9de-2bbe-40b5-b73f-c3b2823cfa9b", "sighting--4bfa729b-4519-4df1-9d56-b0436d52fd91", "sighting--e8c8d46e-12bf-43e4-a74c-9cecc5905f84", "sighting--e4bc8d89-d7a7-409e-8683-b85acff839e6", "sighting--f4ce9299-f23a-4f9e-8f1d-973f75a64243", "sighting--50b4b298-f91e-426b-a0b2-efab27bc1d6c", "sighting--cbb818d0-e70b-4701-b68d-693e41a252da", "sighting--b3f47b98-f2f8-405d-bde2-567ae74e16df", "sighting--08d82611-25c1-4f90-9f20-2c5155634916", "sighting--1c610ecb-760d-469c-b7d5-1d821198ce3d", "sighting--e7b7d1aa-9783-4f81-a55b-84c6065caa25", "sighting--5d446d9d-ad11-40fb-b2ff-c8979feada55", "sighting--59021ecb-f6d7-46c3-963a-fdd08cbbcb64", "sighting--8973ee2f-e722-4ba1-8507-bf0984c0a503", "sighting--49182228-5aa7-4201-bf43-5f81934b73e2", "sighting--98bbda52-2670-49fc-81de-310f196561ff", "sighting--7b367fd5-724c-4790-a782-f511de936e20", "sighting--f27c1220-57cd-4dcb-9310-bc48fc7d38fd", "sighting--7ea6ee8e-cada-445e-ad81-79d452d9148a", "sighting--82107d7b-34ae-452a-ab8b-336795b4e0e9", "sighting--bfcecd56-fc27-4985-bf86-cecc4fd9bcd6", "sighting--2a9a6245-624b-4ffe-b054-8f9bfb3811cf", "sighting--6a424518-699e-4810-adc2-7f5329abc9d1", "sighting--ff60dcb9-2712-4cf0-99e7-fc1da2e5c689", "sighting--5907659d-fb98-4da5-968e-da85e38f251d", "sighting--8f01134c-672b-4405-ad69-180fe9eb831e", "sighting--a5b49efb-653b-4b2f-865b-e6ce346766af", "sighting--378553cb-22d7-45e6-8eb3-397a4cfe4f6b", "sighting--79625a95-1c8c-4be5-b1d3-a42c9eb95106", "sighting--46a079be-17dd-4507-b8b7-bf4b7f129906", "sighting--2b56b71d-e8e7-433e-b0d2-284146f49802", "sighting--86e69c96-1627-42ef-9371-e753431b4f28", "sighting--532cdbdc-0e9d-4c94-b46e-89a61c934eb7", "sighting--15ece391-b2c2-42a4-a3c7-e67eeafeff0e", "sighting--79affcad-88da-41f6-adcc-35574771c9d9", "sighting--97c1012c-a098-47f5-992e-45e0680683ed", "sighting--c8e63317-843c-44ff-a6e7-e5f435e56beb", "sighting--4cdb06e3-e498-4fa9-a007-a46274ff7eb7", "sighting--56ec0ee0-347c-4669-809f-1f3f1d8ec6bd", "sighting--586e7148-275e-4a51-9b40-a759a8b3fbdb", "sighting--c5a31ea2-c448-473c-99aa-769f5978ec49", "sighting--d4e9ef90-e0b3-46ed-b1fe-cada139d45d8", "sighting--652d60f1-e60e-4971-9b7f-927959bcbe2d", "sighting--61651f8c-3fa4-4aa9-ab4c-7c97971d0010", "sighting--5ffcdd0b-7476-4122-aab2-22723fdf19fa", "sighting--0ddcc169-a35b-466e-99d6-1070421871ab", "sighting--d76287de-050a-46c0-b617-342ff4880bd9", "sighting--0fd8744f-19da-4530-bb32-f09409213c44", "sighting--59ca1cd5-5ccf-470d-b78f-b6805d40559f", "sighting--4ce93f09-e458-49d9-b682-87f08aa56b6c", "sighting--7f372d82-37f7-40dc-8820-2dee105479f7", "sighting--f4f15e19-8ca9-44af-b8ab-774986297169", "sighting--4b6b4602-abf6-442f-96e8-1ce824238766", "sighting--a283ed34-80d9-4506-a08f-fd139382444c", "sighting--057b01ff-7313-430a-b97d-eddf7afa64d4", "sighting--87edb755-4134-420b-a3ce-98921277490c", "sighting--d57efe82-ab10-4c10-8aa0-2def7cd2768f", "sighting--24af2eb5-6fa4-46b8-a767-18440347387d", "sighting--3da661c7-e77e-4510-af7e-5e48440ee934", "sighting--04a74e68-1b79-4838-9b56-f7a625044c1a", "sighting--6e55c17d-e44c-4c17-9687-b2a2027caccd", "sighting--58174f4e-8d9f-4117-a468-70e2e531fb9a", "sighting--fca162b2-0ddd-4b14-adad-4e6aa42cb16b", "sighting--c532e9c3-13fd-4143-8a52-3bbfa62500b2", "sighting--fa55aec0-5809-4a19-a59a-33825a946b10", "sighting--0ed621a3-985e-4d2b-ba3e-24d6b81d6e5c", "sighting--7068e428-c7b2-4a73-a025-bdb96b0ee343", "sighting--66846a75-4102-468a-97f2-68071d0af456", "sighting--46da83b0-8dcd-4403-bd0e-ff41d8f18498", "sighting--31715e7c-7e68-40a1-b4af-ed88643cd838", "sighting--02408b9f-d9d0-4ce5-8323-ac4e5a73b1ff", "sighting--78c7c369-58f9-4acf-806c-c477d88612dd", "sighting--baf2c789-ef3a-4652-9f93-7aaf6d4a8902", "sighting--dc50802c-a123-4071-8aca-f35cf6d74539", "sighting--dd1a4b34-8fbd-4a19-8bfb-c00c5f05d779", "sighting--b12843b0-4a89-4857-bbf6-bfd960b7735f", "sighting--31a66e6e-f609-4723-8ac9-3d22f1238f8e", "sighting--20e9976b-5059-4e9f-9a8d-ab9aad0e93e8", "sighting--9652670f-7015-46ef-b656-5ea63f9e9ecc", "sighting--b335fbd3-a6b7-4d68-844b-b9a50932d6af", "sighting--08df6477-3eae-4df8-bc5d-1eb252316906", "sighting--f83713fd-140b-4018-9fb1-355d0ff37642", "sighting--c046490d-84d5-4aa1-996a-0d224e6483a0", "sighting--bd1f5d99-90d6-408d-9387-78d4d4220e93", "sighting--c59537b1-d8f0-4e51-8f81-73db75828e95", "sighting--fa9219ca-4744-4aa3-bdfd-0924420487e7", "sighting--cb7561f5-10d3-43a8-9b78-dd8e7434272e", "sighting--a205dec3-28de-43d4-ac09-f05bb2e92982", "sighting--4d1aa42f-51c2-45bd-a249-60e2358e8543", "sighting--1dce0d5a-6084-46bd-8063-9451f6552587", "sighting--a450d7b3-86d3-41fa-86e6-3436f4bbb8ef", "sighting--b3d0009a-ebcd-400e-86cb-e08b1df7b82f", "sighting--8348328b-a27e-4b9a-b99c-f3d21c9f5c6e", "sighting--f3f01968-165f-44b0-b472-d19f856c2352", "sighting--aac0316c-edd3-458d-b72e-e46d85df2ec9", "sighting--7a2f82f4-5345-4a21-ba34-ade68f9b7170", "sighting--216c6414-8319-42aa-a110-d1a9dc14d108", "sighting--e1062e88-b4da-4283-9c21-0f46df43088c", "sighting--1a033410-08eb-459b-bdf6-ebb42fc78678", "sighting--8c7e6a9b-b9c4-48fc-b5a7-59f66a04f7e5", "sighting--8ac1e979-8d9b-45ef-81a8-1dc0a4ba12b0", "sighting--65169eab-5588-4cb3-a80b-278f6cb4abe7", "sighting--291f2272-6a1f-4956-b636-8619f884afa5", "sighting--9d1a4ff6-95f0-480f-a869-85f00e8dcb23", "sighting--a00cc446-2908-46cd-877c-befd8089b0dc", "sighting--b03e896a-c389-4738-ad89-ff730f4a42de", "sighting--b42f635a-68d6-41cd-b6e8-d7a2467a0fa0", "sighting--64d773b0-d5f2-408f-bdca-19044d7e0bb9", "sighting--f3930b3c-08fa-4578-9160-31b6040285e3", "sighting--702cb2af-93c3-400b-83e4-25d5a68de76d", "sighting--9bcc7829-6ef3-44d3-b496-3a541de17104", "sighting--90b429fc-5356-40d5-9073-e68a1a9afa73", "sighting--05966ba5-0a25-4bc0-8d18-bb36a3cfe19d", "sighting--24ab1f5f-eb43-4720-9044-63086deb1f97", "sighting--54e0f385-0591-408e-bee8-670e8ffe700b", "sighting--8834f31c-1f33-4702-a4c0-09692739fe7f", "sighting--43b20a29-718d-4590-9052-e6a57e27c3f5", "sighting--e822e502-d28c-47f2-b3c6-141fe356f176", "sighting--a5a39589-d0b5-48cf-b617-f1b5350ef817", "sighting--dad506e0-ff27-4e94-a661-9b7551a4980e", "sighting--8ef05f8e-9130-4727-aa73-6d8edddde96a", "sighting--de43c800-9206-4701-a1af-102ca63404f9", "sighting--2c92a11d-94f8-42ac-bf9f-d1de6a1881e2", "sighting--35041f7a-e00b-4ec2-b0f4-60fdb8b407a6", "sighting--64d1589f-c101-4f4d-8df3-3d33ba2ff4f8", "sighting--489b5d4a-1f65-415e-9b96-3edd0d5021fb", "sighting--88a656be-4f27-4e2e-8faa-2c9c3f58dca1", "sighting--8c31502b-edec-4fff-95ab-77af7be970be", "sighting--601b3e43-5271-4764-b901-655dadaf7f7d", "sighting--d6497331-3f30-4fa0-86d2-128c7c2ecf81", "sighting--77a894ae-4817-4165-bced-eaaea5316315", "sighting--9b3053ef-2444-4b99-a7dd-3d9ce8e2e104", "sighting--c2eaf6c8-8571-4218-8f9e-6cf9c312d259", "sighting--126ad9b6-7bf5-4844-8789-2e8860cf29bf", "sighting--fbcdb23e-8b29-4b38-a728-b630abe84b04", "sighting--36afda4a-f779-43c2-b3f3-d3929c7f2417", "sighting--b3db7623-f3c5-4573-8eb9-fcb592e93562", "sighting--d06368ab-90e9-477c-b8e5-48e82de4ad7a", "sighting--402d6e1c-5bdb-4090-a636-7355c1c59cf7", "sighting--4beb47e7-7380-4f68-aa9c-801337117535", "sighting--c92168a5-0bf8-4d74-9eeb-99a06ec2ad59", "sighting--f70cdf7b-a218-4660-aaae-16d98fa13104", "sighting--7ec2260a-8e4f-4437-b49e-1122537fb304", "sighting--69d526f2-3d50-476b-a8e3-7d3aa57c08e3", "sighting--1adbbfe0-a5dd-4875-8cee-8ff63957a52c", "sighting--9e3e2885-ac9f-4a02-8042-d498fdfcf7f0", "sighting--cd81665a-6b3a-46e7-bc16-45df186ef7d8", "sighting--62000114-7f0e-4c9b-b009-36a5a59b10cc", "sighting--65750599-be50-4a1e-b62b-835d5b0f15c9", "sighting--ea76b56e-8500-4e75-b28c-3f0f084c81eb", "sighting--d6f6a020-5a13-4bf0-bd62-0e1ef8da01a9", "sighting--b3a9c2ea-a668-4384-8f21-654163500d1d", "sighting--f28430cc-1238-4018-8a29-58d3ba94642f", "sighting--b9601f23-6090-4125-904e-50f3375a07bc", "sighting--b2f5ffc1-eafc-4f4a-9ae6-5c5b96fa4394", "sighting--df063a46-e9cb-4fd1-bf4d-8e8fe19bb061", "sighting--bead21de-a62c-46d6-890c-6235739c4f47", "sighting--d8c54d15-2c1b-4d1f-a926-a6935012f3b4", "sighting--b9d796bd-4bb9-4e9e-8546-81db0692f225", "sighting--c189c518-bdfb-403e-9b17-25c113a013c9", "sighting--eaf2f163-1950-495b-9193-ef9fc9dd8792", "sighting--d181be7b-adbe-427f-b082-2d96b5533da4", "sighting--3caabe82-fb12-49bc-9c33-ee3db26024e7", "sighting--ceeac4ea-302e-4d34-a617-7050d1f9d2f4", "sighting--f2c32a2c-d8a4-44c2-9f61-214dfef25fce", "sighting--f64cddb0-8748-4f59-8f51-45befaf77eae", "sighting--43e3ba8d-b7cc-462d-a502-ed0840ec58d5", "sighting--e75997c8-d7d6-41a0-8d09-6c332b2958e5", "sighting--a0b818bc-3cba-45ae-b86c-25ff6cf6a80e", "sighting--f7078aeb-3e6b-4798-9c50-c58bef5388c9", "sighting--66d4ec8c-6bc9-4f05-b989-defb87183c2f", "sighting--499992d9-dee5-4379-b751-fe9f3f73806d", "sighting--f6041583-63ab-4b81-a3b1-6e37ba556137", "sighting--17645eb0-64d5-486f-a199-2fe5d5aa9883", "sighting--e98c165d-b92c-4ca4-948d-fbe0224bafb7", "sighting--56451e27-82a7-4977-9f6e-1a860057f94d", "sighting--0a1cec9f-4b0e-4601-adf6-c58f09b7d4e0", "sighting--156ec80e-37bd-4875-a214-7d5458415091", "sighting--59c116fb-3313-4cc4-a5e1-f548c43f9dcc", "sighting--8d768f5a-d28e-41f2-a4c4-e44f3db91d14", "sighting--7cef6080-b269-4be0-adff-6d53a31ec52d", "sighting--a3e138a6-c1b4-4822-a52b-aff838802199", "sighting--21f0e5ca-8e84-4a59-881a-5b0e11560b7f", "sighting--8d5b3637-6d0e-451f-b708-6fe895565b2c", "sighting--cfea42f5-c485-4e96-9ce0-b39ddb807050", "sighting--84303cfc-771c-4b5d-ad85-73cd9f734200", "sighting--87126314-9fd8-4c8c-8490-59ff4da2f292", "sighting--98662478-aa1b-4642-99d1-7feb56f9754c", "sighting--10970e68-c0d9-40a1-a15e-70e5aa243ca6", "sighting--157bf2e7-730f-4a58-af6a-c4ea9c5e5bc5", "sighting--f167448d-b71b-4da8-bbda-40eab986a419", "sighting--0ed64334-e8de-44d2-856c-dcebf81bd381", "sighting--79ec6d83-7211-4200-a516-c13d9dc7c6cc", "sighting--f6b2e655-0d29-490d-9c24-fc5365923cc0", "sighting--d3d07ac8-035b-446d-bf24-85bd8a6435c1", "sighting--1714487e-b88c-4ebe-a146-0c5579285867", "sighting--88bf3237-ed0d-4814-9389-1560965a8e05", "sighting--053a8b1d-12cf-49b1-a86d-2a14b64ccb1b", "sighting--406962f4-29e5-41e5-a4c7-5c7e88e9f77b", "sighting--bd8e2576-3021-4e05-8108-f90e0b5a7f72", "sighting--67993407-0580-4644-9d6a-7a39aef9d370", "sighting--8d5924aa-522c-49d2-a10b-d2c8f31c35b8", "sighting--c56da3f8-779e-4175-852e-dfa7bbdcfacc", "sighting--54f9b928-6719-41d6-8a56-3f99d9509fc4", "sighting--b842a854-75c1-4d24-a4f1-3e307e431fda", "sighting--7dbb5cdf-8ac6-497d-a383-f0b211861ac1", "sighting--79c250a8-71bb-4fdf-9bf2-70da9ea598ee", "sighting--d8f90643-6014-4db7-8212-d87d630bf207", "sighting--72e90e3c-dc10-42d8-937f-1b200275a85e", "sighting--ed8c5a0e-d71f-4941-ba85-63df28347699", "sighting--6362b9dc-77f1-4e13-be84-70890796515c", "sighting--9ec01b09-0f88-4f38-a2e1-638a0e4e93eb", "sighting--f6a9f39d-b34f-494a-af85-71d0cd7e2909", "sighting--a56122f4-8523-4702-948f-888291282278", "sighting--b508ba19-2cb2-4069-8df0-1594558b26ec", "sighting--ca4db14e-b931-4403-bdb0-198827a0dee7", "sighting--34274d14-1511-440e-a7d4-b690b9aa6a15", "sighting--ca75bcd3-37f8-4dc0-adfd-7ea4f794f44d", "sighting--783d2a4d-2c02-486c-b4f4-d6ed9be941b4", "sighting--6279983b-5942-4e21-8f09-bc90c0d099ec", "sighting--170d7422-c313-4250-9f4a-995af6562ed2", "sighting--00eec068-bd8a-4484-8d94-0d90bd138e36", "sighting--dfc12499-f461-43c7-9eb6-afea5ff59a42", "sighting--05ae8f56-e539-4b06-9e6b-bf657051d855", "sighting--f240ada3-cfe1-4cc3-9fad-3880bde9d1fb", "sighting--0a77bf8d-b520-4973-91f7-bee767092f67", "sighting--48914a0a-0855-419a-8335-9d599abc00f5", "sighting--c4cd53f6-11e4-4b9d-8e16-8932c05f8f41", "sighting--2dfad60c-0893-481c-bb25-8740147fd570", "sighting--9abf3a00-6d35-42b3-a4c2-d4ce887bcb6c", "sighting--308c41b2-a25e-4e65-9d21-5447502c1282", "sighting--823f5d29-5fa5-45e9-bf43-9a2a95d3294b", "sighting--8fa7c1ec-5fff-43c4-8eee-398e49a9d0b4", "sighting--d5baeab8-9f94-40b8-a485-ba0ce859b86f", "sighting--f4f2de67-b153-4d1d-acf7-7804953c45b7", "sighting--fd1a50bc-0924-49a8-a6ac-3765a43ff8c8", "sighting--8ae91b9b-ebe7-4827-9047-a67367405e74", "sighting--b8aa7ab0-25b7-429d-a44a-7cdfd98af954", "sighting--e02a178f-8364-4f96-987e-8a0f139b8e7f", "sighting--b62130bc-7624-4c26-b01d-466164de1c01", "sighting--ce24d8ad-c585-4f66-8f7e-aee9ddf09d2f", "sighting--e951b1ad-6cdb-46ce-a04b-5078ffd57dee", "sighting--54ae26ee-a380-4d2e-95c1-535bc7776ea5", "sighting--2655749b-49d5-4e81-878d-12ec78f1d497", "sighting--c62a3108-1d06-42e5-b945-757fb434067f", "sighting--35c86828-67af-489c-a543-df3150fa9b66", "sighting--1ea80423-800c-4af8-a7fa-b4cda887851b", "sighting--a1944bc5-a728-42f6-b617-377b7d0adcf2", "sighting--50090068-bdce-4e62-a337-d87fdf5f3f98", "sighting--10b7b09f-24dc-46da-a367-ba22d46109b6", "sighting--fcf5e9ee-8552-4978-b870-0804d0cbf1b3", "sighting--72248fb3-8855-48d4-9e76-32d9d1e53a48", "sighting--59094aa6-9abf-4b0c-b01f-2409d5dd1423", "sighting--2bf4ea78-be7d-422e-a184-3e31dbea0bc0", "sighting--285a163b-908c-4c2e-b907-3fb4860b5163", "sighting--66d2c8ee-1526-4e42-a837-051728a2dcef", "sighting--6d3323c5-30dc-4872-a31f-fd5bf0d5242d", "sighting--abeb3bcf-d1ef-41dd-8a1e-645020e9fec9", "sighting--ad294ae4-86ab-44e1-8d6f-9fc53f50ff61", "sighting--4215b4e2-8626-4a79-947d-a375f1c7e20a", "sighting--47c64399-a0a7-48e6-b5da-29ef3e2f4105", "sighting--08df730c-2261-41e9-a3e6-b4d3fb6367c1", "sighting--94f76f0c-bceb-48c6-91f7-64f2acb6a50b", "sighting--e9665316-6e5a-4aff-81bf-0d008832095a", "sighting--cc0fa2d5-398d-4366-a00a-9fb133fd5c80", "sighting--c774952d-e813-4955-aa13-3b5fe557ff1f", "sighting--a985eb6e-b85d-47ba-9b0b-8b221a9578af", "sighting--ebfb0cd5-8606-4473-90bc-190e3a3da713", "sighting--4409dcc7-4e54-4651-b3a5-2352035748c2", "sighting--31436db2-febd-48f0-934d-922fa03e1ac1", "sighting--22d4c0a0-574c-46fe-a74a-fd960213285b", "sighting--6ec9a5d5-b51b-44b1-a5de-ba99c48c8fc8", "sighting--89bf96bd-7420-4a44-9ef1-36b830bf7ffb", "sighting--82857df8-d528-469f-86dc-b1274aa3300d", "sighting--ded9f6e2-2ad7-4141-90c7-e5f96cf03839", "sighting--c62223f7-6fe2-4eaf-8cbb-c41172235865", "sighting--ddf248e4-9caf-4c36-b777-383d8d370cc9", "sighting--2cd2c097-989c-47ff-b8e8-eaa55116a0f8", "sighting--ad575fa6-5bfe-4e6a-903e-317bca319e1e", "sighting--10f1b218-f55c-4724-91bf-537329638cc3", "sighting--a0ecc7af-1c05-4214-a0dd-ddd88d079499", "sighting--c791c77b-1415-4251-9257-a87e96e8a838", "sighting--94355971-8f18-4f2a-9b3a-37ac07680847", "sighting--d03403b5-7752-4bc7-bfc1-9b87efefa72b", "sighting--f5dd6116-859b-447f-9256-111b5b2f4739", "sighting--0cc8a293-0567-40c6-be93-da60cc18b052", "sighting--bed14158-79ae-4191-a474-f27d11879170", "sighting--e6ab4637-0ce5-443d-8c0f-83aaa2c2f478", "sighting--d518d02b-61ce-486b-a755-e17bf4f4b35c", "sighting--d0b9039c-11e9-4368-80a8-8354bc7af3bd", "sighting--701c8565-51e4-4bb7-ada0-048d9fd52415", "sighting--8689c278-671a-4e06-88b3-19e418e87e25", "sighting--9797be4a-7ce6-4b51-a407-419fb179b211", "sighting--e7d12f87-2b32-4d78-aea2-37da467234b1", "sighting--ef0effc4-4f1e-4758-ba88-56b7b4c805bc", "sighting--77d005d8-4b95-4cbd-9c36-e772bb60719c", "sighting--304821de-052e-4d1a-bbee-6c773836c270", "sighting--e0c29887-bf2b-4959-b1f4-5fd1d24fb0dc", "sighting--ffceb23d-a76d-41a8-8108-941f4f17ab42", "sighting--c0d5c64c-d2b4-450e-aa9d-145cbbeff9da", "sighting--8b4a863a-c67b-4b83-aee2-f52abaadb502", "sighting--0641fb49-c32b-4de0-bfdf-604a1d502725", "sighting--114b392c-3554-46e3-828f-a4b14e9e32a1", "sighting--276cba9d-40c2-4a7e-b372-200a54ae2498", "sighting--c18514d0-7da9-4632-81f3-a843f1280671", "sighting--cb88642f-d041-4c93-91de-07acfb3dc118", "sighting--2ab061f0-c05a-49fc-9036-6e1f8d42bf60", "sighting--a772a8e7-8931-457c-9471-4d5805dbcb78", "sighting--800658fb-2f7b-4203-9e1a-c06f8e3d25d1", "sighting--d0f59018-82fa-4143-9ce3-1d2b19f4e3d0", "sighting--afd9b9e6-17f4-40ba-94f1-99a410276778", "sighting--eaf9eccb-6dd7-4522-9019-e1f703383862", "sighting--cdd45bda-8428-40c7-8953-58db1a6bb6c5", "sighting--6525178e-08ab-4401-9d0f-8a148e5fd1d3", "sighting--93972c55-a3ce-4bf6-9090-62ee7107c1f3", "sighting--e4559928-6d62-43b9-b817-36c1e364002b", "sighting--cb9be642-38a7-4cd8-adae-104f8034f163", "sighting--2b68b9f8-3739-45d5-bf7e-70196d9f8bfd", "sighting--a552a0b9-1820-4796-a97f-25976173a16a", "sighting--78fc8d9d-47f3-4fc1-8f95-26ceef93aa8f", "sighting--89a7ae80-6392-4755-a9dd-ffe3f9d67d8d", "sighting--96fd4bed-418a-4cf1-8f81-b9e5686e9e97", "sighting--fa3b9ea3-13d1-4091-9196-38fc4e83fbb5", "sighting--0d12080e-2dd9-4918-a1f7-65d24b8fed5d", "sighting--fa7ace68-1ef5-4ffa-b801-c0f22c134cd1", "sighting--85c31b94-e1e9-4a3a-a4d6-87ecf09c993e", "sighting--747e947a-04ad-41db-b67a-dd2764318c87", "sighting--edfd4d3f-8998-4bdd-81f6-382e61205843", "sighting--f7545953-71dc-41e3-96de-777940b33a04", "sighting--11d9a0bb-cd7f-4971-941e-df881df06cf7", "sighting--695128f7-a86f-456a-b4f2-841a08037db4", "sighting--05e577f0-2b8d-4686-be38-b2065c236512", "sighting--bde773e0-b70d-4657-a766-0cd928c654a1", "sighting--448ca7eb-94fe-407a-9f1a-0c4477f65508", "sighting--dc4dca3b-772a-4901-8add-6add7062091e", "sighting--baa7c860-ed50-4c9c-8781-73a8dd4e2131", "sighting--b855a2c5-f805-438a-83ea-333c64261d62", "sighting--d35d52ea-457e-4d07-8d8e-44bd1583b0f4", "sighting--131119a3-0d87-487d-a328-701c10bfda5e", "sighting--c4008663-b787-49a8-88bb-c7d1875a0c68", "sighting--7b48e066-85bd-42b3-a6c4-bef3b011597d", "sighting--3949aaf1-37c5-4477-9f8d-92c7bd50eccb", "sighting--d90fa84a-2ad1-4075-9980-15651a06ca9b", "sighting--5ffe217f-7f89-4520-a889-ca69c0fac6b4", "sighting--4bf5579c-c51a-4022-b90d-728b00b36828", "sighting--1ac0cf83-be2b-4b72-acb0-065edd590906", "sighting--3f70170f-f1ad-4ec0-bfd1-a3599a71bc3e", "sighting--282a7f30-1c37-4344-929c-bb1f8be797f2", "sighting--b1cf4f0d-7542-485c-b506-4ecda2c99c1a", "sighting--ada35f18-6b75-467d-a9b9-7add104b2deb", "sighting--a0539c16-c0eb-4496-9a52-75d717049a4d", "sighting--e25f2c9d-4674-42f3-8fa0-0b28de47a0a4", "sighting--b2fe9e21-518c-4956-b5ca-da35f2508e23", "sighting--58bf00bd-3384-4ab3-b731-39d73f3e84db", "sighting--8deb97c1-aa98-4cc0-9706-eb398c1ca4a8", "sighting--b47acab3-2083-49c4-8c51-87110c4ebd07", "sighting--fbfa7a95-f566-4324-b967-16cc94ef6755", "sighting--63b04ce8-b783-44d6-99d8-2f047e58a307", "sighting--47943fad-44b5-4002-8125-af298ff00d9d", "sighting--faef3698-9857-4e97-86df-d084e3896ab3", "sighting--fef126a3-a0d7-4024-9b63-9d3e07db22e2", "sighting--5e6a9d61-ec5a-4b5c-89ef-20ad851740af", "sighting--807a1f8d-0738-43a4-b28e-b95d8af5e272", "sighting--4525a90d-8147-4a7c-a3cd-eecf1ad71ef9", "sighting--82bf7a90-af1c-461b-96ff-5fabba923d8e", "sighting--ec3d9e88-dd27-451f-b331-613cc70c3dcc", "sighting--180299eb-3328-45ed-8a2a-b8be0dd23b08", "sighting--a514ee26-3e3f-4899-bcaa-e4893204cd54", "sighting--6d78d906-f209-49ae-844f-f3d6e719f374", "sighting--6e6cdf0f-26cb-45bf-8766-46c2b76a4b3d", "sighting--99474ada-1be8-4f65-8958-d949f8dfc07f", "sighting--5ead9791-0335-46a7-849c-657f16431a76", "sighting--9b59d467-8b7f-4a73-bc5c-f47baa8839ff", "sighting--17b890a3-ad34-40ff-8a69-14872a39afbc", "sighting--08f525a7-00e5-4985-92e4-07a27b53b392", "sighting--6730ad4e-f5c6-4791-81df-3e368f172181", "sighting--eb73ad26-baa5-4ef6-a8c8-528f317e27f1", "sighting--6a1ad9f9-9899-48eb-a821-fb52d96ab77f", "sighting--5d4149f3-1d33-4a06-9631-83b29a56f7af", "sighting--830e1c39-87eb-4543-8123-955301a36407", "sighting--74ccfd62-838b-422b-b410-bff4abc5bb2d", "sighting--31648543-39bd-434b-9642-bb1573adbc27", "sighting--d1a41409-5bbc-4352-a141-361391eae083", "sighting--617d719d-1fad-4ba5-8bbe-127f58568234", "sighting--59d8b86e-05db-47db-aeb8-461041712852", "sighting--099ffdbd-6f9b-4a1c-b525-1c3738d5cf6f", "sighting--bb812d92-c92a-4b7d-8184-7729354640f9", "sighting--978b5da7-3623-4c20-b5bd-133621006cfc", "sighting--00535de4-c956-41f9-afd3-5816177a2357", "sighting--d7e2f1a2-153d-40d5-9923-69cd80f3e0c7", "sighting--cf210c4f-c306-4902-ab60-13bc2c75f5fe", "sighting--71df22ae-d8c0-4dfb-9b00-addb91cd7c53", "sighting--b6d8328b-b330-43a3-b6cc-e7158f9a5e44", "sighting--d789b326-de6a-4266-aef8-08218e36609d", "sighting--d2970b99-8dc2-473e-ab4d-bc67161bf9c0", "sighting--7d20fa27-dfad-4553-b1ac-b3c58b5d8155", "sighting--b96455ee-b00b-4251-8a9b-3e521f5c49f3", "sighting--76e69a6c-cb5c-492c-bd2b-da88cd3f56ce", "sighting--897e0326-f47b-4e87-9ac3-31a749d6bdb4", "sighting--f32e7320-f721-4aea-aeca-909ac1309dd8", "sighting--eafd0f29-2b70-4a0b-a85e-78cfd3f7654d", "sighting--1693e876-482b-4f86-9681-669bfdafaad9", "sighting--31180cbb-e7ec-4352-9bb7-0784f5a1a8de", "sighting--7ce7020b-1916-4301-b3d8-e20ea335c35f", "sighting--0857c32d-4eae-4eac-a6af-5f0fdf003764", "sighting--21196e94-2621-4bf5-8b47-de503a979726", "sighting--3cdf875e-88c7-4094-bddf-9c6704c94838", "sighting--83f97567-9365-4729-b318-78a54a3f8f00", "sighting--862ac633-d67b-48e9-98c9-a20961d69037", "sighting--16527a21-2353-45a3-8ef6-50ee6f05e765", "sighting--68f1227a-aac4-40eb-a712-3d6d2e52a4b0", "sighting--06d5a54a-375e-4a76-9f72-88c3f5bab4fb", "sighting--1e168821-73b3-49fd-995e-38d3b750e6aa", "sighting--4c4100ef-e468-4832-8ad1-f272e1bf31da", "sighting--907bc466-6050-414a-aef5-4a91545d520d", "sighting--7885f775-6ac2-4c2b-a154-c81d615204e5", "sighting--540367d9-4133-41f4-87a3-9265ebab54c2", "sighting--39eaf8e0-6d7b-44c4-b47e-dd295cb2dddc", "sighting--eb37253b-8bf9-452d-8ca1-0c2a59ffa478", "sighting--06efd57c-2d36-40a6-a588-83f59667f163", "sighting--26dfb330-f1b4-4ce0-b316-52acfd3ab654", "sighting--a0d16226-0a26-4ad6-a8f7-2a720d68f06b", "sighting--71a482f3-0d10-4855-b35b-79ee2eccea1e", "sighting--2e5a6438-6966-4e08-a1cf-3a42df984af9", "sighting--6e8d389b-0cea-42a4-b67d-89e2ff2ae240", "sighting--7b7ee973-bcd0-47f5-8fdd-7e8630dfd2df", "sighting--87395c78-e8ef-44ce-aee7-f20ed6203698", "sighting--9001090f-c324-499a-8012-60f88acfa388", "sighting--17dfee60-bcb5-4a16-ad0f-f5f2fee2b22d", "sighting--e26e446b-08e4-4d6b-8510-c6a8c798250d", "sighting--ec655580-d180-4dc0-99c4-adb54d1a08f3", "sighting--63096c96-fa72-4de0-9025-f302c64ab1a5", "sighting--e8c2bf23-2c1d-4495-95ab-6a528d9ef6e8", "sighting--7ab109a9-9368-4782-bf35-e0651e255fd9", "sighting--8db7e128-ba3c-43ad-b3b7-ba070356b611", "sighting--96945ee0-40eb-435e-8990-052213b390de", "sighting--2d1b28dc-e657-41f4-a1b1-e72e6f26f8e1", "sighting--753055af-e70d-47c8-8d06-4ca1bcb0907d", "sighting--06e2719d-ad7c-4d4a-9c67-9541e73de23c", "sighting--baef739a-5bb9-426a-b270-7e3a77f8e227", "sighting--8961a0cc-966d-4c2e-9b26-914ac5056c97", "sighting--cd82180b-a927-4dff-9f25-c04a5db46ebe", "sighting--86db0519-8ef3-493d-ad3f-0d9e9922d308", "sighting--e7c0dd81-6ae3-4006-a588-70448d86a335", "sighting--494cf91d-fb48-479f-b5fa-b02674ae402d", "sighting--2f1983ed-1ba7-43fe-9e91-3f903b0de5ee", "sighting--661ca934-a1d9-488b-a3c0-2d3f56a53538", "sighting--812ff93b-7693-4a09-9b74-c67df6e58236", "sighting--0bf1374c-75cb-42c8-9544-98dd7a3ce640", "sighting--ff1aea6b-4ce2-47e3-aa69-453bee4bf4f2", "sighting--3e87f666-0352-4851-a8d2-53b4c14297cb", "sighting--5886ba18-e660-489d-84eb-11b7ab1bedf4", "sighting--856cb207-d742-4cdb-ab9c-02ae75c26979", "sighting--f994847a-4537-4b1b-8508-323c9d829d3e", "sighting--ed4b02bd-3fef-4f7e-a2ee-bde7a309bb89", "sighting--4bb14718-e66a-40ce-9e54-f6d821506377", "sighting--1bd72aec-4b13-4ef5-99f4-e10763040641", "sighting--55c5f299-41cd-4640-bfd1-324c8cb94ded", "sighting--600e0b2f-4309-4d9b-b587-794af26d15a0", "sighting--27d3f972-46b3-413e-a31b-97edceb6ab07", "sighting--28905e3a-07a2-4633-8d7f-181e4fa67f11", "sighting--c4b1b7ef-e55a-4567-ac9f-a46a77b00055", "sighting--0ab16634-7900-4479-b302-bb403a2cceba", "sighting--59354b91-8c26-431b-91ae-b229bfba4f9b", "sighting--095cfd1d-7fef-44f3-a4a0-ec940540f90d", "sighting--737b1568-fb47-43c4-b90b-f9f2795e614f", "sighting--a198af7c-f18f-465b-b443-d7b0df4f84eb", "sighting--9c5dc05d-3028-4f3f-be9b-bca2e97222dc", "sighting--75562717-bf1f-47e2-a21f-99dc05e1842d", "sighting--fd7a849d-c2ce-4a1c-a596-36abe548dabf", "sighting--1bb74c0d-e0ff-4cf8-94ad-81e9d96e7bd1", "sighting--5059e1c6-5556-4c53-b386-a1ea86e91609", "sighting--4979d006-66e1-49dd-b206-a8776049a27e", "sighting--bd956058-71ba-4594-9031-ad07d69dfe4f", "sighting--0fdd9053-5a63-49df-971a-761643535cc9", "sighting--586fc18f-e562-4bfb-b7e9-04242c78300b", "sighting--628b4fcc-8bc9-47c3-ae82-385997cfc159", "sighting--8e85877a-5219-4339-bad8-6f62e25a7ea7", "sighting--5a260f2c-6573-4335-9095-735046d957a5", "sighting--53a24c3a-3ec3-49d9-bc1c-d77ca0f911ed", "sighting--661bb9fd-edfe-4e16-a6ef-ca80a65aed19", "sighting--3a9826c4-1021-4607-aaba-9fe8c9ec981b", "sighting--1e6a8b9a-b3d0-4c4d-987e-e10b07ae6c90", "sighting--366cf573-e838-4b2a-a3d3-83097309239f", "sighting--882ae021-95ba-4672-acc6-bf16f1fc080b", "sighting--40553d68-6ee2-4236-b766-17cd0f3c7652", "sighting--c69f82fa-b336-4d14-b18f-2acaca41cc54", "sighting--e6740e73-69c9-4c8f-9375-02e6d87a89fe", "sighting--710b3322-708a-44c3-90e3-587ee709f1d8", "sighting--460e2d6f-0e2b-479b-9030-35cad272620a", "sighting--7f22f02b-7f2d-44f6-b7e3-05934532459c", "sighting--42494d0e-af45-42eb-b734-94d7f78e6b6c", "sighting--7e502041-4197-494d-a6cb-d3170dc7b3bb", "sighting--0735c130-239e-4e58-8e7d-7a62fad24c50", "sighting--eb8efb86-bcfa-4a42-87d2-5bc48117fb1c", "sighting--d551c3ac-97cc-421b-a68d-824d3d01e8c4", "sighting--234ab265-41da-4f02-90d5-0f5c2d2ff90d", "sighting--054765a1-8978-4f1f-b847-67a01cc85822", "sighting--3dee4277-640a-4983-82d0-2c736a80df23", "sighting--8f5618a9-ba7c-4a89-947d-3ce6345f8f29", "sighting--2a2494d7-c535-4e3e-bbc4-39f8a7e043d1", "sighting--c4603667-3b9f-4ac8-a5e5-c06114caaa83", "sighting--d7173f1e-72ba-44a0-9154-a8aaee7939ab", "sighting--57831283-764a-4aac-823a-8e75c9683c69", "sighting--b3a7d061-cc36-4536-bb72-86bae5eae062", "sighting--73641a59-777b-4e15-a8e5-e8f3346ab901", "sighting--cdc97479-e772-4535-abf1-e7d53687fe40", "sighting--14287275-13ac-454a-b16a-4b7580464da2", "sighting--beb4850c-c2bc-4db3-aa35-951b8cc080f3", "sighting--eca25316-0a97-4d87-8bd8-6ba7e59d3a5d", "sighting--1bd666b5-4de7-470e-88d5-35a57ba935c0", "sighting--3d087658-9435-4c10-814a-faa1ec5ea2e4", "sighting--78d0a686-d80c-4da8-9a32-2b713d6b6607", "sighting--4b67cd88-6b52-4276-a705-28fbb6570922", "sighting--61d98eb7-315c-40f8-b0b3-c160ee7b7149", "sighting--a485e593-6673-4b78-9fc7-4d070e2ddbba", "sighting--fecac3d2-a14a-4ac3-b926-3aec3c54da1a", "sighting--09053523-a18f-46d3-ad28-e3fa86938958", "sighting--b2c6e843-db7f-4b41-bd32-a2f52ba498c8", "sighting--ff98acfe-eac4-409f-a511-920840562745", "sighting--d0b3ef7d-3552-40a6-8d85-18b064dd35af", "sighting--a6b1ffaa-6dd4-47fa-875d-62c3518e81b0", "sighting--fb745dd0-0662-49a5-ab56-3fd701c8a91a", "sighting--458f3682-de5a-4cd1-9fcc-c6d643ce9570", "sighting--07f3a10d-9d23-446f-bf11-fa06a5200a84", "sighting--422c6058-4fc0-4a96-945b-ba5524364548", "sighting--a9492d6f-6045-4700-b43f-469f8de2247f", "sighting--3bc46e50-1752-451c-9c95-70869b6670a8", "sighting--c9d3c292-032d-4e70-a9a2-e642053e6ec9", "sighting--e1aab9b5-74cc-42ec-a770-1e5367a34e81", "sighting--f31f65bc-51a0-4d4e-9f05-cf576b0b028e", "sighting--0cea86c0-d551-4483-8397-ec7b2cfe4952", "sighting--4184d933-0a3d-48f5-8343-5a4851279726", "sighting--806ffde5-93c8-448c-b5b1-fa08c1ed0657", "sighting--37815ea3-6c57-4d28-bd79-b303d10b14cc", "sighting--ffa0ade9-e029-421d-87b8-b0b3ccfe361a", "sighting--082450a5-64dc-4561-96d6-a5c83d7a47bc", "sighting--5da15f78-2507-47c9-a879-7a45ce5d4aea", "sighting--0031f93d-2aff-46a9-b755-9dc408feb0ed", "sighting--616bcfa1-db90-4279-bb85-8b7bd40f141e", "sighting--8cb0834c-4de9-4cd7-be5b-1a9217167265", "sighting--f9a3ce28-378e-4973-8eb8-b0462664c50d", "sighting--f2683f7c-4340-47ad-a6af-0f581ce3e1c7", "sighting--c46b0c31-20e3-4e41-81a6-4839318bf58a", "sighting--dea101a9-a309-4fd3-ab22-50395c22b6a6", "sighting--b4c82df0-c9c8-45a7-a1a3-f95f9fef9b6f", "sighting--c4f3f7d3-2f90-4aeb-9e26-a89ac7e397e6", "sighting--b0e18122-c57f-46f0-8b4d-22cada6fba45", "sighting--68cc50b8-d59c-4d1c-9908-fc963633299b", "sighting--e5e2ae65-bf8d-49d5-b685-67733bd4fe76", "sighting--e3adfc8a-9bc5-4692-8b63-9ab35b5366a8", "sighting--9b68c725-210b-4e70-a302-fa941703fb9d", "sighting--95459cc5-5792-4932-8e31-45987f9ecd79", "sighting--ad969551-cf2d-4a18-9d64-d8723bac4777", "sighting--b5efef14-c480-4d3a-9304-ab19c07b0cd3", "sighting--729f7926-753d-412d-a69e-926420a632d8", "sighting--cd9c0074-03b4-4544-a12f-d1765bfba3de", "sighting--0561b97f-4b96-4441-95b7-fded9c815b3e", "sighting--416eb746-1746-4c57-bb6a-11fe88724642", "sighting--f99ecd5f-5dbe-4e75-b0ab-525123c04dcc", "sighting--55500c4b-f8fe-46ed-875a-32c20f5cf781", "sighting--ec7cbab3-b042-4daa-aa9c-64d6878ec894", "sighting--451b1893-58c9-4841-b453-37a0b4f090b9", "sighting--858ef6cc-5af3-4c79-a47b-09423c97d01f", "sighting--24661d6f-2a23-4852-8aeb-a18f87f0e9bb", "sighting--27a3c8d8-96cf-4bbe-8e2a-3930fbe97bfc", "sighting--0ec7f69c-7b9a-4e4e-8209-157964662f03", "sighting--5f943992-0354-4cde-a891-ee7bfd10552b", "sighting--5a5d8175-5950-45b1-b465-2dd71adbc08e", "sighting--c49e8422-427f-4742-97b5-deed80b649d7", "sighting--2f71140a-96c2-41c8-9444-dda4513a5293", "sighting--0b9e0363-3af0-40da-940b-a79cdba1c624", "sighting--f5a59df7-5b3b-4c08-9cb2-2181d232c6a1", "sighting--23e6e2bc-3c7f-49b7-ae0f-c4e7153c5103", "sighting--3bb9c6d4-9c37-4890-b844-725244931843", "sighting--62dcd24b-a262-4765-b829-047bc5f326e3", "sighting--337e6144-f5be-49a1-92c1-162319d4840b", "sighting--78d93a37-c06a-46ac-9e0c-251e25ca6c89", "sighting--0fd22a71-d3a4-4ee1-a3a4-d22ccb5f209d", "sighting--a5c14712-2aac-4f51-bf1a-b8e631a6ee21", "sighting--05abc2f1-d4fa-463b-81c3-5715460e86b4", "sighting--663f0604-2d62-40e8-b341-d50fd398374d", "sighting--9c8b1f61-851e-420b-85ef-b05ea6d9282b", "sighting--7712c720-97c2-431f-a42e-ac3c90d95144", "sighting--451b4f43-0bbe-49ff-9ea5-ae2bfd69aa48", "sighting--ebf776d0-c8af-4929-b335-2d739eeaac78", "sighting--65ebb795-d4c5-441d-8f93-e55e441e3970", "sighting--4b3dcd44-3207-47d8-8f33-97383d91d8ec", "sighting--7a27242f-96db-454c-9e95-e4b9d9e39cef", "sighting--525b86f6-cab3-4e46-a12f-5e2406f37fcc", "sighting--160ecac0-6032-4a2a-b587-6d3c0dedbe4e", "sighting--89be891e-fc15-45ef-a54c-db90b4d94ebe", "sighting--63c8b283-e1ae-413f-8e0b-89e50df09f9c", "sighting--ae172d3a-ac4c-43f3-b1bb-a7dbe50c31cd", "sighting--d6d4c8f5-9d0c-4b26-98b6-bfc1eb0491a0", "sighting--44fbcb2f-5149-441c-883b-042de40f03e1", "sighting--ebb9450c-5070-4d91-ad98-894c4497f7b4", "sighting--a9e4b657-46a2-46bf-a9e0-86758ecbac72", "sighting--a5abe0e8-7f17-4c25-9b06-57ddfeef5672", "sighting--68520193-a498-47e4-94ab-ecf372dd0b04", "sighting--4ab73733-ddab-426f-8179-59de664e8c3e", "sighting--45ac84c5-ee1b-47a4-90ef-4e6f26f3b531", "sighting--682d66e2-c81c-4245-8a3b-1766e5460c24", "sighting--06e08744-b3b6-40a9-849f-9781dd9fa9cf", "sighting--36dd51a7-f889-49cb-b597-162f3693d715", "sighting--d3c4d514-570b-4787-af3b-cc8416ced7dc", "sighting--708992f0-a85e-43b4-883b-bba26ee6defe", "sighting--cd95e213-f57f-428e-a871-06da67b2a059", "sighting--0ad38145-0c26-4197-8b4c-563112bc335f", "sighting--828fe97f-fc47-47d8-85ab-3266e6a5ee0a", "sighting--02838bfb-66e7-435c-85bd-51d47a601c4c", "sighting--d8906665-731f-44de-9910-5378d6b524ea", "sighting--c449f0ac-546b-4c38-94a7-4f2d9146b40b", "sighting--242b83b4-8452-49b9-86ff-41ae9c496503", "sighting--8686becc-a862-461e-b25e-9dcab6dc9511", "sighting--a43f60d8-b49f-4dc7-866e-099095ccad99", "sighting--f16b01c5-1626-48de-aacb-ef100b157874", "sighting--8d634392-81be-477f-83fe-dd46093b859a", "sighting--b3f8c383-6029-4eab-8fe9-7a59e3defe7e", "sighting--10320214-10e1-4adf-a91d-284bf48af19f", "sighting--9a67b24e-f286-4a3e-a150-76c98fec3e98", "sighting--3a3eb032-e3c2-4d50-ba32-038f8243202a", "sighting--e648b6da-eeb7-495f-a4d7-f67b3132410b", "sighting--c648b043-5d38-4d5a-91c9-b0d5663bbe02", "sighting--f498ae9f-b965-4a7d-aaf8-1974e77d1357", "sighting--ca5d38d4-336c-4eed-a3ba-31f2a9a80664", "sighting--2439ed4c-d4ae-4a30-b4e9-b1eff7e0faf6", "sighting--165afaa3-ad2c-49af-b32d-0b631a6567b7", "sighting--d8f87215-f778-4882-8bb1-96269355870a", "sighting--71b6a925-e2e7-4052-aab8-d215667797da", "sighting--f55ca597-117c-4f7b-8d0e-b9a40c23aaf2", "sighting--bff6f8f1-e57f-4d87-a83d-f746e7df4a2e", "sighting--8e684f62-7287-4023-a2d5-2b8eab409b17", "sighting--7c0fdc80-6062-4260-b83e-e595a857dca7", "sighting--7ace6ea9-dcbe-4762-ba3d-8835b60546c1", "sighting--4e1d1a45-8640-429c-9a1f-8ee27cbf4853", "sighting--0e5910dc-f5e9-4fa2-ae2d-0aa77b0fe2cd", "sighting--a4de67db-d537-43e7-a89d-2188796dfc31", "sighting--ab889a90-8db1-4345-a0f8-11ff1e331f69", "sighting--501a4238-4025-48d0-9ca3-7e4a58749d88", "sighting--719dc45a-1cb9-4ee6-bbd3-2347d07ef854", "sighting--d8a7ceb8-1612-448b-ad9e-6696a1b9f1db", "sighting--45142a70-821f-410d-9a12-4ec7e7439a1b", "sighting--53fc833e-691f-428e-9f6e-5f4c04db1210", "sighting--0b433743-104d-458f-a844-e5f9a8acd09a", "sighting--a3aceb36-dc5a-4890-9441-226f414b3ee2", "sighting--49aec9b4-cc01-4ec6-9e86-d0b38389f61f", "sighting--7c7beacd-966f-4297-a290-163dc96ac043", "sighting--d4562f14-0ada-49fc-b1fb-c0f3ea093b73", "sighting--6993b1bf-6eaa-4748-9e23-6871a2266d55", "sighting--4d2e4ba6-e90f-42c1-b9f8-57eedf1d16ee", "sighting--a47e5da6-a7f6-4b9d-b171-598e249de914", "sighting--5c19be52-e057-49aa-b1d0-9f0cceda4c71", "sighting--b95c3659-1aca-436f-b041-6c8acf17bb81", "sighting--28d66419-4490-446f-ae92-8daf79dac879", "sighting--0dab4b5f-c70f-4b94-b228-9ced35ccf9f0", "sighting--6a31b4ff-8f0c-4ff6-b341-e2fb9ad21b65", "sighting--82316f88-fe7c-4d16-8575-a88b5e7eb678", "sighting--9c17a6d8-5228-4476-980d-69a1410f1c0c", "sighting--3359899f-daaf-412f-8ea4-87a0f26ef0fd", "sighting--b6817daa-6b6f-4b53-b4a7-8dc74f66ee6f", "sighting--a5ca872d-e4ea-4d48-9910-52e5f52b9340", "sighting--ddcc0070-cd43-4ac1-ab94-c1cfb2795174", "sighting--4834462c-b3f3-4988-8202-6e4ca7d4f245", "sighting--24f745fe-bd10-43ba-8811-cac7260c3a18", "sighting--2d4cfe1a-559f-4cfd-8061-475c2916efc8", "sighting--2c253d50-b655-4e1c-bfcf-ca923d3b7b9f", "sighting--1a93547b-85b9-4905-8f3e-38c9a9c0dab1", "sighting--f27d940e-cf5e-4e11-b2d3-c9e906b5d6f0", "sighting--794181ab-837e-4661-9d7b-f488a75eebd4", "sighting--e0417042-01d2-4c55-9538-f052fd1726c3", "sighting--4e4922f4-dc68-444b-b806-f35b5d4ac222", "sighting--7008f55d-0fed-469e-bf47-de53f52e35bd", "sighting--4f8516af-e77f-4b75-bb0c-6d60c8239a4b", "sighting--1fe03dd5-c074-43b5-9264-110a5c730af2", "sighting--58f7cf9d-e4ca-4fd1-9d6b-0db63332f388", "sighting--cdd222fc-f02c-4793-a02e-55ecd487ee44", "sighting--40d84f46-c506-4ff1-a0dc-e0bb9c017ead", "sighting--dd143f28-a9a8-4cae-a7eb-43e206586564", "sighting--13cbc513-2c91-43aa-be8b-95e6218a096f", "sighting--65014362-05a3-4592-a019-90bb514e0bc6", "sighting--f70fb765-1356-4842-b03b-34fa1233c455", "sighting--0cf03319-bba7-4be0-a07a-db4276a828e1", "sighting--4882b787-2458-47ed-accc-4078ca6ea114", "sighting--52b2947e-3a6c-4c91-91cb-678a6551b9d4", "sighting--65a2b4f2-57f8-4dd1-a93f-c9ae2ffe04d9", "sighting--63559b4a-d2d6-4655-a8a3-5bc1371debb6", "sighting--71d89a14-84af-46fe-a5d7-219281bf6264", "sighting--dfe8a29e-0f57-4f90-b91d-81c9edffe9cd", "sighting--12ed3c18-a6f4-4a93-ab19-70b86d7b553d", "sighting--c29ad6b3-036c-46ff-8d25-3c59552b6018", "sighting--1ef7f311-f340-4432-a612-2d1b5617be8a", "sighting--fce8508d-89cc-4e3b-acd4-5f05761bbf45", "sighting--57dab731-ed1d-4814-9af4-98016af1b3ae", "sighting--e1827dbe-31f6-4c56-a598-64abda7695a7", "sighting--8b4d588e-18fb-4218-a387-af3cc4dfa92d", "sighting--d8d20e16-1461-49f6-ad70-cef084c4baaa", "sighting--2cb3c673-1fcd-4ac8-a347-dfc725493e0f", "sighting--ade7fb39-4307-4da0-9997-a1057c8c567a", "sighting--709670ba-1f9e-406e-8ea3-f29601125638", "sighting--4683c196-64e7-4fff-a05a-07bdce47c2a3", "sighting--7319ce8b-b9e4-4c5e-9612-6726194c094b", "sighting--0e9b0b1b-9082-4ae6-bd71-2ef33bf57f21", "sighting--ca324f6d-60f1-482a-8dd0-c14c31054ab9", "sighting--9532fe25-6afb-4662-b42f-9a95101f1bfd", "sighting--928b7c35-12e8-4a26-b6b2-278c30c880e6", "sighting--91eb0c68-739b-4c19-b036-72af14d7cd7d", "sighting--4483f9e3-c4c7-4cd5-8502-7aa942c0ccd3", "sighting--52549d5b-d78f-48ec-9465-f4749d6c1671", "sighting--5d28e749-c658-41c8-9932-42994af16d95", "sighting--3cbc5cf7-883c-484f-bed7-00f253e9f6b6", "sighting--0b910e35-49f3-4b43-8805-2e413e2e5b20", "sighting--179137e2-3c37-42aa-803a-0d4382bce154", "sighting--d3dbf93e-d186-49c9-a762-e6a15bc1091f", "sighting--a3ea49ea-e19d-4e85-90a9-02f5bec1f0c6", "sighting--96f665c9-da7a-4fc5-aca0-d5581910a324", "sighting--e88ec4e2-2111-4a97-be43-aad9577e5a8d", "sighting--15a6074e-8dd5-4dd9-9854-8231157903af", "sighting--1c54be2c-4148-4317-a8f9-589736474180", "sighting--8daa54ff-4b0d-4019-915a-48af4a3df70c", "sighting--a894c300-ea62-4e69-ac7d-f44841ce29d7", "sighting--fc9249f7-c625-4dcc-a35d-95db31c949a4", "sighting--ca58b2e3-053d-4b3d-b0ac-18c8ae7bf702", "sighting--c73dfc93-4249-4f14-9e94-449629878c9c", "sighting--7879f150-c5c8-4a65-84aa-51401df08b1c", "sighting--81bf5fc4-407e-4bbb-adea-bc7fdbf4043f", "sighting--f577789f-4ec6-4022-b46a-42887bb4043e", "sighting--7e79af61-6379-4dd2-aded-6145a8681bf4", "sighting--3ef85387-c890-4652-9096-55c87c44540d", "sighting--4f64adf3-2b28-47ff-8d7b-0da7c5b0195f", "sighting--a1a29489-087e-4664-b9fb-0c8f37575a3c", "sighting--80ef8c69-ac06-4418-b918-f990e516b949", "sighting--fa395faf-4618-4c47-af8f-1090cbf42a6c", "sighting--d94fa789-aad9-4ba3-a5c3-2701f9a7458f", "sighting--0e897caf-0dcd-4d17-936a-4c98c70c9129", "sighting--5b5d872a-4f42-4031-8160-7e88277d9b9c", "sighting--a17eb1d2-aaa5-4234-98ee-c685823764d9", "sighting--9666a3a4-2519-4d5e-9326-fc43f8aa7900", "sighting--f73302fa-c6d5-4831-992d-21c114cd1761", "sighting--306648c5-c0f5-4d68-be66-2c4cb7921ef2", "sighting--a966c805-b755-4262-9704-9430d3e975cc", "sighting--8a826285-8239-4a30-8c79-cf4cc16ef4e4", "sighting--f4847c81-d8b2-454f-8fda-87ad4eaea9cc", "sighting--b4ced198-ca2d-41ab-ab02-a509d8af6fc9", "sighting--57e0c1d3-7ff0-40f5-8217-2fb3247bcc10", "sighting--049bf611-3c63-40c8-b13d-83643d1b33ff", "sighting--42104326-e433-48a5-a560-7b5df904f9f8", "sighting--ea4398a0-8370-4612-a2e4-f13f2a310bcb", "sighting--09111a0e-3fdf-4f70-9f8e-b09fc2f05901", "sighting--4bd42f18-2dd8-48c3-bc7c-6e413e61eded", "sighting--d768c6c6-81d5-4d50-9d0c-1634954dc6a0", "sighting--16307c6d-65db-4ebe-b809-cbfa7ff836ca", "sighting--2f635be5-c5ed-4c41-9efb-2c367331ee41", "sighting--9908b381-07dd-4058-9a86-bc04d7af2338", "sighting--495afa5c-74ed-45fb-9781-16777408e228", "sighting--41d5b9af-6c13-49f8-bc17-1bb6ab79883d", "sighting--9b32a8b8-77ef-4f24-9a63-77cc7d54ee2c", "sighting--8be172cc-7b44-4ca0-88d9-2e96c0b0e7de", "sighting--4beb1994-8a3e-442f-8433-3a1cb2922023", "sighting--860ca72f-911e-434a-a52f-d2c03f1aa2a1", "sighting--41c80a3e-803f-4fee-afae-2d03358c5605", "sighting--7b913ecf-3fab-45ee-9332-9da59c6e4199", "sighting--c1facaf6-050c-4de7-aa77-96659a272a0d", "sighting--2f0b046a-5314-443f-9ac3-80ea95ff3ec8", "sighting--482f95c9-532d-4642-a821-6adda57fab79", "sighting--3e756b79-1904-484b-b26e-86c8ab7ee440", "sighting--c1773b26-c5b0-4cf7-ba6d-8b03b8dc81e4", "sighting--7e766e05-d9ec-484b-8430-26e45ec41608", "sighting--72489b02-c1e2-4738-a6a3-e2a2350fad4c", "sighting--a87f9f06-a4c9-48ad-ac6a-6e3787a91447", "sighting--eadf0ed2-da2e-4d65-af4c-8f4b46db37df", "sighting--7dde2400-b193-40e4-babe-655e783510f8", "sighting--6f281944-19bc-4932-8729-a170f3d746aa", "sighting--b697919d-b730-469f-a306-13c6bc733bde", "sighting--278be866-99ec-4bbf-bcc6-33e9b446e097", "sighting--e11f46aa-a04f-4cc9-a5be-a961148925db", "sighting--4688f303-316b-4967-8ddd-153ed23ccd99", "sighting--2e792146-a507-4f23-9313-bb6d01c73f96", "sighting--d5c82c06-e884-4ab3-86b8-588d76bfb813", "sighting--3919de35-1cf1-4806-ad7b-96eae904c7c8", "sighting--b8b5197e-042d-4ba4-aab9-1d98992dbca8", "sighting--85830867-9b99-410a-9831-bf4c0bbd36cf", "sighting--df67a318-d17c-402a-b698-e1dfc5e22c9d", "sighting--1a323b32-dd42-4fdb-9b6d-1d9ad73ad6e7", "sighting--41b0093a-935c-4e13-aa52-3a77b61f99e3", "sighting--53c22e3f-e32a-4582-bb40-5c80766c9252", "sighting--6bcb7797-aa31-4f08-b3ec-49944d4a51ff", "sighting--ce1a0409-a27b-4fbf-a9d7-36b999d27ede", "sighting--6d6e4858-ddbf-48bb-9480-e6c3fc8cf024", "sighting--288d2b45-40be-45e9-879a-604828836cc5", "sighting--3cf30911-9729-47f3-8b7f-b33c7cf784e5", "sighting--6994133a-8d17-4777-80c8-12acb098ad17", "sighting--96cd04d5-fa91-481f-a13c-e16fe6c6d243", "sighting--edf02ca7-2828-48ed-b1ea-8ea6249117e6", "sighting--5fd3ebb4-a618-4678-b1b4-e59d6670a275", "sighting--9df584a5-fdac-439d-8cc4-897da35f5180", "sighting--e260f352-b297-4dad-a4b0-b2dd02cd099e", "sighting--240183f7-1b73-41bf-bb1e-337d3b4fb6f6", "sighting--ea8fe7d2-d93e-47c1-a0f3-f176b45b106a", "sighting--84b13b93-6a03-4450-8a50-021496ce3f61", "sighting--9c5549f5-3927-40ca-ad02-97833144cff6", "sighting--fb2c35b9-208e-4da8-8f40-ac085285a330", "sighting--8bd918a2-21fe-416b-972d-a767c982a6f9", "sighting--400cc25d-88f0-4e90-ac4e-9aa095ef8270", "sighting--c1e1f14d-6af9-486e-8538-eb3d7fdaca04", "sighting--283d9cb9-5646-40be-af89-10cba5316f7f", "sighting--a0366ed9-3cef-4e95-b77d-e52007e8d6f5", "sighting--64a40e1e-913c-48ef-ac08-f24b7645525a", "sighting--21b8542e-fea6-43f6-8b93-b50ecd0653ba", "sighting--b7293289-6846-4fdd-b773-2b5ea0c59e5d", "sighting--65b9f4d2-3f64-49f3-af97-f1eff4ec49b3", "sighting--00abebea-4409-4266-a6a0-8693272feec7", "sighting--d21b237a-84d6-432a-acb3-0d960b1d1d3e", "sighting--72bca82f-15ef-4d2e-836b-db888273220d", "sighting--91a3b9ed-fcb4-4a20-a82a-8fca5a3254d7", "sighting--067bb2b7-d3dc-45eb-9fb3-a9ef744c06d3", "sighting--81b7aef8-085f-4c13-9a1a-3a28ed2bdd4c", "sighting--32ed8b78-3cbf-44cc-9bd3-53399ac39caf", "sighting--769df927-ed1a-4c2f-8244-3c7e8074f41f", "sighting--a35d6a56-edb1-4756-9806-7046f4502fc9", "sighting--96120c86-7e69-4e8c-a96c-6641a2381bf2", "sighting--daf2fd34-b6dd-45f7-a443-a6a3ddd2ce8f", "sighting--d103021f-1ee6-44cb-897e-3b594c3286a8", "sighting--54378b23-43b9-4c6d-80d9-e3a58c128241", "sighting--fa791be5-b986-485a-9fc3-5043554a4d8d", "sighting--25d9d35b-5ae3-4d23-b8bf-6a4ec4d30373", "sighting--1e5a4732-433e-43dc-a193-0ed02b674ee4", "sighting--386e19d0-b224-42c3-8a28-e68fd9e2fe47", "sighting--097dc7f5-64f6-4008-95f0-81a36ace1737", "sighting--c1d20d89-eef4-4cc8-a8b6-e80913472d69", "sighting--0001ed6b-119e-4f61-ac33-11e582d335af", "sighting--344cc3f0-dd10-4057-9015-f848169df303", "sighting--32ea74eb-0be3-440e-85ed-2dfbb7d2039e", "sighting--9ad8685d-87f1-4df6-a773-258e4334d8fd", "sighting--de105332-910f-411f-a60c-a3ddc20a5a4b", "sighting--3691719b-4e8c-4fec-86d3-8e510b4994c1", "sighting--e04b2c57-12e9-4e22-8c3f-d91ea322c99d", "sighting--f17c6126-a463-458b-9cf8-8c67510e89bf", "sighting--1144f466-3a1e-405c-8592-37c0bee19dcd", "sighting--dff698b4-982c-4ba3-8238-34e94e90c260", "sighting--84955eca-806b-4e00-92a1-49ae75b565ee", "sighting--c0b499fd-38e7-49d4-b337-8a025068bba6", "sighting--2b7496e3-7a3c-4f2a-8519-4bc1f183309f", "sighting--d1e39f99-129c-42cb-86e1-25a351fc6d46", "sighting--ffd7d647-5dab-42cb-b73e-49efdbb0bf7c", "sighting--bd9c4c49-5481-40d1-abf6-71d22f48005b", "sighting--7a8f3388-160b-4e1f-98d5-b8e27b7436c0", "sighting--fed306ae-3f05-4948-b98a-f1563309cc8b", "sighting--7f512cf5-8603-4bf6-b896-952f153924a5", "sighting--31a3b246-b948-4265-a4dd-d366e742253b", "sighting--6f2a921c-5f93-48c9-84b8-c614ba0a5539", "sighting--c8f84790-2dcb-461a-a62a-860f622a4085", "sighting--d369ba71-46f2-4d3f-877e-82e9cdffc020", "sighting--d3035b2c-952a-4a59-848c-f9bc78e176ba", "sighting--dd05321a-71c0-4a33-8d36-83def2c243a7", "sighting--1ef13932-188d-4262-b04c-43dc7720cc21", "sighting--17b0438c-1ae4-40ca-91e0-49e755549154", "sighting--7b1620d4-8b75-43fe-8d10-133f8dbf8195", "sighting--357b7e4d-8e3d-45b2-a140-88e91d083557", "sighting--dba39c36-56b4-449f-822c-e28cf9f58c4f", "sighting--10311933-3584-482b-a3c3-35fb2fba5408", "sighting--f52eb795-0f04-4b23-bbb1-32165c0d3fc6", "sighting--cd4eb448-2d9b-4da7-8bd2-bbfefcc45d16", "sighting--d73c87b7-60cc-480f-8eb8-b24d7ba793b0", "sighting--4bfbeec1-739b-4e96-801a-03a3d6c592b4", "sighting--3211616a-dda8-4da3-9cf8-e7ad1a39eae5", "sighting--6a2c4443-2c24-44e2-94f5-c00054063d0b", "sighting--ce441602-ee6d-44a0-ba9f-2922f391981e", "sighting--cfe9e161-364a-4551-bfbd-a2341d250688", "sighting--562ac9d2-7443-4256-a34a-cbfb41f09ac7", "sighting--885d8c2f-787e-4cd6-b05a-79ffa4badd6e", "sighting--777f4002-5c5f-471f-8541-852d8e832ed6", "sighting--b7431c97-89f0-46b0-8224-bb9fc75b340e", "sighting--b07fe5cd-acf1-430b-a6eb-a53aa5a66371", "sighting--ddf5562a-5424-4b17-adcf-05aab8ec497b", "sighting--e98a6831-8faa-4857-b3b9-205fc78991c5", "sighting--66968562-9015-4780-8bfc-43b2f74c7786", "sighting--cd945a1c-440e-4988-b7af-4f242a861917", "sighting--4dbb4239-d2ea-496c-98e5-288a36009d5e", "sighting--5883e9bb-f915-42e7-a5aa-1e03dd31306a", "sighting--365f49b4-4666-463d-982a-276bafd25dea", "sighting--5302789d-8e7d-4740-8362-540178c52ff8", "sighting--03736f43-f77f-4fd0-aff8-c26ab48f4495", "sighting--d57a9abf-0d3d-4cfb-a14d-34d4b14fe5ae", "sighting--f45e52a5-201e-486a-93d2-9524edea282f", "sighting--a94b270d-83e6-42c5-8cc1-3fe0237c29b1", "sighting--dd6d8d69-51ae-4cdf-8173-9dcd94f042cb", "sighting--0cc7b7a7-e5d0-4ed5-a25f-c17ce89bb432", "sighting--8807e36e-4ad3-427a-a2bb-a61f8cba5b25", "sighting--e0254a84-ff14-4016-8ab3-72117d18b52f", "sighting--feb4f16d-d18c-40d6-bdd3-9d5c83347ea0", "sighting--c05372fb-d37c-48b8-8658-6286ad088ed2", "sighting--6441448e-fed1-440c-8255-3810b81b65a2", "sighting--069a8071-aff7-4bd3-99ac-c8f15fb82514", "sighting--47886be7-550c-4f2a-9088-79004ec1bb12", "sighting--90a83e52-d1cf-4caf-9720-09b2d382be3b", "sighting--c67e5a13-3596-4706-90a4-f2f781390ac0", "sighting--6180c66b-195b-47f2-b54a-7c89df9d5fdd", "sighting--84918085-6b41-4895-9a30-e66a95145a43", "sighting--7f8d51df-50f6-46bc-801c-7adbc6b5334d", "sighting--7ee7b435-558b-44fc-995b-522ef18f19cb", "sighting--de723d25-690e-43bd-b96c-a0a88531d7fe", "sighting--c5c1ea90-24c3-47fe-910a-5bddec49e4da", "sighting--8fa982b4-cdd2-48b1-ab7b-425b9c5c15ea", "sighting--070ce453-45e3-455f-9528-da48a644ff61", "sighting--0ce3568f-533f-416e-8956-7645304c165a", "sighting--615df844-b529-4a66-a048-c8f68371097e", "sighting--a14121e4-41d2-475c-98ff-114c38faa249", "sighting--62831772-481f-4339-82dd-e85a2d084c8d", "sighting--b6537c4f-5286-4e6c-a3d8-6d162536d2ea", "sighting--f7bbf6dc-bcdf-4b4f-bb45-eb50192436b3", "sighting--3224b686-bb12-430a-a5dd-94d354aa9599", "sighting--2975ccde-1077-484b-a87d-4e5c7725de82", "sighting--379ecbd8-b5de-4c28-ad84-700df8ec567e", "sighting--d02ac27c-f50a-4844-98ba-31a018d0eff1", "sighting--19820f92-a120-46da-a8d5-01f7b9d08c48", "sighting--eb7e9782-566a-49be-ba71-c1edfcc9138b", "sighting--df8d7cc8-9b36-4535-ad67-dc45faad07f6", "sighting--0950af8a-84ba-429e-9267-f2ab41f112e0", "sighting--5ae4d7e9-60a5-481f-9f25-ea93acc860ce", "sighting--165ae14e-537c-4c6d-8af9-8096ee934fb6", "sighting--00efd6bb-b53d-4a4a-be5d-c8648341cdab", "sighting--3e5660f4-81e8-4d7c-adea-33259e73f737", "sighting--eb6bdc45-a81a-446f-af36-f640e1c7873c", "sighting--0a79c929-2f1e-4f20-8907-66aa7f1be326", "sighting--272eea39-0cfc-489e-8ce9-a7a770bab269", "sighting--897dc097-1193-4493-8f23-b945cc1b72e9", "sighting--8b4531b6-1b54-490e-924f-e6e3d5f103ce", "sighting--9e8f04b0-2125-4826-835e-999333274b07", "sighting--26af3a89-41fa-4225-bd55-a17a683b406f", "sighting--98bd2616-f10f-4331-baaf-add41d833dba", "sighting--c605eb43-f89c-486a-85c8-87369c30f1c8", "sighting--e5d9e59a-d942-43a7-86cd-2f175b99fef3", "sighting--a1db1979-d37f-4dea-b5bd-3ac6c0a8f973", "sighting--2a551f4f-a01c-4900-80ad-247cf1d7010d", "sighting--b9ceddc4-0d2a-4be4-93cc-dc8c83fdbb91", "sighting--c42cf79e-29eb-4004-9056-01af95f2df09", "sighting--a01ee08f-3254-410b-8d90-ebb2e201bbef", "sighting--2c477457-bed6-4950-9621-5ed1db324dc4", "sighting--96460265-ab19-4530-8c22-207ba7d309ad", "sighting--ca6107c5-4a03-4b02-b2f7-a79fbee5501c", "sighting--5feeea2e-a26d-499d-bbbd-20c221973b8e", "sighting--a98200d8-f857-49d5-9278-da57a8b311bf", "sighting--f8532742-0d7d-4abd-856a-1048c15bdf77", "sighting--ea879b1d-ac25-41ef-b43a-4a0b5477422d", "sighting--edac0545-6eec-44d5-bb65-a7cda023b246", "sighting--77253462-6ece-47f4-aefe-c36cd496f853", "sighting--3b5c812d-9636-4b38-a46f-175411357976", "sighting--eae9b685-0486-4f2f-a3ca-323f4a5552fc", "sighting--d0832e21-01b7-4a90-98bf-af5b15ec72fc", "sighting--49dad0fa-fe93-4301-aedc-477ebc8c8ff4", "sighting--d22d3283-4756-458c-9c0b-93954711eee6", "sighting--5490f7f5-c6d7-4dd2-a2e4-b89452d763f4", "sighting--5888d358-b95a-455c-bb6c-8a44780a8fbb", "sighting--87cefee1-957d-4ba8-aa49-e63f6fe40cb3", "sighting--13374efc-50f7-4987-ad77-6c0393543245", "sighting--ce77ef43-3021-4002-980c-e220ad6f61b0", "sighting--9e594f0d-3214-4ed6-8405-e5f5aafcf829", "sighting--6bcaa780-2fe9-413e-83d9-d7abad783443", "sighting--1744e523-891b-49a3-9447-d9bc8467cf4f", "sighting--d5484cf9-34e5-4dd4-a9c4-038768b9ac55", "sighting--869a23d8-ff07-4c07-8042-62ee071743a3", "sighting--df1861f3-14ce-4c89-99d6-6d3158a1eea9", "sighting--0cd5504d-6063-4868-895a-1dc3641ba1d2", "sighting--71bf9a95-a7bb-452f-bda1-465a9ef9bb21", "sighting--df5ec32f-4648-4187-9abb-e395742268e9", "sighting--cf3ead61-aed9-4788-b84c-6563c45150f4", "sighting--c0afcd03-3a3f-4219-b0a8-c45943fb1358", "sighting--d2e49b2e-9bc3-4b62-9499-a20e0e03ee81", "sighting--dbf12214-e418-4b98-bddb-0137f6b55afb", "sighting--53c16d14-0c45-469e-90ce-4023a3a70f3f", "sighting--ae5fa997-43b6-49e0-9510-97f535593e5d", "sighting--ce9995c4-13c8-4ef0-9ec3-d8d8c8365198", "sighting--33260aa1-6a9b-4918-9963-58a23770302c", "sighting--98246f5b-760f-4ec0-8ae2-38464623ca3f", "sighting--5b3c2fec-73e5-499d-a339-c24d461228e9", "sighting--319f5f7c-540b-460a-8583-fc302c945295", "sighting--bf02973b-3b48-46fb-bcbb-81bc5e1e870a", "sighting--36ae8b86-f56d-43fc-894f-84dccb9efd31", "sighting--031502c1-dec7-4879-a2a3-c1f6c65e9e93", "sighting--b8cbdb6e-1ad4-4917-b07d-4b6dffe9e4a2", "sighting--7b8d9c9a-e239-4537-b452-a0448e10b34c", "sighting--e41576f4-9e1f-4c1a-970e-aff74ebdd1f9", "sighting--31eafbc3-4b34-4b40-b214-732d43dee8d5", "sighting--57bdc982-2f38-431a-9729-d16a8bb6ca11", "sighting--f4300519-e68e-48d9-bfe5-890988ae1f29", "sighting--324eba7d-02f9-4096-8212-4b4bfd72dd83", "sighting--f866d57f-e33e-4c1a-a796-ff10abd98f18", "sighting--014e8672-864e-4f82-979c-98a0057060b0", "sighting--4ccc3816-939b-409a-a21d-0ee48f6ccc3c", "sighting--ee1adc80-55ec-41df-a5dc-63514213a06f", "sighting--9d5d0b4d-27bd-4d83-affb-bfed9100e3b5", "sighting--d24668b1-f1ca-412d-a55f-8f737cc2eb68", "sighting--b7a879fb-5013-4a32-9e33-00806fde8cf1", "sighting--47573dcf-a6be-4518-ad96-dc3fcfa0b852", "sighting--976c36f0-bf47-495f-8c79-ba9ac312f6c9", "sighting--3e68910d-94f7-4787-a7ec-b210740d2698", "sighting--f0964623-abda-4721-bdc5-0b65b1d2da35", "sighting--2dbf3143-6f15-4490-b694-13d1cb48e305", "sighting--a679c310-d48c-47ad-b546-637dff81e6c1", "sighting--0fba368e-4324-4358-b655-b7ce811404e7", "sighting--5c3bbebc-0c7c-4079-9a65-83184bc1a4f9", "sighting--f5398783-771c-4cdc-a936-62aaaf81ee48", "sighting--208fbb57-0d62-422c-8176-954fb3269bea", "sighting--d27b5890-4c9e-4e23-a572-ff3d6fe16849", "sighting--18e6a795-accf-4c2a-8fc3-38bbce618ef0", "sighting--de7327d6-3f9b-4210-ae87-79e21c43612d", "sighting--83363265-e338-44db-a6ce-5395aa6f61c3", "sighting--06750258-52bd-4fbc-bf11-919458fce9a5", "sighting--c67d93c2-c8e3-4ae2-b375-51fa15cc40a2", "sighting--c8d6ad78-9e56-4eb0-b0fa-85d8c2166c46", "sighting--e09e5daf-ae02-4c79-bebb-bf11e58a0b94", "sighting--8c7b4381-a449-4127-91ed-0b5d3e6a48b1", "sighting--8f3c4df0-9dbc-4227-8aaa-208aa1489a50", "sighting--0b12c7d9-8420-41e9-81ab-59430516d52e", "sighting--9cbecd15-8a3f-4b28-b7f4-9ed2a14e5d99", "sighting--bd5770d7-ea9e-4e8d-9ee4-68c97f216558", "sighting--07ef03b3-cde0-435a-a5d8-d35d8de5f238", "sighting--0c825ba1-aaae-4b78-af4f-8e8ea43922a4", "sighting--76e59447-5fea-4bf0-9ffc-78db8c268339", "sighting--5057b30c-8b41-4234-b1e7-5687361cd1dc", "sighting--b1bdea13-1441-484a-9038-49902d9f2a1e", "sighting--cd71e425-9ffc-410d-b0c9-d4937bdd8bf7", "sighting--f45269b6-cd8c-4548-8143-aca959893ee1", "sighting--a5d46e57-ccaf-4eb2-91c6-feb65e9d624f", "sighting--79f9202e-7e26-4136-93f7-d0bc75ce8141", "sighting--521fe021-935f-4a61-b6e9-29876e5b4a0e", "sighting--9d1bf228-ef5b-4554-af1e-5cd274e32511", "sighting--6aabafbf-07f2-4553-bd98-7e657137d27d", "sighting--631634ca-16ab-4273-b384-54a620dc963e", "sighting--cc75d76b-0674-4950-a28e-3f66b824c8f5", "sighting--f7e62b03-8ddc-4281-9e19-54af7a0bc570", "sighting--2aca81f6-f89f-47f2-a0c6-c7521cb1335c", "sighting--f23091fa-b674-49bd-9092-3807afd7804e", "sighting--5b1647eb-ddc4-47d8-ba57-264fef0f914c", "sighting--3597e099-3886-44dc-aaaf-51f72cf9e979", "sighting--278d932d-0858-485e-9639-5ab6a3eab23b", "sighting--478f27e9-9a3d-45c3-b3fa-704e735a6220", "sighting--8188cbc9-910c-4f10-b5b8-01213d4344dc", "sighting--6da2c291-a638-4806-b0ea-e66cc12bb539", "sighting--6ee94e3b-b450-4e8a-ab4b-2cefd5e08295", "sighting--791ca952-2560-4553-afc4-328e91a4629e", "sighting--d9a892b0-2fdc-4cfe-bb9c-a136cee9cf84", "sighting--dd2958b5-5171-4133-adaa-5b2bd8a9b98e", "sighting--ac98f9dc-4684-48f6-8a12-adc87595a3f5", "sighting--6cb4c11e-1baf-42fe-9113-4bd4852e1910", "sighting--89bcb0b2-b889-468c-b7d4-d58419cc84c0", "sighting--86df8b05-f546-4690-a1c5-706803c26218", "sighting--0f32342a-7170-4c4d-a882-f0b5214ac260", "sighting--4828e4d3-ea34-4540-b697-fd2478719b1f", "sighting--a166b9f3-49cd-4753-9080-048c5ab26d3e", "sighting--c738e63c-38d2-42a2-9b0b-2a1d82e25200", "sighting--b1d7d490-04df-43dd-8e41-3efb3831bbd0", "sighting--f98eee73-27f5-4efc-93ea-9a1b0b19c52c", "sighting--d348f71f-83e4-4de4-9b68-3f4a98cc5e29", "sighting--73c7ef52-fe03-41e3-b6bd-f5d4a766b0f4", "sighting--b47c0b67-3304-4e4d-9b38-135da99a2e13", "sighting--be4cec01-9590-427c-b2fb-d256d5ae17fd", "sighting--f4e7778e-40d0-44f9-b596-983c25f3b332", "sighting--a8764860-5e4e-4b1c-b8f9-0cd7c51c7c1b", "sighting--bca5e6d4-b5ec-4a51-a837-3e323b90beda", "sighting--40d1d6c8-79ab-4b2e-a88a-2de0b3d1cd1f", "sighting--dcbd29a4-65bb-4dae-9aa7-f423e0df1890", "sighting--a0d89b69-87ce-49a8-8190-9af0b3155414", "sighting--0d0e8cf9-8b79-461f-9b76-00a2e2a62bb0", "sighting--c0cfbc8d-f5aa-4e78-a299-fdf99221e0f5", "sighting--1ef940c6-d4c7-4e62-b6d0-87326247ddba", "sighting--b9e8625a-f341-45db-ad2a-533c7cffe927", "sighting--cf719e55-0840-400b-a370-c9e121404a6e", "sighting--49880758-60d1-4418-829a-80ba2abd7ac1", "sighting--c64ec5a3-49c0-4b13-95c8-dcb17dc06655", "sighting--2bcb1252-b21a-4aef-881a-3e2e4138b941", "sighting--c45afbf3-b875-4b5d-8f7b-cdcc78cabda7", "sighting--53a04907-4885-4fc2-b5fe-f342b8144d0e", "sighting--40fc2bf3-add3-4d08-8f81-45f019796a1f", "sighting--750467a5-908a-40f4-b7c1-0e8862767774", "sighting--6b809e77-309b-481e-b52c-7ace2e6dd3a7", "sighting--a5ffa197-611c-4fad-ac82-795b1fa81be6", "sighting--94004f3d-1ba8-4218-b92a-f78bbf34cb49", "sighting--23764282-dcb1-44af-903e-5e7c31518363", "sighting--ab131e49-58e0-41b3-ab55-abbe36c92bde", "sighting--25bda205-6644-4f2d-83e3-6f5669f15f99", "sighting--d93ffa8e-2447-4d39-a476-32ecdbe4c5a3", "sighting--0dc382de-52ef-4055-aadf-2ab873017a91", "sighting--114d2933-27ad-4087-9520-a10cf64732a8", "sighting--a114ad94-34f9-4701-af6e-9ed31116d7c1", "sighting--da16bca5-3fbb-45ae-b49a-c8e2a6794262", "sighting--092955b0-c00e-4c31-a324-2ad2928928bd", "sighting--59459b3f-94ca-4138-8715-3c2a0a66701e", "sighting--eb1b1eaf-6efc-4720-9c71-1ad691ba7189", "sighting--303176f4-1fb7-4ac7-9393-357266ccca04", "sighting--64e92329-540b-4fd2-85f2-5df46d3eb317", "sighting--97933c1d-830b-4619-9b7b-f6db9cb6c0e8", "sighting--3bc7d670-79da-4b61-8d38-e9798ca724c8", "sighting--9bcaf316-ba03-4b2a-bdcd-d430468af916", "sighting--6783eb34-85a3-4470-bd85-396e79413970", "sighting--fcf9f771-050d-478c-85fc-a182d0d83d46", "sighting--73cec089-0fa4-4de8-88bf-ca66c8d8ee18", "sighting--7fd5eb9b-c482-4577-aee7-f435a0880a62", "sighting--ca6664d5-db01-431c-bc05-45ef80cb5beb", "sighting--2ad8e383-7937-47bb-bd64-b80be538e28e", "sighting--cd490a5b-6fc1-479e-9386-2db398b04728", "sighting--717967f0-bfec-4850-91a3-746edb6f0d99", "sighting--972ada89-79bb-4ae9-ad6d-ea63b0c83ac2", "sighting--2b26fb7f-b2c3-4733-8886-b1ba2906d489", "sighting--c77a6a2d-3e73-4c26-bad8-de5e24f2343e", "sighting--b2a92e56-7044-41be-accd-ba8f1674a3ea", "sighting--1381bf6f-dc5e-4002-8368-443e455f392c", "sighting--eb194d25-98ba-4f7e-b200-766026a0ff86", "sighting--a6cc1eca-7d59-4943-bcf9-1b14d61427b0", "sighting--c2f7ca48-de4e-4878-a05b-9b611114aefb", "sighting--b6a12de3-ed21-449a-aa63-bfb7e666f2d0", "sighting--057a79d7-71d6-4328-8677-4c0b4e79d58a", "sighting--d5d5ea19-62bb-4cdd-814e-4ccbe34506ad", "sighting--16792978-c6ca-4c41-baa5-c4e9809c86c8", "sighting--19aeeb4d-90f1-4916-a337-910bf8e49b52", "sighting--d480da5f-e8cb-4fbf-96f1-185e2b623569", "sighting--88ba5338-39bf-4615-8d9b-f2b19a9d5e48", "sighting--eac21116-7b98-4bd2-8688-7d58fb885666", "sighting--08208997-c4ba-4a79-a96b-aa25de5a857a", "sighting--90de98f6-5c80-4a6e-a287-869d80a7f340", "sighting--3a68038b-05a4-4d27-be1a-01c4920b771f", "sighting--5532c26a-6e31-471f-82ce-f7e52b4c6293", "sighting--fd30a2c5-ea6c-46a8-83ea-fc3e39ff1655", "sighting--b436080e-383f-4f21-a856-81c213a414e1", "sighting--083a2914-afce-419a-a381-bcb63aedac9a", "sighting--7c3e2e77-0605-4a09-a502-78c002ecd6a0", "sighting--da44e7d5-5177-412b-b558-250a5c086fa5", "sighting--56d0bf25-9ebc-4933-ae18-1bdcbe8306ae", "sighting--d77fc171-6f29-448b-982c-8d2e7434200e", "sighting--d231ec0e-8c06-4028-92ee-606392b7dcb4", "sighting--3e45b16f-4dfa-49e8-94e5-f0b4297162fa", "sighting--18d223cf-11eb-4315-8c17-87471bfc58a8", "sighting--0c5b01f7-9e3a-41da-a890-85a27ed40911", "sighting--e8caefbb-8874-4223-a3a1-4379acf281e5", "sighting--103cc36b-2a33-4eea-9ba3-9d08cf58955b", "sighting--b9f7c80a-5db2-4153-a570-e34cb411d1a5", "sighting--2289d01c-35c6-4498-96c6-6376c0d8874f", "sighting--a36fce24-a7fd-44fb-b6db-5ec147bdddb6", "sighting--49928980-f6b4-4a05-96d8-6d7f4302164e", "sighting--547c7ee1-969d-414f-8cb2-4e25be2ed142", "sighting--51ee7208-6a4d-407f-8fad-2fb1f694592a", "sighting--7d80658e-cc07-454d-8aff-7a68ed844042", "sighting--9a4f0051-a6f3-4319-a39c-c133b30460b8", "sighting--b071b2b2-3eac-42dd-b991-de41c0487d94", "sighting--6c91b604-f5c4-4e05-93c9-ce124c91c0ac", "sighting--a6dcd3bb-f9ed-4374-8953-f9b4bb3a6234", "sighting--eebd7952-46c3-4be5-9d96-6e5d3be6c741", "sighting--5e357c07-3c16-4be3-b257-2e358d20299e", "sighting--fc729c9a-a006-4b50-a5d8-b8890e249f0c", "sighting--c464e188-86b4-4317-8996-41c3174f0f24", "sighting--ddfd12ec-6857-4288-bf2b-b07a315ce16e", "sighting--266289cb-e387-44c5-a280-b4063712572b", "sighting--e49824bb-1c8c-42a1-a940-cfc6bd7493ab", "sighting--9a0e3d5a-6cee-40c4-b683-981ffbae991e", "sighting--c20758b2-2246-44f7-9a9d-bd17d1e9fe7b", "sighting--8dab68c2-bbf7-45e8-917f-b15fc05e9f1f", "sighting--2efc6804-d437-4fbd-9df8-238b73eb82bb", "sighting--62326c36-5cb2-4ebd-9972-477fac20aa29", "sighting--476f2283-4e7e-48f9-a89f-4dc01197b39b", "sighting--bd45a146-72fd-4a2f-b5ed-2d8f310e8f8c", "sighting--2369cc67-f103-4784-92f5-83df62952db5", "sighting--f47020a3-f4e9-4186-a39d-c2bf5df62a9d", "sighting--08a5bf4b-2a09-4fb6-a32b-fb92bf735005", "sighting--7274ac05-8901-4221-9d20-1bfa6407bd75", "sighting--fe6bb446-566d-4673-b81f-21e09359fb88", "sighting--b7467a13-d319-4817-a546-3bd07d6ccdac", "sighting--2a4dd216-84ae-40fc-aea3-85ba937a0f1c", "sighting--16868a5d-d549-425d-826c-c1837f3ee10c", "sighting--ad39215b-a71c-4f60-9773-5432c9b01d64", "sighting--8c387c89-8e76-4e4f-ab3f-a1818204a3f0", "sighting--4cacc9f7-18dd-4f89-9d80-d497e075bfb9", "sighting--bf25d3dc-1182-4a3c-97cf-3c0613763223", "sighting--1db8774e-29d3-45f9-8b24-ab1add5d5f8a", "sighting--e7104184-4348-42a8-ba2c-0b5833bbbdbe", "sighting--0cd605bc-7fb6-4f15-a4f6-0f3e57fd6966", "sighting--feb1e3f4-0e33-456f-b792-dbe38787ba4b", "sighting--7fa38ced-327c-4791-a3bc-1ae47746de71", "sighting--70c0a7ff-036b-4c70-87c5-7b09f46d60b9", "sighting--b4f70b3a-d644-44c8-ba85-de77ca42419f", "sighting--15f8dc54-bb96-45ef-b9e0-1e28f53e737f", "sighting--bbe889b0-5932-429d-9a1e-9dce3a6d1dd2", "sighting--b6105509-e8e5-4d46-9453-28590f6262de", "sighting--95c03499-81a6-4f32-922f-8f078b19aa32", "sighting--22c847a8-910f-4f85-b141-dd85ff535493", "sighting--052ae063-1a55-42fa-857b-1c8a2ee7f061", "sighting--c35a33fd-c78c-4920-9224-4f0ed7d9b25c", "sighting--1d6af967-bba8-457b-b07b-c4dfa22e4259", "sighting--2c3d9bc6-1104-4de3-a591-167a6b23bf05", "sighting--d37c9ae5-c918-4a94-8db9-5d3d831a3f19", "sighting--9d85b34d-1c12-4b6a-8d7c-afec306f9ae4", "sighting--3124eb62-51e0-4b0a-991f-94f3aa9611ec", "sighting--9449b087-2c20-4989-8c1a-adee682da4fa", "sighting--3b467dca-0853-4631-92da-e2c746686260", "sighting--3659672a-9854-4b8f-bea2-6b6a30a9366b", "sighting--3de6f088-3fcd-46c8-8d17-fcc3989936ca", "sighting--886ac448-6c1a-4ec4-a316-7dd7ae5ac8fe", "sighting--903034c2-a716-4dc4-aac7-237abc8cbaff", "sighting--70d8c37f-9e21-4b78-b220-db3a1dd20184", "sighting--83096e4d-33e5-4e2c-9d40-f070cef2db0f", "sighting--738382ce-5605-4f5f-9fca-d216a5fc82ea", "sighting--c8f1fe77-ccc6-48da-9dd9-e70ba23e8e4e", "sighting--fe379924-502b-4cf8-a5cc-666b6897cbaf", "sighting--1620d4a5-729e-42ea-9518-8bcb2596eb05", "sighting--3b92dfe9-592b-49b7-914e-7c1b1cd80f5d", "sighting--40a64026-0109-4cd1-94c0-a57008a2e6c3", "sighting--b39a64b5-3870-4314-91c1-772ba4b2f917", "sighting--f70b34d0-8809-4248-b1b6-f40b84bdf1b8", "sighting--b45b8051-3941-4dcc-bec3-c712776a8181", "sighting--e3e3013c-424b-4550-9103-f610f64882ae", "sighting--2a5f086f-8315-46b2-80fa-d62d378551ed", "sighting--b4a21784-ab0a-4a5b-a5c3-86fa4351a755", "sighting--4f625407-b1eb-4351-ae6f-d14aa1a6d519", "sighting--c2f9cb7d-0e3f-4bca-bf37-1f37de960da7", "sighting--053b52b1-d829-4deb-9beb-96ed558d27e6", "sighting--a1b028ac-7875-41b4-a084-f7df385af32d", "sighting--868be1c5-7c52-4902-81db-4dc1f1cb3ba6", "sighting--03de681b-4306-466e-b18b-0cff7e65bd80", "sighting--5b2a982f-793d-4ab5-af8f-00f9220e3b8b", "sighting--1a701dc4-1c64-4e82-97ec-bf30b377bc01", "sighting--200855e6-71c1-4f56-9ba0-3899e4e61e60", "sighting--0399ed1b-27b3-4224-aa8d-be3c013cf71e", "sighting--c7be2757-fc97-4266-93b4-d8a9cb3ec40f", "sighting--7312456e-37e4-4ff1-955b-49482573f263", "sighting--335890ce-8f65-4878-a601-24602598ff8d", "sighting--dfd89d28-7bbe-4edf-b27f-b98d657a5556", "sighting--5def357e-1325-4b84-ba04-0d5b8128c908", "sighting--1e33f35e-2c84-4045-a4f4-098da8b5a54d", "sighting--e32c2079-a195-4dee-afe7-057ae98617da", "sighting--027253fd-9361-4e92-aa29-ac6c9451d807", "sighting--bde28444-27a8-4ffc-92dc-fc6c446f8aff", "sighting--c66b5dcc-6016-49dc-a5ba-fe3034c088a4", "sighting--f5c59deb-8753-474d-9385-a57d3aa4fccd", "sighting--a48f387b-805c-48ca-b017-fbb0f09f8112", "sighting--d98d0e7f-237b-4f73-8cfd-3de87b09d667", "sighting--7ca5ffb9-c02d-4e35-96f4-67364f89390f", "sighting--e8dc1f8f-7418-4ce1-bd19-5c0750cb11ba", "sighting--7bf2889d-0abf-4ebe-a7f1-3d39f5399131", "sighting--a38a1aee-c4ef-49a7-b152-d72d9147a700", "sighting--421a8a6c-6a65-4746-8fda-4a90245d6ae9", "sighting--2899c7e4-c7c6-4ab8-b197-296dc7db5d62", "sighting--2a88bece-af66-4beb-8f23-917f8a7c203d", "sighting--54af33a1-b590-4931-8f89-f46f2d0fc605", "sighting--9be88cfb-f547-496d-8f29-ab0ea24a143e", "sighting--6baa023c-108d-425d-95ca-d7a61e2cba5a", "sighting--b4b1b56e-4d70-4451-950c-8681ad37c502", "sighting--556aa9d3-a022-406c-8292-a5ff0994b5a3", "sighting--33d4c0cc-d47d-49c1-a533-c250c0517d0d", "sighting--c787a622-a529-46c2-b70e-315c84b27feb", "sighting--6b5a4e66-f8c0-48c1-a280-7fcc50ea4f5f", "sighting--87d83427-158a-4670-b628-06a36f82d581", "sighting--d04057e5-f43c-4d81-95ad-0f63b069cb82", "sighting--5a3d045d-d60a-4657-96c2-364caf7d40c7", "sighting--1d8627a6-c6e0-4416-b2c8-93bbf8e16ecb", "sighting--a9efb66b-1c7e-487e-a48a-1340592e86c2", "sighting--cb27ad40-2a16-4585-8f67-631f44b7f029", "sighting--e35332a9-1d64-4be6-8439-e083d4b7c8eb", "sighting--1c17aa0e-2713-40ce-8aff-ad16ca4319f4", "sighting--71795cc2-6dde-4048-a1d7-d0f0529c8007", "sighting--dd2b9c78-13b6-4170-8157-a196830f9472", "sighting--198728f3-b159-45fe-9f50-8a96d325a890", "sighting--a2e08e9c-beb2-4f96-9eef-8475fb5359c6", "sighting--356ed2a0-5e80-49dc-abdc-5e6f2b9ae83b", "sighting--dd9f9837-69ce-416a-9e09-8c5f457cd534", "sighting--e53b059c-36d2-4d27-881b-9ff6e26f5690", "sighting--74570102-63af-4c10-b12b-d595f27c0c00", "sighting--7c836b1e-27a3-4452-b9a7-22ea6c108932", "sighting--9b9f0f02-d871-414c-94f0-af8bdd0cb16b", "sighting--eb4fe14d-daf3-4f36-846c-44e76ab1657c", "sighting--20b562d7-1ec5-4685-9f69-521f54b07206", "sighting--f218f032-1e5d-49a4-9059-e5710bc49246", "sighting--a163932e-c591-40ec-ac65-b8cc6d719ce5", "sighting--f66e0dc0-8d44-42ed-a9b5-c24a6185be05", "sighting--60322879-7588-4ec8-b3c8-7e811a686ec6", "sighting--048dd752-7f95-4ada-99e7-3d8f1f74e61f", "sighting--df4662e1-d405-4548-b85f-a0508fe6815b", "sighting--2764a573-d20d-49dd-8267-e09133fee3b3", "sighting--8b79ea8b-208e-4225-a62a-2e577f424b22", "sighting--558ae4ba-b6c1-4bbd-84fc-aea7616e80a9", "sighting--059371e1-93b0-476d-a4b5-238b51db9e4e", "sighting--282220a7-5e3b-4af6-8259-4c53f14b71fa", "sighting--21a065be-a09d-4d17-81f7-db8805bd17b5", "sighting--2bfa6ea2-f1e3-423a-9373-25fb070862c0", "sighting--55197471-149c-4736-ae83-1be7ae495593", "sighting--711652f5-8877-4008-9d86-71462b04e274", "sighting--2f90e314-4c10-42a2-95ba-cc7a9613ca84", "sighting--f2a37164-65ec-4d93-b525-2080a9a996c3", "sighting--128ab511-dbb3-4b2a-87dd-8c4e123d45ca", "sighting--2364be28-706f-42f4-8dd6-627831ab7d8c", "sighting--e073f7bc-7527-4ab8-95e4-58843789752c", "sighting--185035f4-1a82-492f-bb99-3a31911d624d", "sighting--865cd489-383a-4b7e-b0f9-6d3f01a206f4", "sighting--00100579-5e83-4c5f-bce2-bb69f1074848", "sighting--b89d2920-23a4-4c76-a13d-959e5284deb1", "sighting--fc2ba842-c19a-4fd3-8e05-94de33b0efab", "sighting--ba3e2f5d-1e18-4baa-a816-94135fb0b24c", "sighting--a266855a-b055-4ad5-8463-48bea56f1d00", "sighting--9ff43680-c600-48f1-990a-dbf3d618ae9f", "sighting--f97a63bf-618b-4880-af98-d482299be18e", "sighting--e5158e26-812b-4680-9565-df9f2088540a", "sighting--e517f439-09f0-4cd7-8a21-21957b6e4a28", "sighting--75773de2-9e94-4407-8f03-3f2998d4a7ff", "sighting--a22a4945-cab8-4307-b899-335bf8331165", "sighting--f165a017-55d5-4373-96f8-8b93770487cd", "sighting--dee230f0-3da8-4a1c-9a2d-42707bdb8a26", "sighting--c3342cbe-b4a5-4557-9b1c-580934879a56", "sighting--88c28cef-a91d-4dfe-aa36-9d0faf0d37f0", "sighting--9417c9a1-2088-4f65-b091-5d068c5fbd01", "sighting--1538e15c-f9f2-4802-8c66-99fc04c5be2f", "sighting--57947f59-db1f-41fa-b9bd-d5aa866e6a9c", "sighting--47e067a8-31d7-4c6a-bc77-26a601685769", "sighting--b5f8478a-2273-480f-b9df-609d492ed2d8", "sighting--1a71b8e8-2558-421a-8339-20bbe3615006", "sighting--5e3c40dc-d58e-44b6-94dd-d9e738503d90", "sighting--64a8fbc5-6bad-4fe4-821d-8e22e2352915", "sighting--80254e04-5f0c-44c3-bf1f-a4b5771cc0ab", "sighting--97ee0600-f45f-41ec-8c33-380055a9b135", "sighting--efb48054-06ec-4afd-8798-4b186c0f920b", "sighting--1ab9b64b-a9b2-4f9c-bc7c-3c71982a4913", "sighting--7d456cfc-271e-4848-94d9-9f45eccc4385", "sighting--5cbfa27a-8a24-4350-8ae2-9c6bbccd5bee", "sighting--edad3247-3562-4c0c-b1ab-1eb8900cf690", "sighting--f18d6326-55f3-49e4-9631-a77a4599914e", "sighting--bf1a2ea5-01cf-4f3e-a9cb-6ed7d9c98031", "sighting--8410bbe9-59d1-42f0-a527-67e31fe89aeb", "sighting--cb2de42a-0b91-418d-83b2-25da5ab8f10e", "sighting--cb2c2afd-91b3-41ae-a738-892dd2de9f60", "sighting--d38f84dc-f4e7-469b-a92c-da54c041eb72", "sighting--1f43d103-3ed4-4a13-9b52-130d40e66b15", "sighting--c165da1b-c884-42e1-8384-08ff03f1f24c", "sighting--2d833a85-4de0-48ef-92bb-7877d94ebb43", "sighting--5d5bcc03-c7aa-47f4-9231-358cf5e73e40", "sighting--e3ca1f73-f9b3-475b-9338-2558d5c181dc", "sighting--4c71c9e5-1ba9-49ca-939b-b1799261668c", "sighting--5cc7dcca-530a-4d34-a0b4-1e835b1b69aa", "sighting--6ccac015-4335-49c9-ab33-8519bfd39503", "sighting--89d48d31-7490-48be-b0b1-424a2dd95bcf", "sighting--c7d6820d-10f8-4622-9fa0-159e70c11697", "sighting--88c8fc79-866d-4567-b890-0a894547fd5f", "sighting--1b9e8e5f-66cb-4ff1-93ea-52a8062445ec", "sighting--ac9b9cde-66b6-47d1-bc12-3c195a73e107", "sighting--92b44cf9-b9b2-4522-bb6c-d7c9b70f1688", "sighting--3e2ea2e8-37b2-4539-9dd3-e6e37c292cbf", "sighting--6f4803fa-3619-4c64-87aa-a850a4e6df56", "sighting--32e21b34-f65c-4961-89ff-b612b380bae5", "sighting--411096b9-19f1-487a-8f12-32cbb3a52781", "sighting--c156d432-93c6-4998-bc1d-9f3f49279fa0", "sighting--0ba8344b-75b3-447b-876a-0f0b3ac1cf8a", "sighting--420b4067-da4c-4217-9818-2dc8aae3a697", "sighting--b9e08e84-8290-40af-8ac8-7e95be35fad9", "sighting--ee4b2ac2-d4c4-45e5-be7e-288b353362de", "sighting--550e5160-1f7e-474d-abd6-0f4478976568", "sighting--86e49ab9-6e9b-42d4-9017-907413c37a4d", "sighting--6239a649-58ec-40d1-8f09-319fcbc9ca96", "sighting--298880cb-38b4-4ecc-8ba2-ad989a546ea2", "sighting--194a6b99-1922-4210-9661-20b6fa86fb35", "sighting--3f20783a-069b-4a54-90cf-f2e7215f8b66", "sighting--a8058f78-9c57-42c2-827a-d3cc7d1de5fc", "sighting--69e6d3ff-a935-49a9-b60d-27dbee6bd723", "sighting--ee9d1d78-6051-48ee-87ec-3623f2003a02", "sighting--3ab5510a-52c7-4d8d-9db6-f4b49d4b4dd2", "sighting--1aa8ac4f-e1b9-4310-a3c2-7f7df3ade726", "sighting--e58087a6-b7d8-464b-b985-f949c6132c3e", "sighting--fa74621e-3374-4a68-9fea-be05c8a13a0c", "sighting--e0700118-de1f-4727-8c65-cfe988dc3b8a", "sighting--71c23a51-c1bb-4bc9-aeaf-2a4b96a9ef27", "sighting--1819636d-11b0-49de-9f0a-12af780bf0a8", "sighting--d063cdab-b396-4882-ab8f-10b8aec76d93", "sighting--57ac217b-df01-48dd-a788-0634c706acea", "sighting--1556ed2e-9d49-46e3-b9c8-9b8614494051", "sighting--2cd1ad4d-dd7c-4b20-b74b-05c2e6f12239", "sighting--6d25bc7f-7747-4627-8f32-7469d149b4ac", "sighting--f2f1d6a3-0319-419a-946c-7f1a2dd1cd16", "sighting--f0aed113-10f6-4d88-a3d2-c7380a7a77a7", "sighting--f93b4f6d-9f16-49ca-b5b3-6ff5c4836faa", "sighting--ec7ca469-20c6-4ad0-bfa7-6183954b3c33", "sighting--96d38585-049e-4d80-be4b-a27550f1c57a", "sighting--d802c1e0-5e38-4631-aa86-ed1e2e9b0dc7", "sighting--5f1a1565-ac8f-4512-b4cc-9848aeaebb23", "sighting--aaf7ae14-86f5-4c38-b7c5-fa25f34495bb", "sighting--b96952d1-2a6c-4287-8c57-e63a1517f26b", "sighting--5b7cf014-dcaa-4256-99f4-d50a3dd21e76", "sighting--9b29b5fe-9003-4a3a-a866-6d79d9a6400e", "sighting--9d14b696-73ab-4446-995e-b98d016b9b28", "sighting--cf6dd4b0-5978-492b-a987-143028e9e9b3", "sighting--f59279dd-9fb2-4c16-bad5-f1e60cf62479", "sighting--8304c715-e7ed-4608-b34c-843b18c1ebf6", "sighting--fb5e4f86-33c4-4248-b2e2-d8d78906813d", "sighting--031db106-f357-4d56-ab68-eb7d1d442908", "sighting--228fc0a7-532b-4d48-b1b9-4a85362da0bb", "sighting--32871b5e-39b8-400c-a4f4-0c690d929869", "sighting--d18a33f6-12cc-4933-b838-e4396a0266d8", "sighting--3a9f6d06-5a8f-44ce-b9c0-7f9fb064faaf", "sighting--5c07b4df-7074-4180-aaa5-5c2428f49fe7", "sighting--4ba6f4b5-b50f-401a-9c3f-558f00053d44", "sighting--2bc2ab28-d18c-4eb1-8847-8fee3ecf7bfc", "sighting--fa4b8977-f343-405f-890b-cc397e6b6c66", "sighting--75ec7b56-d5a1-48b9-a68b-1d937767e39a", "sighting--23a242dd-2802-4b6f-a137-dbb77b10f579", "sighting--556e5c7a-4820-47c7-9f42-46bfb4714c73", "sighting--bc0b7299-a3e3-4e7b-bfdd-eb25e9f82343", "sighting--6818527b-c8e2-4b85-8acf-8f3ab67da4a0", "sighting--bc3ff16e-f5ce-44ce-9ce6-a9023f49ba6a", "sighting--781b0bfe-dd82-4030-a99e-27acced1b778", "sighting--b47ea336-d14e-472d-a5c9-0bdd211da406", "sighting--f10b25b7-303f-4b22-986c-e26ad9573f4a", "sighting--b639e4c8-7515-47b7-9216-8f42a6a9092d", "sighting--b1155e6b-fd42-4c91-96bd-c9b606652443", "sighting--3fcd07e8-69bd-4939-96ec-b4fdb43ab3e7", "sighting--45e0cfd9-2a88-4ab1-b979-b9c916023e77", "sighting--a7ed2584-6987-4558-b910-76d905bf89c9", "sighting--de51c98c-f285-4ec5-81b2-d98dbf8f1ebd", "sighting--43e1a871-372d-47d4-9024-bccfdbcf6f44", "sighting--521506e5-b200-4e22-9e6f-258ef8997390", "sighting--e782aadb-3a51-440b-94f9-3250de0b8e9e", "sighting--b0f194f6-2126-42a9-b846-4ffb6e211ad4", "sighting--6acce010-dcb7-4a4a-adb6-5b8574a38211", "sighting--30f0e486-965d-4671-b532-67245bcb2ab0", "sighting--96c12c94-7e85-4df2-bf94-e8f07f3d6d18", "sighting--06586d64-19cf-48fd-8eb2-21babb782328", "sighting--1a5893a6-7d97-4c81-88c3-04a9d593e6a8", "sighting--ba8c2c8a-35ca-4483-9b93-ed701c1215dc", "sighting--81327794-0695-49b6-acc3-794625a1b919", "sighting--f271c265-b37f-42ed-b12e-7e09446313ac", "sighting--3c7a1636-f1de-4684-9954-2f1a0151fbae", "sighting--a55efa24-e378-4752-ba99-b8f52550709b", "sighting--6bcc7712-7a66-4c1c-b200-f2ae26b0599f", "sighting--82f47b73-16fa-4209-a77b-a029b75d60e5", "sighting--14fad0a0-ed42-4073-bf5d-3c76ec74cf1d", "sighting--b02171a4-2691-4f2e-b96a-4489039a00ab", "sighting--374777c0-196e-4291-a96c-b08a8703e98a", "sighting--bfdd025d-61fc-42a6-9b71-499b88dcfe9e", "sighting--c3ea4ef9-7557-4a5c-a128-3eb4e1201863", "sighting--c79605e3-96bd-43c8-bb97-dcd6a446ee04", "sighting--74688fa8-537c-4a0f-be69-6c3fb06c65f1", "sighting--6b5c1fb8-1d01-46ab-a0b9-f933c5c7eb37", "sighting--9e1fce46-1ceb-4952-a7fe-280679608283", "sighting--6d6a379a-caf6-4150-8ed7-d23a75e53622", "sighting--1d09144f-6b92-4d00-bf06-5d108c31a017", "sighting--ffeffa41-fd7d-4028-8e69-83b25ae0b8db", "sighting--755b0741-3c15-45f6-9688-ff2de3bd6932", "sighting--8f7b6ca4-b17f-4a1f-a138-cf1702d07680", "sighting--767242da-00af-4d93-8b70-859cd188beb9", "sighting--baea3497-5787-494f-b4f6-8cf6377f7227", "sighting--87468d86-b798-485a-91d0-66361e2aad99", "sighting--0dc05b9f-b735-4e72-83f5-30aa58908f26", "sighting--4f935fad-98c1-4546-9901-88108a946e0e", "sighting--393f109e-3158-4445-961c-c28af36e3470", "sighting--4283119b-5c29-445d-8a22-3cbbfcd019e2", "sighting--ae7fb8c9-d18a-4e3a-b6f5-52c6481fb335", "sighting--c8f42f9b-2f9d-487d-960b-c6a1a90418e0", "sighting--e9f38c4a-bc56-4fb1-a1f5-f3958627022a", "sighting--93808374-58c1-4423-b49e-8f62c87fe695", "sighting--5a9e3003-cdb3-42cc-ac3f-babf3a28f5d0", "sighting--0a93faee-8c23-4c1b-9f71-b5021e30ff8c", "sighting--a77ac55d-b89e-4cdf-a6f0-f952bcd66b70", "sighting--dddfbac7-dd69-4136-8c1b-1b7d193bdc02", "sighting--1e832eb8-161d-440c-bbdd-1d86df103895", "sighting--5a795b05-7124-4902-b150-00d546a040f0", "sighting--81979b83-d896-43c6-9dbb-1770d3e042a3", "sighting--3540cb70-6997-4865-9584-5d4b1000cbc3", "sighting--6b04eef0-7e5b-4974-ac04-56e5e4901bc1", "sighting--8c4ef6f1-0e93-4b54-b416-e9f3d3333f0b", "sighting--f2697f36-b6d7-44ee-beb4-8cc99d0f97b6", "sighting--013df2e3-1b6d-46bb-9277-0190f8d02209", "sighting--557bda5b-7668-47b8-aafd-f3e1be81ce8e", "sighting--5fadf795-9f6a-4571-b05e-d405cf9ae1bf", "sighting--ddd677c0-a1b7-4191-bcf2-a4124bfd4642", "sighting--7fc33269-0dab-43c9-badb-75045b0f86f8", "sighting--943c46de-36a5-4ead-86eb-51b58c32a003", "sighting--ddf7b95e-31de-434f-ab9a-6d2453c577d7", "sighting--f5395428-ac7c-4eb9-8944-8a8ae2d340d4", "sighting--c7dea9d6-1bed-4645-a7b1-4ef6d2a1638e", "sighting--deb3baca-ea13-4088-ac87-6db5ac75e434", "sighting--ab04050d-8dca-46ad-a4e8-7b0e4b678b57", "sighting--58fe661a-9dfe-4838-94e1-3b8a8bec6fc7", "sighting--12b69c85-5118-4bb7-a686-bc4e7eb8b616", "sighting--332f9b83-1d02-43e6-a86b-5647c1a23717", "sighting--24c5dd90-e76e-46c7-bc2c-e594a21dec4a", "sighting--1beadf97-5b64-40e5-9852-9eb42bc9bbc1", "sighting--13126898-890b-48e4-8704-1b66dcbd2c51", "sighting--d183bf60-6a4b-4093-9dc8-886d1804e2c9", "sighting--3c6667bd-06bb-4f4e-9201-a3d2dff58528", "sighting--1cafc555-344d-4e46-9fdc-3b6c7d277ba9", "sighting--dbfc03d3-bf30-4bb4-9a36-dacfe74aae5b", "sighting--78d86fe2-16a5-4141-8c65-231479858be4", "sighting--af901443-bade-4878-8553-3556a4786880", "sighting--8788aa9d-80e9-4581-a943-79c5ba3f3723", "sighting--33d6e896-7bc6-4cca-bdfc-aceffd27d9a0", "sighting--a84a4511-3c57-4c89-bdac-6bc9d8dbc208", "sighting--55578010-fb58-4fc0-ac17-31866e621c10", "sighting--c152154d-f9b3-4b40-bd2a-42194b803e59", "sighting--870585a6-1296-40b3-8ca1-eefdcfbeb676", "sighting--d9019615-4e24-4d32-9cc4-a53ff5f379bd", "sighting--b08248c4-b071-4cd1-adca-52f8074f0821", "sighting--45c1cb74-6803-45fa-a4a1-c724b7f84539", "sighting--1364421b-af82-476a-8a6f-a42dc2f447e0", "sighting--f84c8980-6339-47bd-b871-f8595216c7bb", "sighting--e6f1a3e0-f2e8-4146-acb6-7270ea3848a0", "sighting--44608b18-cbb4-4705-a720-f4822f451a06", "sighting--ddcae7ad-e7a7-4fe7-a063-8ed735cd9fef", "sighting--33eb5d81-807e-485c-bee6-b976058f9fd2", "sighting--bfd417c3-2a59-4e37-bfe5-0df78c3ce6e5", "sighting--86e54c85-979d-4d20-a419-5efc9e3af038", "sighting--bc91b1dc-5884-4da5-8246-de1c87e276fe", "sighting--b1501f96-7cc5-414f-a306-03bd927d1c04", "sighting--3a530433-8a26-4743-8460-612088a896e7", "sighting--5c88e712-23f5-4195-9cff-dc4cb2ada3e7", "sighting--23d47414-ef63-4f15-a034-21f2f73f0782", "sighting--8ae85669-06f9-4a53-a827-99d7a6a33f78", "sighting--23317dea-d8e2-439a-bf09-ec736f32ea64", "sighting--6eb4fd80-df66-4db1-ad74-1a01c71a4cf1", "sighting--2aaf6698-1b8e-46cf-874e-10e5801d2283", "sighting--3e18b2a1-cb24-4817-9549-bcd80a278ba0", "sighting--8dcf8bfc-8e18-40b4-a5de-91a1182a3556", "sighting--02815586-9720-49a4-98fc-4eee378eecac", "sighting--f72fe211-ab54-4372-ba14-cfd65cb8f6bb", "sighting--a7c0ff67-2008-4a8f-befb-619b13cb1f55", "sighting--585f5b19-4bfe-453e-81e9-1f78f136bbce", "sighting--7c82da3b-1bb4-420c-b846-93751d18714c", "sighting--ced023c8-0ad8-4ec2-973c-954b86be8e9a", "sighting--6c35911f-aa5a-4a2f-965c-11b174537add", "sighting--a96ad3cc-b5c4-49f9-883e-094d84bbbe31", "sighting--24bb77e0-a936-4f88-a8e7-fcafd2d6a0e6", "sighting--225fa7f0-8c63-4cf3-b72e-95f35769d9d3", "sighting--09bb9852-9ed0-45d2-a684-1c917d350b65", "sighting--04e3dc9a-977c-4d6a-87b3-80949a8daff9", "sighting--907b5d75-2ce9-42f7-8a0e-72258f045647", "sighting--87ab34b6-f8c7-4fdb-abcf-c91b7a393440", "sighting--14ee3f6c-0140-4cdf-987d-a3739180171f", "sighting--f10cebab-6c22-40c2-83cd-86af0f98d216", "sighting--a2aaab93-a597-426c-9d5a-eddcabe03723", "sighting--7e6e152c-6cf7-40ab-81c1-8b99d28101c8", "sighting--eea800b5-a71a-4140-a6cf-28cd9bd7525c", "sighting--01fbeae4-a064-4c83-83cc-abd0d5e63416", "sighting--987c075a-4c5a-433a-a619-c7b61dba8115", "sighting--e8307565-5e4b-4a40-b72c-77912ad7fdf7", "sighting--a40f0d93-5106-4224-8a40-daede294709f", "sighting--809925b0-ff88-43ff-92a9-c466a6c91cc7", "sighting--52a5b231-9efa-47fa-8f89-c229867ff71e", "sighting--fb671f11-e11b-4197-b770-00cb5b46b02a", "sighting--3a76d04b-5bca-430a-b5c5-25966ca8929d", "sighting--91d2d594-ed70-4518-bb1b-e5a33b4e72cc", "sighting--a33a4cd1-2072-4c93-922a-7065f6bfec6a", "sighting--188482d9-2f7a-43f8-899d-1ad58983aaa2", "sighting--56141dd7-0eab-4ef0-9d39-e21a7fc3f596", "sighting--6968c5e1-cd62-4d72-aef8-c8fa51a4c0d0", "sighting--48a9c078-8d40-4026-a10f-5c46934602c4", "sighting--3e3b1d13-681d-450c-a72c-7336c3717f02", "sighting--ea4a7679-a9a5-41bd-9668-12c2653e81ce", "sighting--28c9e276-9368-4d5a-af9a-7dbf1fbca311", "sighting--63df10b7-56f5-443a-96aa-e24d8fd54b80", "sighting--ecf64e20-0e06-492d-8bff-1c6fe4e57638", "sighting--39cbc648-15eb-4758-9d9d-9f673208033b", "sighting--26643479-dfa7-415c-b0bd-7b40e1cd5c12", "sighting--7af27416-0d66-4668-bb61-53de208119cb", "sighting--c3375b9a-62f8-44f4-b413-c0c950840e60", "sighting--fbf1c160-f45a-489e-a6ab-77cd7a54b0c3", "sighting--bb2bf995-5bd2-43fe-9e33-83fc3a0095fe", "sighting--c9d4acff-ab6c-4f00-9a42-6df07d5f7601", "sighting--805d2b0f-ccf7-4438-ac82-09a1211aa755", "sighting--9148e03c-dbbb-473b-9ea4-5164cc09e91f", "sighting--2f3f5c1e-5362-4ac7-b671-2c95c694e828", "sighting--773bc222-7a28-4e4c-9442-93be146cf39e", "sighting--dd8276d8-f575-4504-b367-c6e1a19e669f", "sighting--472f4c27-9264-4400-980e-b454e2c6e868", "sighting--c80a75ef-57f6-4e66-94ed-91f0ccc6378c", "sighting--c6dde0ba-d7d8-40a4-afca-65c197df6305", "sighting--6aaef7d1-7da6-4ec3-a539-e2b86830fe1f", "sighting--e369304c-052e-4ecb-9e10-c6bf84b99374", "sighting--0ad46773-5481-4c3e-a088-7720508e8da5", "sighting--2e998e9c-227c-406f-9872-4655b9e8ddb0", "sighting--6e407c3b-4352-4b12-85d2-f17b45f7db57", "sighting--ae1bb73f-7a06-4227-98e0-24c659d2dc49", "sighting--e96c9c3a-5bea-4127-ba9c-65ecea5f059a", "sighting--19608def-7152-4daf-a49d-06fa798d4cad", "sighting--921bdf3d-fd7d-482f-b7c4-09d0918a84c6", "sighting--b92b5c9e-013b-46c2-b2a2-6f94db565281", "sighting--5e8c5150-1546-4314-94b0-54165a49b2f0", "sighting--b2edfaa2-fc73-4787-91e8-2dbd1378207b", "sighting--54025287-2423-473a-bdc1-3353d4058ed2"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-28T11:00:06.258Z", "modified": "2026-07-28T11:00:06.258Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}